001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:47 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:47 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 191.662946] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:12:47 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a00", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:47 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000001340)={&(0x7f0000001300)=[0x0, 0x0, 0x0], 0x3}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x6, 0x2, 0x8, 0x5, "0347efa38d119432b4ad74244f41224cc855f7cd41936c73214c1958e597b3018937a181a673f61344fc3c86", 0x2}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r5 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000001280)={r4, r5, 0x3ff, 0x6, &(0x7f0000000180)="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", 0x7, 0x0, 0x0, 0x3f, 0x4, 0x5, 0x7, "cd4df6fd68b782130657"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/31 15:12:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f000028fff7)='/dev/sg#\x00', 0xffffffffffffffff, 0x10300) msgget(0x2, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000740)=""/223, 0xdf) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000100), &(0x7f0000001140)=0x4) r1 = accept4$nfc_llcp(r0, &(0x7f0000000fc0), &(0x7f0000000080)=0x60, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, "386aea20273dc03c3d18dd0dbd4a0ca15f9f580393cc4ec3b8ee256b9aa630224ba64c6ff43ee01d2996c914"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "eda422cd37591b3a5a7a683380f7e0b9e790c6b72cd0a4f3342f7431c1699a305ca3091bb2320e8df4e298a2cca26637866a68c1426ffbd8a6c7da1d8ea77d9d", &(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x13}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c0044dff, &(0x7f0000000000)=0x1ffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000240)=0xa66f) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000500)="d3238eea76b0470531092a0a77b0b49789a0fc97b8f8b9e23a2a5a5a0c169ed6e83480b4801dbf79db3527904ee3128c05ce2806e210237c36b88ceabe99d8784860e5d0e91fe33d38d0133e056cdd1e2910d57fc5eb1b23db3b60a7077ff33bb6c7445cd258ee25f9187269c22d1ed05acb2b9b599bd285b692257a631754", 0x7f, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="ed", 0x1}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x40a81) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000440)={0xfffffffffffffff7}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) write$fuse(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x8c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005fd8)={'vcan0\x00'}) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000380)=0x346000000, 0x4) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000580)) open_by_handle_at(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1f00000003000000a8c67324dbabf13fec6476cea2f0d26724fa663431b7c2"], 0x2802) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'bcsh0\x00', 0x600}) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000300)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 2018/03/31 15:12:47 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x0, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) [ 191.946419] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:12:48 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(0x0, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:12:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r5, 0x300, 0x70bd2d, 0xff, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2e}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xbf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 2018/03/31 15:12:48 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:48 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)={0x0, 0xcf, "e34d2e736f0f6b13cef4bfe7bd3ea1c983527e22a0b3acfef5c3cb38c8b1232e77de7d448ecac4a029435b2aa09f0f61bac1e465917c6b8f754bb625638179c009683eb65597a9c9af8eb50b7c729dce0f0ab4f7825f6c87c27e164976ebe3cdd90379f1f48743ba9a2ad531cc47dab08ff61979ab8ec4d4c8c54aa454c5a13f6ea693ee7f6bf9494704056e072f13be52628274c7900bf4ef12123497b6e51023581ad74de1201288b273415da8823196b73a58d84b40f0fad5998352429f7e522a28e68d2ad11455824f33e374da"}) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0) 2018/03/31 15:12:48 executing program 3: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x101400) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffe00, 0x5, 0xc0, &(0x7f0000ffc000/0x4000)=nil, 0x7}) 2018/03/31 15:12:48 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3], 0x1, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000008000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000000000000697064647030000000000000000000007663616e30000000000000000000000069705f7674693000000000000000000073797a6b616c6c6572310000000000000180c20000000000000000000180c2000000000000000000000070000000f000000040010000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000006772657461703000000000000000000065716c000000000000000000000000006966623000000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaaaa000000000000000070000000a0000000d8000000434f4e4e5345434d41524b000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000001fce0b0bce0b00aced3e3152fc5b3f64049b6ff0d81edd4976662397c7045ccbd81cc2eed1d62966aee97f0eddce60c26561567164e0411be7ed90d7d414d08cceddfd077fb3ae9ae66f12206e9b0f5a5210dc040babd70e3e77f2873a4038f349498cea1f81d9da17a22022f6fcdc7e5c9e7f5e2f8cfdf1bb763a9010cc25e5afdb799fa7c72ca4b3c6de3536af37bf16ad7da6b9c674f7bb5cadfaf42c33e45e6668aa4b524c14d80015731658ddee60b733165311388a186c5869ac58d90cf242068f4c30eaf71cbb77492bf20c54d6f75"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:48 executing program 0 (fault-call:3 fault-nth:26): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:48 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 192.170868] FAULT_INJECTION: forcing a failure. [ 192.170868] name failslab, interval 1, probability 0, space 0, times 0 [ 192.182191] CPU: 1 PID: 13538 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 192.189551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.198906] Call Trace: [ 192.201495] dump_stack+0x194/0x24d [ 192.205124] ? arch_local_irq_restore+0x53/0x53 [ 192.209806] should_fail+0x8c0/0xa40 [ 192.213520] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 192.215199] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 192.218613] ? kernfs_add_one+0x50/0x450 [ 192.218627] ? rb_first_postorder+0xa0/0xa0 [ 192.218636] ? kernfs_add_one+0x50/0x450 [ 192.218648] ? trace_event_raw_event_lock+0x340/0x340 [ 192.218660] ? trace_hardirqs_off+0x10/0x10 [ 192.251282] ? find_held_lock+0x35/0x1d0 [ 192.255345] ? __lock_is_held+0xb6/0x140 [ 192.259412] ? check_same_owner+0x320/0x320 [ 192.263730] ? lock_downgrade+0x980/0x980 [ 192.267876] ? rcu_note_context_switch+0x710/0x710 [ 192.272805] should_failslab+0xec/0x120 [ 192.276775] __kmalloc_track_caller+0x5f/0x760 [ 192.281356] ? idr_alloc_cyclic+0x1d6/0x320 [ 192.285674] ? kstrdup_const+0x39/0x50 [ 192.289555] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 192.294392] kstrdup+0x39/0x70 [ 192.297576] kstrdup_const+0x39/0x50 [ 192.301285] __kernfs_new_node+0xa2/0x570 [ 192.305426] ? kernfs_dop_revalidate+0x380/0x380 [ 192.310173] ? mark_held_locks+0xaf/0x100 [ 192.314320] ? retint_kernel+0x10/0x10 [ 192.318201] ? kasan_check_read+0x11/0x20 [ 192.322341] ? read_word_at_a_time+0x12/0x20 [ 192.326740] ? strscpy+0x186/0x500 [ 192.330287] kernfs_new_node+0x80/0xe0 [ 192.334177] __kernfs_create_file+0x4b/0x320 [ 192.338585] cgroup_addrm_files+0x3c5/0xa70 [ 192.342904] ? cgroup_file_write+0x710/0x710 [ 192.347299] ? getrawmonotonic64+0x460/0x460 [ 192.351690] ? kernfs_active+0x92/0x160 [ 192.355645] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 192.360552] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 192.365028] ? cgroup_file_name+0x1d0/0x1d0 [ 192.369330] css_populate_dir+0x340/0x420 [ 192.373458] cgroup_mkdir+0x553/0xfc0 [ 192.377236] ? __lock_is_held+0xb6/0x140 [ 192.381276] ? cgroup_destroy_locked+0x750/0x750 [ 192.386010] ? rcu_read_lock_sched_held+0x108/0x120 [ 192.391008] ? kmem_cache_free+0x258/0x2a0 [ 192.395225] ? set_nlink+0xc1/0x160 [ 192.398829] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 192.403733] ? generic_permission+0x105/0x3c0 [ 192.408202] ? cgroup_destroy_locked+0x750/0x750 [ 192.412933] kernfs_iop_mkdir+0x153/0x1e0 [ 192.417060] vfs_mkdir+0x390/0x600 [ 192.420577] SyS_mkdirat+0x22b/0x2b0 [ 192.424272] ? SyS_mknod+0x480/0x480 [ 192.427963] ? trace_hardirqs_on+0xd/0x10 [ 192.432087] ? do_syscall_64+0xb7/0x940 [ 192.436036] ? SyS_mknod+0x480/0x480 [ 192.439727] do_syscall_64+0x281/0x940 [ 192.443589] ? vmalloc_sync_all+0x30/0x30 [ 192.447721] ? _raw_spin_unlock_irq+0x27/0x70 [ 192.452192] ? finish_task_switch+0x1c1/0x7e0 [ 192.456661] ? syscall_return_slowpath+0x550/0x550 [ 192.461563] ? syscall_return_slowpath+0x2ac/0x550 [ 192.466466] ? prepare_exit_to_usermode+0x350/0x350 [ 192.471456] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 192.476797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.482148] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.487316] RIP: 0033:0x454e79 [ 192.490483] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 192.498167] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 192.505417] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 192.512662] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/03/31 15:12:48 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3], 0x1, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:48 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4c4, 0x200300) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') fstat(r0, &(0x7f0000000240)) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000002bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4080900}, 0xc, &(0x7f00000001c0)={&(0x7f0000002c00)=ANY=[@ANYBLOB="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", @ANYBLOB="531525d7948882a439c0b95a1a042e6bfd9e70bb2dc3bc36f582c046257ef4e384db15f5c723a9f5b2934c2f2fdfda9ca1616dd8bc80dd567065b5d193a485cb8628e5d26b065645b28f8b62f321d8ef323c808e00b7cf87f35f31463cb6fbd4e78774f9c524ecbd86e128eadb93d97fa66082bd27b705344211a1574f82e6081e6d", @ANYBLOB="010225bd7000010000001000000068000200140001000000000000000000000000000000000014000100000000010000000000000000000000003b00df76081400010000000000000000000000ffffe00000010800090000801400080002004e22000008000600d11016640800090008008f0008000300070000000800050009000000080005001000000034000100140003000601000000000000000000000000000108000100df0000001400030000000000000000000000ffffffffffff"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x4014) r3 = open(&(0x7f0000000180)='./file0\x00', 0xa00, 0x134) readv(r3, &(0x7f0000001780)=[{&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f0000000140)}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/188, 0xbc}], 0x6) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100)={0x80}, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) fcntl$getownex(r2, 0x10, &(0x7f00000002c0)={0x0, 0x0}) fcntl$setown(r0, 0x8, r4) 2018/03/31 15:12:48 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 192.519911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 192.527156] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000001a [ 192.534636] cgroup: cgroup_addrm_files: failed to add cgroup.stat, err=-12 2018/03/31 15:12:48 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 192.611782] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:12:48 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000000)={0x1c, 0x1d, 0x301, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic="da"]}]}, 0x1c}, 0x1}, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) r2 = memfd_create(&(0x7f00000002c0)='wlan0vboxnet0vmnet1keyring-\x00', 0x3) bind$llc(r2, &(0x7f0000000300)={0x1a, 0x320, 0xffffffff00000001, 0x8000, 0x4, 0x6b05, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) get_robust_list(r1, &(0x7f0000000240)=&(0x7f0000000200)={&(0x7f0000000140), 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, &(0x7f0000000280)=0x18) 2018/03/31 15:12:48 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:48 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) symlinkat(&(0x7f0000000800)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:49 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x0) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:12:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3], 0x1, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:49 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:49 executing program 0 (fault-call:3 fault-nth:27): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) splice(r1, &(0x7f00000000c0)=0x3e, r1, &(0x7f0000000380), 0x80000000, 0xa) write$rdma_cm(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009eb300180000fa0000000000003426b382175e8def884fd07a59c50460d1f8fa1679cb93758a0fed488ef8e459ea931b34588c8dc8a6add637cc1d73acd6bc04b1f610f445891977a4783a700aed00ab232c8f93e5bcba8ff1bda7f97d89fc797f8ccd8b388a", @ANYBLOB="0200000000000000"], 0x71) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000070000000000000000000100000000"], 0x40) write$rdma_cm(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000400000fa0a00000000000000ff010000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000"], 0x40) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0xc}, 0x3f, 0x1, 0xfe, 0xa, 0x5, 0x3, 0x1000000009}, 0x20) bind$llc(r2, &(0x7f0000000500)={0x1a, 0x338, 0x9, 0x7f, 0x4, 0x9}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x4, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@remote, @loopback}, &(0x7f0000000080)=0xc) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=0x0) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000300)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x4, 0x6, 0x742777cd, 0x3, 0x7, 0x5, 0x9, 0x1, 0x10000, 0x100000000, 0x4000000000000000, 0x9, 0x5, 0xffff, 0x101, 0x1ff, 0xab77, 0x101, 0x3, 0x12ac, 0x9, 0x3, 0x81, 0x3, 0x1ff, 0x8, 0x200, 0x0, 0x9, 0x3, @perf_config_ext={0xff, 0x1ff}, 0xc80, 0xffffffff, 0x1f, 0x7, 0x401, 0x3a, 0x5}, r4, 0x8, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x5}, &(0x7f0000000480)=0x8) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000400)=r3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000580)={r5, 0xf6, "30b408b7778054309c57dc21094ed02acfff941f57e9fef845c13fa1a320733b3314fe0fb21911a4b20cde9a32ec990e254d0b7009af08cfd9ae825991f208f77e1d9553f21fa99bc47b6e1fa4b2f044b634226d414136bc92a6c24c6f604a49d4e021c843877a1bff110adb4ea6ca03b4f53ab2185511ef17d8c2b57d5f2dd20d94cbe4c1ca31aae8d62343ffe81e56cc759e4c3539ae7335c0d0584c8786e5458cd29a41e1b3c6e01639eb51c63d8bce214bc01b59955c7784ed52a010f9a918be46e9b40ef02143f64aa01dff889ef42e8db3811109f13888bf2571eaac725798998c0b8730dfcc46752f3063e5d6310835ca7a82"}, &(0x7f00000004c0)=0xfe) pwrite64(r0, &(0x7f0000001640)="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", 0x1000, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000180)={0x101, 0xffff, 0x7fffffff}) 2018/03/31 15:12:49 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) symlinkat(&(0x7f0000000800)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:49 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) 2018/03/31 15:12:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x400005, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) r6 = semget$private(0x0, 0xfc52aa2543f42395, 0x0) semctl$IPC_INFO(r6, 0x7, 0x3, &(0x7f0000000180)=""/178) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) getsockname$packet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) getpid() ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) [ 193.183288] FAULT_INJECTION: forcing a failure. [ 193.183288] name failslab, interval 1, probability 0, space 0, times 0 [ 193.194627] CPU: 0 PID: 13625 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 193.201989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.211341] Call Trace: [ 193.213930] dump_stack+0x194/0x24d [ 193.217557] ? arch_local_irq_restore+0x53/0x53 [ 193.222228] ? lock_release+0xa40/0xa40 [ 193.226208] should_fail+0x8c0/0xa40 [ 193.229928] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 193.235034] ? kernfs_add_one+0x50/0x450 [ 193.239443] ? rb_first_postorder+0xa0/0xa0 [ 193.243771] ? kernfs_add_one+0x50/0x450 [ 193.247831] ? save_stack+0x43/0xd0 [ 193.251459] ? kasan_kmalloc+0xad/0xe0 [ 193.255345] ? trace_hardirqs_off+0x10/0x10 [ 193.259665] ? find_held_lock+0x35/0x1d0 [ 193.263723] ? __lock_is_held+0xb6/0x140 [ 193.267794] ? check_same_owner+0x320/0x320 [ 193.272124] ? lock_downgrade+0x980/0x980 [ 193.276271] ? rcu_note_context_switch+0x710/0x710 2018/03/31 15:12:49 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) symlinkat(&(0x7f0000000800)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:49 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:49 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a00", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:49 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a00", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:49 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:49 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 193.281207] should_failslab+0xec/0x120 [ 193.285178] __kmalloc_track_caller+0x5f/0x760 [ 193.289767] ? idr_alloc_cyclic+0x1d6/0x320 [ 193.294097] ? kstrdup_const+0x39/0x50 [ 193.297988] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 193.302830] kstrdup+0x39/0x70 [ 193.306022] kstrdup_const+0x39/0x50 [ 193.309740] __kernfs_new_node+0xa2/0x570 [ 193.313902] ? kernfs_dop_revalidate+0x380/0x380 [ 193.318660] ? kasan_check_read+0x11/0x20 [ 193.322804] ? read_word_at_a_time+0x12/0x20 [ 193.327209] ? strscpy+0x186/0x500 2018/03/31 15:12:49 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 193.329438] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 193.330758] kernfs_new_node+0x80/0xe0 [ 193.330773] __kernfs_create_file+0x4b/0x320 [ 193.330790] cgroup_addrm_files+0x3c5/0xa70 [ 193.330805] ? cgroup_file_write+0x710/0x710 [ 193.330819] ? getrawmonotonic64+0x460/0x460 [ 193.362895] ? kernfs_active+0x92/0x160 [ 193.366874] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 193.371808] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 193.376300] ? cgroup_file_name+0x1d0/0x1d0 2018/03/31 15:12:49 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 193.380628] css_populate_dir+0x340/0x420 [ 193.384781] cgroup_mkdir+0x553/0xfc0 [ 193.388576] ? __lock_is_held+0xb6/0x140 [ 193.392636] ? cgroup_destroy_locked+0x750/0x750 [ 193.397389] ? rcu_read_lock_sched_held+0x108/0x120 [ 193.402400] ? kmem_cache_free+0x258/0x2a0 [ 193.406632] ? set_nlink+0xc1/0x160 [ 193.410255] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 193.415177] ? generic_permission+0x105/0x3c0 [ 193.419666] ? cgroup_destroy_locked+0x750/0x750 [ 193.424420] kernfs_iop_mkdir+0x153/0x1e0 [ 193.428565] vfs_mkdir+0x390/0x600 [ 193.432082] SyS_mkdirat+0x22b/0x2b0 [ 193.435774] ? SyS_mknod+0x480/0x480 [ 193.439472] ? trace_hardirqs_on+0xd/0x10 [ 193.443611] ? do_syscall_64+0xb7/0x940 [ 193.447569] ? SyS_mknod+0x480/0x480 [ 193.451267] do_syscall_64+0x281/0x940 [ 193.455136] ? vmalloc_sync_all+0x30/0x30 [ 193.459261] ? _raw_spin_unlock_irq+0x27/0x70 [ 193.463733] ? finish_task_switch+0x1c1/0x7e0 [ 193.468227] ? syscall_return_slowpath+0x550/0x550 [ 193.473144] ? syscall_return_slowpath+0x2ac/0x550 [ 193.478058] ? prepare_exit_to_usermode+0x350/0x350 [ 193.483066] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 193.488408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 193.493229] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 193.498399] RIP: 0033:0x454e79 [ 193.501572] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 193.509254] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 193.516507] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 193.523755] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 193.531011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 193.538266] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000001b [ 193.546105] cgroup: cgroup_addrm_files: failed to add cpu.stat, err=-12 2018/03/31 15:12:50 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x0) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:12:50 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x0], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:50 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:50 executing program 0 (fault-call:3 fault-nth:28): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/31 15:12:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000005c0)=0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000780)) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f00000007c0)="9acdf947edb4dc0fbe074b43f7ca8069bccd0bf3f04859c77cfc947033dc64d01118eb3fd5a4e2b2f3b24ef47fb9ea4dcd3a6a6e7f8d451113dc759f807a3048c53e27759376f286ca9fcafeb06bcfbda15d0ba3479a86d1775d8fc703d4251ff7c835a15ffd1a11b17092493eda4dd397ddf7540f7a5dd08650ef5cef2047e058c5d02542a9e6bbbd7d91f37e0a53d2d941d8d6626153f964379bca8f9d3c666bfb9db7d32b6798602e34cdbc987667437e86f3603e0789306516b14711d817ac3e30045c37afca507914e3c3", 0xcd) close(r0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x803, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000680)=r1) socket$inet6_sctp(0xa, 0x3, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000580)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000003bc0), 0xe4, &(0x7f0000003c00)=""/69, 0x45}}, {{&(0x7f0000003c80)=@nfc, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/119, 0x77}], 0x6, &(0x7f0000003e00)=""/158, 0x9e}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc\x00', 0x8000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r3, 0x28, &(0x7f00000006c0)}, 0x10) fanotify_mark(r5, 0x10, 0x8000010, r5, &(0x7f0000000340)='./file0\x00') r6 = open(&(0x7f0000a1cff8)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r6, 0x400, 0x1) syz_open_dev$sndmidi(&(0x7f0000000600)='/dev/snd/midiC#D#\x00', 0x0, 0x400000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00000002c0)=""/48) ioctl$KVM_DEASSIGN_DEV_IRQ(r5, 0x4040ae75, &(0x7f0000000700)={0x400, 0x1, 0x6}) r7 = memfd_create(&(0x7f0000000540)='\x00', 0x2) dup3(0xffffffffffffffff, r6, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000580)) clone(0x0, &(0x7f00000003c0)="5c6941a344f4f6e3bc7d6854a4587e2e278645fc41befda2f3df179bc883dd32871cfaf4a59bf397fd52b6f7685217d16d1b64f75ab2960c5043171995244b118e9510eece00a493f0b2f21119d801a9f56daa04a1a8114876b071353158594db119f9ce3eded5d7dc00e165851b7c2b452001a5eff5c405380ff888f4ad5b061ec82ef04723dca4867e3169337ef019e1c65340a830cf3f7c2ba58e803203d67735c967c56f32fa", &(0x7f0000000080), &(0x7f0000000480), &(0x7f00000004c0)="a3d092ded51dc27e668c174e1a3432f45c70879a75fd51f939f829aac2287fb16cda532629341dee84bfcf71283b52f8514cc247f5de8c10898f652a825dca57afb21ae7e058e1e103cc7522d436646c1c8773e2d923c98630db3c4e6a1f013426248c93c5bd20b7e3e51e32685f1136102a1b834af28030ff58ccdd") 2018/03/31 15:12:50 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) [ 194.193928] FAULT_INJECTION: forcing a failure. [ 194.193928] name failslab, interval 1, probability 0, space 0, times 0 [ 194.205273] CPU: 0 PID: 13697 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 194.212633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.221984] Call Trace: [ 194.224564] dump_stack+0x194/0x24d [ 194.228176] ? arch_local_irq_restore+0x53/0x53 [ 194.232832] should_fail+0x8c0/0xa40 [ 194.236528] ? kstrdup+0x39/0x70 [ 194.239889] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 194.244969] ? cgroup_mkdir+0x553/0xfc0 [ 194.248919] ? vfs_mkdir+0x390/0x600 [ 194.252611] ? SyS_mkdirat+0x22b/0x2b0 [ 194.256476] ? do_syscall_64+0x281/0x940 [ 194.260514] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 194.265859] ? find_held_lock+0x35/0x1d0 [ 194.269901] ? find_held_lock+0x35/0x1d0 [ 194.273942] ? __lock_is_held+0xb6/0x140 [ 194.277986] ? check_same_owner+0x320/0x320 [ 194.282292] ? rcu_note_context_switch+0x710/0x710 [ 194.287203] ? rcu_read_lock_sched_held+0x108/0x120 [ 194.292206] should_failslab+0xec/0x120 [ 194.296161] kmem_cache_alloc+0x47/0x760 [ 194.300199] ? memcpy+0x45/0x50 [ 194.303463] ? kstrdup+0x59/0x70 [ 194.306814] __kernfs_new_node+0xe2/0x570 [ 194.310942] ? kernfs_dop_revalidate+0x380/0x380 [ 194.315678] ? kasan_check_read+0x11/0x20 [ 194.319805] ? read_word_at_a_time+0x12/0x20 [ 194.324192] ? strscpy+0x186/0x500 [ 194.327718] kernfs_new_node+0x80/0xe0 [ 194.331589] __kernfs_create_file+0x4b/0x320 [ 194.335978] cgroup_addrm_files+0x3c5/0xa70 [ 194.340283] ? cgroup_file_write+0x710/0x710 [ 194.344675] ? getrawmonotonic64+0x460/0x460 [ 194.349063] ? kernfs_active+0x92/0x160 [ 194.353028] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 194.357935] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 194.362431] ? cgroup_file_name+0x1d0/0x1d0 [ 194.366740] css_populate_dir+0x340/0x420 [ 194.370869] cgroup_mkdir+0x553/0xfc0 [ 194.374646] ? __lock_is_held+0xb6/0x140 [ 194.378684] ? cgroup_destroy_locked+0x750/0x750 [ 194.383419] ? rcu_read_lock_sched_held+0x108/0x120 [ 194.388413] ? kmem_cache_free+0x258/0x2a0 [ 194.392636] ? set_nlink+0xc1/0x160 [ 194.396240] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 194.401149] ? generic_permission+0x105/0x3c0 [ 194.405625] ? cgroup_destroy_locked+0x750/0x750 [ 194.410360] kernfs_iop_mkdir+0x153/0x1e0 [ 194.414488] vfs_mkdir+0x390/0x600 [ 194.418007] SyS_mkdirat+0x22b/0x2b0 [ 194.421704] ? SyS_mknod+0x480/0x480 [ 194.425398] ? trace_hardirqs_on+0xd/0x10 [ 194.429526] ? do_syscall_64+0xb7/0x940 [ 194.433478] ? SyS_mknod+0x480/0x480 [ 194.437168] do_syscall_64+0x281/0x940 [ 194.441036] ? vmalloc_sync_all+0x30/0x30 [ 194.445170] ? _raw_spin_unlock_irq+0x27/0x70 [ 194.449644] ? finish_task_switch+0x1c1/0x7e0 [ 194.454119] ? syscall_return_slowpath+0x550/0x550 [ 194.459033] ? syscall_return_slowpath+0x2ac/0x550 [ 194.463955] ? prepare_exit_to_usermode+0x350/0x350 [ 194.468951] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 194.474294] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.479133] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 194.484301] RIP: 0033:0x454e79 [ 194.487466] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 194.495152] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 194.502396] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 194.509643] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 194.516888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 194.524133] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000001c [ 194.531574] cgroup: cgroup_addrm_files: failed to add cpu.stat, err=-12 2018/03/31 15:12:50 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 194.579514] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:12:50 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:50 executing program 0 (fault-call:3 fault-nth:29): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') [ 194.670655] FAULT_INJECTION: forcing a failure. [ 194.670655] name failslab, interval 1, probability 0, space 0, times 0 [ 194.682011] CPU: 1 PID: 13714 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 194.689372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.698729] Call Trace: [ 194.701322] dump_stack+0x194/0x24d [ 194.704958] ? arch_local_irq_restore+0x53/0x53 [ 194.709641] should_fail+0x8c0/0xa40 [ 194.713356] ? __save_stack_trace+0x7e/0xd0 [ 194.717681] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 194.722792] ? save_stack+0xa3/0xd0 [ 194.726426] ? save_stack+0x43/0xd0 [ 194.730057] ? find_held_lock+0x35/0x1d0 [ 194.734120] ? __lock_is_held+0xb6/0x140 [ 194.738191] ? check_same_owner+0x320/0x320 [ 194.742516] ? rcu_note_context_switch+0x710/0x710 [ 194.747442] should_failslab+0xec/0x120 [ 194.751394] __kmalloc+0x63/0x760 [ 194.754830] ? sched_create_group+0x22/0x70 [ 194.759126] ? kzalloc+0xf/0x20 [ 194.762381] kzalloc+0xf/0x20 [ 194.765462] alloc_fair_sched_group+0x5e/0x530 [ 194.770024] ? __lock_is_held+0xb6/0x140 [ 194.774068] sched_create_group+0x35/0x70 [ 194.778194] cpu_cgroup_css_alloc+0xe/0x30 [ 194.782415] cgroup_apply_control_enable+0x44d/0xbc0 [ 194.787505] ? cgroup_propagate_control+0x570/0x570 [ 194.792503] ? css_populate_dir+0x289/0x420 [ 194.796805] cgroup_mkdir+0x56f/0xfc0 [ 194.800580] ? __lock_is_held+0xb6/0x140 [ 194.804621] ? cgroup_destroy_locked+0x750/0x750 [ 194.809354] ? rcu_read_lock_sched_held+0x108/0x120 [ 194.814346] ? kmem_cache_free+0x258/0x2a0 [ 194.818557] ? set_nlink+0xc1/0x160 [ 194.822161] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 194.827067] ? generic_permission+0x105/0x3c0 [ 194.831541] ? cgroup_destroy_locked+0x750/0x750 [ 194.836277] kernfs_iop_mkdir+0x153/0x1e0 [ 194.840401] vfs_mkdir+0x390/0x600 [ 194.843917] SyS_mkdirat+0x22b/0x2b0 [ 194.847608] ? SyS_mknod+0x480/0x480 [ 194.851299] ? trace_hardirqs_on+0xd/0x10 [ 194.855424] ? do_syscall_64+0xb7/0x940 [ 194.859375] ? SyS_mknod+0x480/0x480 [ 194.863066] do_syscall_64+0x281/0x940 [ 194.866930] ? vmalloc_sync_all+0x30/0x30 [ 194.871055] ? _raw_spin_unlock_irq+0x27/0x70 [ 194.875525] ? finish_task_switch+0x1c1/0x7e0 [ 194.879996] ? syscall_return_slowpath+0x550/0x550 [ 194.884905] ? syscall_return_slowpath+0x2ac/0x550 [ 194.889813] ? prepare_exit_to_usermode+0x350/0x350 [ 194.894807] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 194.900149] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.904971] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 194.910136] RIP: 0033:0x454e79 [ 194.913299] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 2018/03/31 15:12:50 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a00", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x0], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e25, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xffffffffffffff80) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) 2018/03/31 15:12:50 executing program 3: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x2ad9ed40, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0x7, 0xf, 0x9, [@broadcast=0xffffffff, @empty, @multicast2=0xe0000002]}, @rr={0x7, 0x3}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f77a48", 0x0, "9a5cc6"}}}}}}, &(0x7f0000000180)) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20040, 0x80) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x800, 0x484200) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000300)='./file0\x00', 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x88c40, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f00000001c0)=""/199, &(0x7f0000000040)=0xc7) [ 194.920984] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 194.928228] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 194.935472] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 194.942717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 194.949960] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000001d 2018/03/31 15:12:51 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 195.077842] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:12:51 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x0) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:12:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x2e, &(0x7f0000000180)=""/73, &(0x7f00000000c0)=0x49) sendmmsg$alg(r4, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="2f9edf263c18ea7356303c09001492c3b4669a45abc2d131c7d81b65a8fffe600967a165e571dae99d42d1ff62d40eb30ef140e2a14ac16fb6dd4d81646665137fb3a92f57a3d109094a53ac6ef0bdfcaffca40bd27051110cbacb186e6e649a340859066d941fb6e38ad5fa76b7bb58be52cda4c23b", 0x76}], 0x1, &(0x7f00000002c0)=[@iv={0x78, 0x117, 0x2, 0x5e, "2524576a2b87b35a21f01982466c264169ce775e5d44a73308caae8b113e751429dc3fa3f2cbe2f31a5745e2b57c24de7e925bec06400cb9783a3317becf3b8a3500b5f8f4fdd65f137cc0c1024f4d882faf9092199fd53a1d0e3b30cb3f"}, @iv={0xe8, 0x117, 0x2, 0xd0, "cc1526dc1a3841af7ccca5f8172fec5fa24789c5399516ffbaf94ace4c774b603fad7b33163443932a7c4c6d448b7a8a5771c2c81dbc5ab91d2ef06930fad1c13318dea689028593a9033530033a86e1ec2ef3b1cdf234da9901e9854273eab7ecb6ccc8d7bee4ca7cadb7f86de2662b91662ee44f26f42401066deb5ad8c42223fd15c39ab5809211b18011237d303e2337da79fcaebad1f24ffd8d34c67138b243e17d1d5edebb31e9ee5820d5148baa8444560bbed30673c6642d4434c5b683598bca8701939781b37da570762b2d"}], 0x160, 0x20000040}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="10438aa440baeab0fb48dc6284dabe1d3e51e33910a75535d67b5a732e4942e56a47f4702a9246504fa8981591940f5a76d72732699611495c93", 0x3a}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x60, 0x4000}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="bc621738b8a1b3b9", 0x8}, {&(0x7f0000000580)="2826440cb4b98e84fbe3943e053bf706642828ed1e07c2039c41fac4b8136d6cd69e061992ef6bf2537a8830dd599e7fc1e0d8332b7b72a3ff406847278af6d6ee49f2e77d8adc5d832e4c313deb79c31b97e1c436b5c0c92935fb2b55e3e348ea3fe3d93d2197e4e09e149f43cd389acf05c6d30cc1f7ef6f5d417f06f359a5366d5779f21097c409b5ed2aa945cf", 0x8f}, {&(0x7f0000000640)="97e034a740563ac72c0d6608d3c58a603c8e999c01712851e2e8ea0335f0f3ce609eb671a508b99aaa064715a3966155425e34ffc0615e2eb5941f63c42bd76e36daf90aa5ae934fcb1d5b439a6cb44c3b5c46d6b43c287567d36f39e5546044c4f9936574b110389063b44dc6acabedd9ce0d7b38fdb938", 0x78}, {&(0x7f00000006c0)="356274bb14dcb055f39c46d22d5a3600a27a3506362bb9f9f40344e3dc3bddf077905e0c859cc2fda8611bb5a4876979432a2827eaf70d4117e1a7af89d842d392c473f83b6168d449584052", 0x4c}, {&(0x7f0000000740)="dee86a602e55aabeec5914dd155c4accafc8a52f8a13e68370", 0x19}], 0x5, 0x0, 0x0, 0x40000}], 0x3, 0x8080) 2018/03/31 15:12:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x0], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:51 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x7f, &(0x7f0000000080)=0x4) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) 2018/03/31 15:12:51 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010", 0x96, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:51 executing program 0 (fault-call:3 fault-nth:30): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:51 executing program 3: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="17", 0x1, 0xfffffffffffffffe) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x100) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'ip6_vti0\x00', {0x4, 0x65, 0x8, "33078118251a", 0xfff}}) 2018/03/31 15:12:51 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 195.374722] FAULT_INJECTION: forcing a failure. [ 195.374722] name failslab, interval 1, probability 0, space 0, times 0 [ 195.386058] CPU: 1 PID: 13773 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 195.393418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.399588] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 195.402763] Call Trace: [ 195.402783] dump_stack+0x194/0x24d [ 195.402799] ? arch_local_irq_restore+0x53/0x53 [ 195.402823] should_fail+0x8c0/0xa40 [ 195.428069] ? __save_stack_trace+0x7e/0xd0 [ 195.432384] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 195.437481] ? save_stack+0xa3/0xd0 [ 195.441092] ? save_stack+0x43/0xd0 [ 195.444707] ? find_held_lock+0x35/0x1d0 [ 195.448753] ? __lock_is_held+0xb6/0x140 [ 195.452805] ? check_same_owner+0x320/0x320 [ 195.457109] ? rcu_note_context_switch+0x710/0x710 [ 195.462034] should_failslab+0xec/0x120 [ 195.465988] __kmalloc+0x63/0x760 [ 195.469423] ? sched_create_group+0x22/0x70 [ 195.473724] ? kzalloc+0xf/0x20 [ 195.476985] kzalloc+0xf/0x20 [ 195.480070] alloc_fair_sched_group+0x5e/0x530 [ 195.484630] ? __lock_is_held+0xb6/0x140 [ 195.488673] sched_create_group+0x35/0x70 [ 195.492800] cpu_cgroup_css_alloc+0xe/0x30 [ 195.497017] cgroup_apply_control_enable+0x44d/0xbc0 [ 195.502109] ? cgroup_propagate_control+0x570/0x570 [ 195.507110] ? css_populate_dir+0x289/0x420 [ 195.511414] cgroup_mkdir+0x56f/0xfc0 [ 195.515190] ? __lock_is_held+0xb6/0x140 [ 195.519240] ? cgroup_destroy_locked+0x750/0x750 [ 195.523973] ? rcu_read_lock_sched_held+0x108/0x120 [ 195.528966] ? kmem_cache_free+0x258/0x2a0 [ 195.533183] ? set_nlink+0xc1/0x160 [ 195.536792] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 195.541698] ? generic_permission+0x105/0x3c0 [ 195.546173] ? cgroup_destroy_locked+0x750/0x750 [ 195.550908] kernfs_iop_mkdir+0x153/0x1e0 [ 195.555039] vfs_mkdir+0x390/0x600 [ 195.558561] SyS_mkdirat+0x22b/0x2b0 [ 195.562256] ? SyS_mknod+0x480/0x480 [ 195.565947] ? trace_hardirqs_on+0xd/0x10 [ 195.570074] ? do_syscall_64+0xb7/0x940 [ 195.574033] ? SyS_mknod+0x480/0x480 [ 195.577729] do_syscall_64+0x281/0x940 [ 195.581595] ? vmalloc_sync_all+0x30/0x30 [ 195.585722] ? _raw_spin_unlock_irq+0x27/0x70 [ 195.590194] ? finish_task_switch+0x1c1/0x7e0 [ 195.594671] ? syscall_return_slowpath+0x550/0x550 [ 195.599581] ? syscall_return_slowpath+0x2ac/0x550 [ 195.604490] ? prepare_exit_to_usermode+0x350/0x350 [ 195.609487] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 195.614832] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 195.619661] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 195.624827] RIP: 0033:0x454e79 [ 195.627992] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 195.635686] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 195.642935] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 195.650185] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 195.657435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 195.664681] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000001e 2018/03/31 15:12:51 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 195.676678] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 0 transid 5 /dev/loop7 2018/03/31 15:12:51 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:51 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010", 0x96, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x8000, 0x0) setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f00000001c0)="bd03f0f047be1e1788e5e908917ab1d0767a6ed60cb4db3a00c224b93f9851fa522226187965383004fcb6376ace09b844", 0x31) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x9) 2018/03/31 15:12:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x0, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:51 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000740)={0x0, {{0x2}}}, 0xfe31be9541bf722e) sendto$unix(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) mq_open(&(0x7f00000005c0)='broute\x00', 0x41, 0x0, &(0x7f0000000880)={0x0, 0x9}) getegid() r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x0, 0x0) msgget$private(0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xeb, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000240), 0x4) 2018/03/31 15:12:51 executing program 0 (fault-call:3 fault-nth:31): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') [ 195.962700] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 196.012438] FAULT_INJECTION: forcing a failure. [ 196.012438] name failslab, interval 1, probability 0, space 0, times 0 [ 196.023764] CPU: 1 PID: 13816 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 196.031126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.040476] Call Trace: [ 196.043068] dump_stack+0x194/0x24d [ 196.046733] ? arch_local_irq_restore+0x53/0x53 [ 196.051410] ? __save_stack_trace+0x7e/0xd0 [ 196.055738] should_fail+0x8c0/0xa40 [ 196.059460] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 196.064559] ? kasan_kmalloc+0xad/0xe0 [ 196.068443] ? __kmalloc+0x162/0x760 [ 196.072152] ? kzalloc+0xf/0x20 [ 196.075420] ? alloc_fair_sched_group+0x5e/0x530 [ 196.080174] ? sched_create_group+0x35/0x70 [ 196.084508] ? kernfs_iop_mkdir+0x153/0x1e0 [ 196.088832] ? vfs_mkdir+0x390/0x600 [ 196.092545] ? SyS_mkdirat+0x22b/0x2b0 [ 196.096425] ? do_syscall_64+0x281/0x940 [ 196.100467] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 196.105812] ? save_stack+0x43/0xd0 [ 196.109417] ? find_held_lock+0x35/0x1d0 [ 196.113456] ? __lock_is_held+0xb6/0x140 [ 196.117498] ? check_same_owner+0x320/0x320 [ 196.121806] ? rcu_note_context_switch+0x710/0x710 [ 196.126734] should_failslab+0xec/0x120 [ 196.130714] __kmalloc+0x63/0x760 [ 196.134153] ? sched_create_group+0x22/0x70 [ 196.138458] ? kzalloc+0xf/0x20 [ 196.141722] kzalloc+0xf/0x20 [ 196.144807] alloc_fair_sched_group+0xd6/0x530 [ 196.149380] ? __lock_is_held+0xb6/0x140 [ 196.153444] sched_create_group+0x35/0x70 [ 196.157576] cpu_cgroup_css_alloc+0xe/0x30 [ 196.161809] cgroup_apply_control_enable+0x44d/0xbc0 [ 196.166924] ? cgroup_propagate_control+0x570/0x570 [ 196.171939] ? css_populate_dir+0x289/0x420 [ 196.176253] cgroup_mkdir+0x56f/0xfc0 [ 196.180053] ? __lock_is_held+0xb6/0x140 [ 196.180067] ? cgroup_destroy_locked+0x750/0x750 [ 196.188848] ? rcu_read_lock_sched_held+0x108/0x120 [ 196.193853] ? kmem_cache_free+0x258/0x2a0 [ 196.198076] ? set_nlink+0xc1/0x160 [ 196.201687] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 196.206593] ? generic_permission+0x105/0x3c0 [ 196.211070] ? cgroup_destroy_locked+0x750/0x750 [ 196.215816] kernfs_iop_mkdir+0x153/0x1e0 [ 196.219940] vfs_mkdir+0x390/0x600 [ 196.223458] SyS_mkdirat+0x22b/0x2b0 [ 196.227151] ? SyS_mknod+0x480/0x480 [ 196.230847] ? trace_hardirqs_on+0xd/0x10 [ 196.234976] ? do_syscall_64+0xb7/0x940 [ 196.238949] ? SyS_mknod+0x480/0x480 [ 196.242645] do_syscall_64+0x281/0x940 [ 196.246508] ? vmalloc_sync_all+0x30/0x30 [ 196.250635] ? _raw_spin_unlock_irq+0x27/0x70 [ 196.255109] ? finish_task_switch+0x1c1/0x7e0 [ 196.259579] ? syscall_return_slowpath+0x550/0x550 [ 196.264487] ? syscall_return_slowpath+0x2ac/0x550 [ 196.269401] ? prepare_exit_to_usermode+0x350/0x350 [ 196.274398] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 196.279760] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 196.284592] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 196.289755] RIP: 0033:0x454e79 [ 196.292922] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 196.300605] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 196.307848] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 196.315092] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 196.322337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 196.329581] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000001f 2018/03/31 15:12:52 executing program 0 (fault-call:3 fault-nth:32): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/31 15:12:52 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x800) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="3f27db56e76cb8536f6b02786aa48ee20b85970e16f4804d1108f51b9b6d81064d8878c72c2a3a482e0c0fa72a540054a5d02fb1fdd0431ebf59713cdced8b51d1fbf7c1083623b27e388fa251aa275f8cf16ea2b3b13a04dfe81a3393af377897d66e733bf2d77271bf4aca28681e083100d4cd05667fb906c0e3a2d28ee149d7fea19f574474db664e2b2e57b7f57d0ea2f89c69a8edb9c75ff9a65e3634f2bfa7f932c07d0dd98843bd76ed2ab2f3bed963d1928d4560ee41a75d0a2e8d48d6b91b7f8cd364d19fd9af6d26566cde0eb8da7e", 0xd4}], 0x1, 0x0) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) 2018/03/31 15:12:52 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:52 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010", 0x96, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:52 executing program 3: connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) r0 = semget$private(0x0, 0x3, 0x800000000000) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000000)=""/2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000100)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x460000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, r2, 0x14, 0x70bd28, 0x25dfdbfe, {0x11}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe4e}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x61a}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x73c}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x200}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9050}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 2018/03/31 15:12:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x0, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:52 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(0xffffffffffffffff, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) [ 196.529291] FAULT_INJECTION: forcing a failure. [ 196.529291] name failslab, interval 1, probability 0, space 0, times 0 [ 196.539914] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 196.540599] CPU: 1 PID: 13844 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 196.558668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.568015] Call Trace: [ 196.570604] dump_stack+0x194/0x24d [ 196.574237] ? arch_local_irq_restore+0x53/0x53 [ 196.578919] should_fail+0x8c0/0xa40 [ 196.582638] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 196.587742] ? trace_hardirqs_off+0x10/0x10 [ 196.592061] ? alloc_fair_sched_group+0xd6/0x530 [ 196.596816] ? sched_create_group+0x35/0x70 [ 196.601138] ? cgroup_apply_control_enable+0x44d/0xbc0 [ 196.606420] ? SyS_mkdirat+0x22b/0x2b0 [ 196.610303] ? print_irqtrace_events+0x270/0x270 [ 196.615064] ? find_held_lock+0x35/0x1d0 [ 196.619124] ? __lock_is_held+0xb6/0x140 [ 196.623192] ? check_same_owner+0x320/0x320 [ 196.627508] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 196.632520] ? rcu_note_context_switch+0x710/0x710 [ 196.637454] should_failslab+0xec/0x120 [ 196.641424] kmem_cache_alloc_node_trace+0x5a/0x760 [ 196.646434] ? __refill_cfs_bandwidth_runtime+0x120/0x120 [ 196.651974] ? sched_create_group+0x22/0x70 [ 196.656293] ? find_next_bit+0xcc/0x100 [ 196.660269] alloc_fair_sched_group+0x1f0/0x530 [ 196.664944] sched_create_group+0x35/0x70 [ 196.669089] cpu_cgroup_css_alloc+0xe/0x30 [ 196.673321] cgroup_apply_control_enable+0x44d/0xbc0 [ 196.678435] ? cgroup_propagate_control+0x570/0x570 [ 196.683467] ? css_populate_dir+0x289/0x420 [ 196.687797] cgroup_mkdir+0x56f/0xfc0 [ 196.691597] ? __lock_is_held+0xb6/0x140 [ 196.695664] ? cgroup_destroy_locked+0x750/0x750 [ 196.700412] ? rcu_read_lock_sched_held+0x108/0x120 [ 196.705411] ? kmem_cache_free+0x258/0x2a0 [ 196.709627] ? set_nlink+0xc1/0x160 [ 196.713235] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 196.718141] ? generic_permission+0x105/0x3c0 [ 196.722614] ? cgroup_destroy_locked+0x750/0x750 [ 196.727348] kernfs_iop_mkdir+0x153/0x1e0 [ 196.731474] vfs_mkdir+0x390/0x600 [ 196.734993] SyS_mkdirat+0x22b/0x2b0 [ 196.738686] ? SyS_mknod+0x480/0x480 [ 196.742376] ? trace_hardirqs_on+0xd/0x10 [ 196.746501] ? do_syscall_64+0xb7/0x940 [ 196.750457] ? SyS_mknod+0x480/0x480 [ 196.754147] do_syscall_64+0x281/0x940 [ 196.758012] ? vmalloc_sync_all+0x30/0x30 [ 196.762154] ? _raw_spin_unlock_irq+0x27/0x70 [ 196.766624] ? finish_task_switch+0x1c1/0x7e0 [ 196.771097] ? syscall_return_slowpath+0x550/0x550 [ 196.776004] ? syscall_return_slowpath+0x2ac/0x550 [ 196.780915] ? prepare_exit_to_usermode+0x350/0x350 [ 196.785911] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 196.791253] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 196.796077] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 196.801242] RIP: 0033:0x454e79 [ 196.804420] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 196.812105] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 196.819350] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 2018/03/31 15:12:52 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:52 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @multicast1}, &(0x7f0000000140)=0xc) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) sendto$inet(r0, &(0x7f0000000000)="c3ae837c77c9e85b262c222a7fb452741526be2790356381aaeccf2ce2f9d2e99cb98ca84313ebba39c9a62ebe37dc066dcf04484118831c1874a0813f933053fb5e9d710b", 0x45, 0x48040, &(0x7f00000000c0)={0x2, 0x4e21}, 0x10) r1 = getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) rt_tgsigqueueinfo(r1, r2, 0x2e, &(0x7f0000000340)={0x37, 0x6, 0x200}) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f0000eebff0)) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x420000) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) inotify_init1(0x80000) sendto$inet(r0, &(0x7f0000000180)="95934928bd526498874771d4b8fb0fb5fb38cb5fda8ebc5697cfd953c99b396098f8158622ce13eaef09b00d847380ae87288fb12a3b1c1a9dfcd7f3ff81f46a8af9e71e817358cf7da69030e15e028674c44b8bc2e8a458bb0ccda7bbfeba19e3fe", 0x62, 0x0, &(0x7f0000000080)={0x2}, 0x10) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000002c0)=""/1, &(0x7f0000000300)=0xed43634d02e03760) r5 = msgget$private(0x0, 0x80) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000240)=""/17) 2018/03/31 15:12:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x0, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) [ 196.826595] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 196.833849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 196.841093] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000020 [ 196.939418] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:12:53 executing program 0 (fault-call:3 fault-nth:33): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:53 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000", 0xe1, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:53 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:53 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x475, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x0) modify_ldt$read(0x0, &(0x7f00000010c0)=""/150, 0x96) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='/!\x00') ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000080)=""/4096) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000001080)={0xffff, 0x7, 0x8}) 2018/03/31 15:12:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r4 = dup3(r3, r2, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x100, 0x80000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x20000000, 0x1000, 0x2000, &(0x7f0000007000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000180)=""/126) 2018/03/31 15:12:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x0, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:53 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(0xffffffffffffffff, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:12:53 executing program 5: openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0xe5, 0x80) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000680)={{0x1, 0x3, 0x9, 0x1, 0x7f}, 0x8, 0x0, 0x6}) r2 = syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0x280000000, 0x501000) accept4$nfc_llcp(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x800) socketpair$ax25(0x3, 0x3, 0xca, &(0x7f0000000980)) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000540)={0x7, 0xffffffffffffffff}) syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x40) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r5 = mq_open(&(0x7f00000005c0)='@vboxnet0user\x00', 0x0, 0x4, &(0x7f0000000600)={0x200, 0xffffffffffff5ab9, 0x30, 0x40, 0x6, 0x9, 0x2, 0x3}) r6 = dup2(r2, r5) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, [0x2, 0x7, 0x8, 0x800, 0x100, 0x2000000000000000, 0x1000, 0x1, 0x0, 0x81, 0x9f, 0xffff, 0x3f, 0x400, 0x95b]}, &(0x7f00000008c0)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000900)={r7, 0x8}, 0xc) r8 = timerfd_create(0x0, 0x0) read(r8, &(0x7f0000000080)=""/16, 0x10) readv(r8, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f00000003c0)={0x7, 0x7, 0x6, 0xc4d8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}]}) pkey_alloc(0x0, 0x0) r9 = pkey_alloc(0x0, 0x2) pkey_free(r9) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, {0x10000, 0xfffffffffffffffd, 0xcb2, 0x9, 0x80, 0x4}, 0x2}, 0xa) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000700)={'filter\x00'}, &(0x7f0000000780)=0x44) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r6, 0x28, 0x6, &(0x7f00000001c0)={r10, r11/1000+30000}, 0x10) [ 197.561803] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 1 transid 5 /dev/loop7 [ 197.573297] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 197.587228] FAULT_INJECTION: forcing a failure. [ 197.587228] name failslab, interval 1, probability 0, space 0, times 0 [ 197.598599] CPU: 0 PID: 13900 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 197.605957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.615306] Call Trace: [ 197.617899] dump_stack+0x194/0x24d [ 197.621538] ? arch_local_irq_restore+0x53/0x53 [ 197.626218] ? __save_stack_trace+0x7e/0xd0 [ 197.630557] should_fail+0x8c0/0xa40 [ 197.634282] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 197.639391] ? kasan_kmalloc+0xad/0xe0 [ 197.643284] ? kmem_cache_alloc_node_trace+0x150/0x760 [ 197.648564] ? alloc_fair_sched_group+0x1f0/0x530 [ 197.653411] ? sched_create_group+0x35/0x70 [ 197.657723] ? cpu_cgroup_css_alloc+0xe/0x30 [ 197.662117] ? vfs_mkdir+0x390/0x600 [ 197.665817] ? SyS_mkdirat+0x22b/0x2b0 [ 197.669686] ? do_syscall_64+0x281/0x940 [ 197.673751] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 197.679101] ? find_held_lock+0x35/0x1d0 [ 197.683145] ? __lock_is_held+0xb6/0x140 [ 197.687218] ? check_same_owner+0x320/0x320 [ 197.691519] ? rcu_note_context_switch+0x710/0x710 [ 197.696430] should_failslab+0xec/0x120 [ 197.700386] kmem_cache_alloc_node_trace+0x5a/0x760 [ 197.705378] ? __refill_cfs_bandwidth_runtime+0x120/0x120 [ 197.710893] ? sched_create_group+0x22/0x70 [ 197.715193] ? find_next_bit+0xcc/0x100 [ 197.719150] alloc_fair_sched_group+0x267/0x530 [ 197.723812] sched_create_group+0x35/0x70 [ 197.727953] cpu_cgroup_css_alloc+0xe/0x30 [ 197.732168] cgroup_apply_control_enable+0x44d/0xbc0 [ 197.737257] ? cgroup_propagate_control+0x570/0x570 [ 197.742279] ? css_populate_dir+0x289/0x420 [ 197.746593] cgroup_mkdir+0x56f/0xfc0 [ 197.750373] ? __lock_is_held+0xb6/0x140 [ 197.754413] ? cgroup_destroy_locked+0x750/0x750 [ 197.759145] ? rcu_read_lock_sched_held+0x108/0x120 [ 197.764138] ? kmem_cache_free+0x258/0x2a0 [ 197.768351] ? set_nlink+0xc1/0x160 [ 197.771956] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 197.776861] ? generic_permission+0x105/0x3c0 [ 197.781336] ? cgroup_destroy_locked+0x750/0x750 [ 197.786076] kernfs_iop_mkdir+0x153/0x1e0 [ 197.790203] vfs_mkdir+0x390/0x600 [ 197.793723] SyS_mkdirat+0x22b/0x2b0 [ 197.797415] ? SyS_mknod+0x480/0x480 [ 197.801118] ? trace_hardirqs_on+0xd/0x10 [ 197.805244] ? do_syscall_64+0xb7/0x940 [ 197.809194] ? SyS_mknod+0x480/0x480 [ 197.812884] do_syscall_64+0x281/0x940 [ 197.816746] ? vmalloc_sync_all+0x30/0x30 [ 197.820876] ? _raw_spin_unlock_irq+0x27/0x70 [ 197.825349] ? finish_task_switch+0x1c1/0x7e0 [ 197.829820] ? syscall_return_slowpath+0x550/0x550 [ 197.834727] ? syscall_return_slowpath+0x2ac/0x550 [ 197.839634] ? prepare_exit_to_usermode+0x350/0x350 [ 197.844631] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 197.849974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 197.854800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 197.859967] RIP: 0033:0x454e79 2018/03/31 15:12:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001600)=@create_id={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000015c0)={0xffffffff}, 0x113, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000018c0)=@reject={0x9, 0x108, 0xfa00, {r1, 0x5, "9004e9", "0d7f08fc0180b531bb7029c1540b1b6ac8d4965b16d10f720dc307e3930f7e47e5b1eb3ed90ab60f737cf43355c0578ad40538ad7a9162422e605c8bcf692bdb27e450944d1dce56cc886bf644d33e285edc01d61c381b1473fd530403d287d2c2b211ee4c0a4a55a4d497194f11b983b92f6307a96a69ad08c60c41dfc365cfd271cda917c268e88e301f340cec41956b94572034078db5e78c1736e97162bedfc212d73aa82d3e3fcc1e807ab3b667fa6750c66ad825e926329bcb4ef71f32bca6cdd58926dd3d28a5f476321271f95f87adffe3842280b99ad5fba0f9bb2f242d42b1ea4952ea7ed55223937e86218a8c79a905017687d2b5bc25e94a2bf5"}}, 0x110) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000280000fa00040000000000000a0000000000000000000000000000000075bee53fca095161512dab", @ANYRES32], 0x30) write$rdma_cm(r0, &(0x7f0000000000)=@listen={0x7, 0x8, 0xfa00}, 0x10) close(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x30000, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x0) write$rdma_cm(r2, &(0x7f00000001c0)=@destroy_id={0x1, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) 2018/03/31 15:12:53 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 197.863131] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 197.870827] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 197.878092] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 197.885355] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 197.892604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 197.899849] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000021 2018/03/31 15:12:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="0f23e3430f019d441785c066baf80cb840476388ef66bafc0c66edd21e8fc978c75b0644d881080000000f011c18b9800000c00f3235008000000f30660f3880560c6436400fa39500800000", 0x4c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x101000, 0x4000, 0x9, 0x8, 0x7}) 2018/03/31 15:12:53 executing program 0 (fault-call:3 fault-nth:34): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:53 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 198.051011] FAULT_INJECTION: forcing a failure. [ 198.051011] name failslab, interval 1, probability 0, space 0, times 0 [ 198.062514] CPU: 1 PID: 13931 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 198.069885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.079230] Call Trace: [ 198.081813] dump_stack+0x194/0x24d [ 198.085419] ? arch_local_irq_restore+0x53/0x53 [ 198.090067] ? __save_stack_trace+0x7e/0xd0 [ 198.094470] should_fail+0x8c0/0xa40 [ 198.098167] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 198.103249] ? kasan_kmalloc+0xad/0xe0 [ 198.107111] ? kmem_cache_alloc_node_trace+0x150/0x760 [ 198.112364] ? alloc_fair_sched_group+0x267/0x530 [ 198.117182] ? sched_create_group+0x35/0x70 [ 198.121482] ? cpu_cgroup_css_alloc+0xe/0x30 [ 198.125871] ? vfs_mkdir+0x390/0x600 [ 198.129570] ? SyS_mkdirat+0x22b/0x2b0 [ 198.133436] ? do_syscall_64+0x281/0x940 [ 198.139217] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.144559] ? find_held_lock+0x35/0x1d0 [ 198.148599] ? __lock_is_held+0xb6/0x140 [ 198.152643] ? check_same_owner+0x320/0x320 [ 198.156946] ? rcu_note_context_switch+0x710/0x710 [ 198.161862] should_failslab+0xec/0x120 [ 198.165815] kmem_cache_alloc_node_trace+0x5a/0x760 [ 198.170819] ? unregister_fair_sched_group+0x5e0/0x5e0 [ 198.176077] ? find_next_bit+0xcc/0x100 [ 198.180033] alloc_fair_sched_group+0x1f0/0x530 [ 198.184683] sched_create_group+0x35/0x70 [ 198.188807] cpu_cgroup_css_alloc+0xe/0x30 [ 198.193026] cgroup_apply_control_enable+0x44d/0xbc0 [ 198.198115] ? cgroup_propagate_control+0x570/0x570 [ 198.203111] ? css_populate_dir+0x289/0x420 [ 198.207413] cgroup_mkdir+0x56f/0xfc0 [ 198.211189] ? __lock_is_held+0xb6/0x140 [ 198.215230] ? cgroup_destroy_locked+0x750/0x750 [ 198.219965] ? rcu_read_lock_sched_held+0x108/0x120 [ 198.224961] ? kmem_cache_free+0x258/0x2a0 [ 198.229183] ? set_nlink+0xc1/0x160 [ 198.232785] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 198.237693] ? generic_permission+0x105/0x3c0 [ 198.242166] ? cgroup_destroy_locked+0x750/0x750 [ 198.246900] kernfs_iop_mkdir+0x153/0x1e0 [ 198.251028] vfs_mkdir+0x390/0x600 [ 198.254544] SyS_mkdirat+0x22b/0x2b0 [ 198.258233] ? SyS_mknod+0x480/0x480 [ 198.261924] ? trace_hardirqs_on+0xd/0x10 [ 198.266047] ? do_syscall_64+0xb7/0x940 [ 198.269996] ? SyS_mknod+0x480/0x480 [ 198.273700] do_syscall_64+0x281/0x940 [ 198.277562] ? vmalloc_sync_all+0x30/0x30 [ 198.281688] ? _raw_spin_unlock_irq+0x27/0x70 [ 198.286164] ? finish_task_switch+0x1c1/0x7e0 [ 198.290637] ? syscall_return_slowpath+0x550/0x550 [ 198.295547] ? syscall_return_slowpath+0x2ac/0x550 [ 198.300453] ? prepare_exit_to_usermode+0x350/0x350 [ 198.305450] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 198.310792] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.315618] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.320785] RIP: 0033:0x454e79 [ 198.323957] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 198.331644] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 198.338894] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 198.346492] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 198.353737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 198.360984] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000022 2018/03/31 15:12:54 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x0, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:54 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000", 0xe1, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:54 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a00", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:54 executing program 0 (fault-call:3 fault-nth:35): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:54 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x2040) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={r4, 0xc70, 0x84dc}, &(0x7f0000000900)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={r4, 0x7ff}, 0x8) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x10000000000) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x7, &(0x7f0000000240)=""/6) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000300)={r4, 0x1, 0x40, 0x9, 0xe7, 0xde}, &(0x7f00000002c0)=0xb) r9 = dup3(r7, r5, 0x2080000000000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000800)={r4, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) fcntl$getownex(r10, 0x10, &(0x7f00000005c0)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000600)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000700)=0xe8) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000940)) r13 = getegid() sendmsg$unix(r9, &(0x7f00000007c0)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000003c0)="f3dcd91e9a3cf63fa43bf1894c1a5738790480c468ed6dd2443380e4a5b0e30dc186225345a429e65f004d41f27f3e3660480daa68a55969c5db26be7a884ebe68c20ad96bd4c3b6f93132fa0441801ef2b6d0eedcb1c74e511250bb1d57423c0ec547fb079ddfd1b79911ced6141f84de509623ab8e5f73cbdbdebcff7b53d57c3e04dfc42293ad8232ebcf7417aa8f59a36f7e2e29a3229dfecf8fdc8554cbe2a85fc3405ff5", 0xa7}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f0000000280)="eb9cbf613b971e6199f99b290f250d9d38892f0e2f6d4f2010d7ea4de06d993a0ae32d078d9b1c7a465b0bc6dc388bb90ab36397b49fbe", 0x37}], 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r10, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="20000000003cc89026dc8315c7000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000028000000000000000100000002b00000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40840}, 0x4000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/31 15:12:54 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000e4effc)=0x90000000, 0x4) rt_sigpending(&(0x7f0000000080), 0xfffffc46) setns(r0, 0x48000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x13d300) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x8, 0xfffffffffffffffe, 0x4, 0x200]}) r3 = socket(0xa, 0x80806, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000800000000000000700000001"]) fcntl$setstatus(r2, 0x4, 0x800) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000240)={0x0, @empty, 0x4e21, 0x3, 'lc\x00', 0x13, 0x400, 0x25}, 0x2c) pread64(r2, &(0x7f0000000180)=""/164, 0xa4, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x5, 0x2) ioctl(r3, 0x8936, &(0x7f0000000000)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) 2018/03/31 15:12:54 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(0xffffffffffffffff, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:12:54 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f00006a6ff0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0xf74) epoll_create(0x101) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xb0}) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000003c0)={0x1c5b, 0x4, 0x4618, 0x4}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r3 = pkey_alloc(0x0, 0x2) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000080)=0x44) pkey_free(r3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) open$dir(&(0x7f0000000400)='./file0\x00', 0x800, 0x20) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'ip6gretap0\x00', 0xff}) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000000380)=@buf={0x67, &(0x7f0000000300)="344cbb3ac865ca62f9b128addc1593997080247e180f6c63f280e84cf00597615f7c9aa695df9e16c7aa5fb1601fcffb63be57d879f806c930be60ffeb8267f3c2e7a4ef38960a47c59983f05f4f9e4978f585853e6ed05c86bdbe57dc29f0f3bef365f06d8665"}) sysfs$2(0x2, 0x0, &(0x7f0000000240)=""/82) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r4, r5/1000+30000}, 0x10) [ 198.782285] FAULT_INJECTION: forcing a failure. [ 198.782285] name failslab, interval 1, probability 0, space 0, times 0 [ 198.793589] CPU: 1 PID: 13958 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 198.800949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.810817] Call Trace: [ 198.813391] dump_stack+0x194/0x24d [ 198.817057] ? arch_local_irq_restore+0x53/0x53 [ 198.821707] ? __save_stack_trace+0x7e/0xd0 [ 198.826016] should_fail+0x8c0/0xa40 [ 198.829718] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 198.834801] ? kasan_kmalloc+0xad/0xe0 [ 198.838665] ? kmem_cache_alloc_node_trace+0x150/0x760 [ 198.843919] ? alloc_fair_sched_group+0x1f0/0x530 [ 198.848737] ? sched_create_group+0x35/0x70 [ 198.853037] ? cpu_cgroup_css_alloc+0xe/0x30 [ 198.857422] ? vfs_mkdir+0x390/0x600 [ 198.861109] ? SyS_mkdirat+0x22b/0x2b0 [ 198.864976] ? do_syscall_64+0x281/0x940 [ 198.869018] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.874364] ? find_held_lock+0x35/0x1d0 [ 198.878412] ? __lock_is_held+0xb6/0x140 [ 198.882458] ? check_same_owner+0x320/0x320 [ 198.886759] ? rcu_note_context_switch+0x710/0x710 [ 198.891679] should_failslab+0xec/0x120 [ 198.895635] kmem_cache_alloc_node_trace+0x5a/0x760 [ 198.900638] ? unregister_fair_sched_group+0x5e0/0x5e0 [ 198.905891] ? find_next_bit+0xcc/0x100 [ 198.909846] alloc_fair_sched_group+0x267/0x530 [ 198.914495] sched_create_group+0x35/0x70 [ 198.918621] cpu_cgroup_css_alloc+0xe/0x30 [ 198.922837] cgroup_apply_control_enable+0x44d/0xbc0 [ 198.927924] ? cgroup_propagate_control+0x570/0x570 [ 198.932922] ? css_populate_dir+0x289/0x420 [ 198.937222] cgroup_mkdir+0x56f/0xfc0 [ 198.940999] ? __lock_is_held+0xb6/0x140 [ 198.945043] ? cgroup_destroy_locked+0x750/0x750 [ 198.949777] ? rcu_read_lock_sched_held+0x108/0x120 [ 198.954770] ? kmem_cache_free+0x258/0x2a0 [ 198.958984] ? set_nlink+0xc1/0x160 [ 198.963108] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 198.968017] ? generic_permission+0x105/0x3c0 [ 198.972491] ? cgroup_destroy_locked+0x750/0x750 [ 198.977225] kernfs_iop_mkdir+0x153/0x1e0 [ 198.981349] vfs_mkdir+0x390/0x600 [ 198.984866] SyS_mkdirat+0x22b/0x2b0 [ 198.988558] ? SyS_mknod+0x480/0x480 [ 198.992246] ? trace_hardirqs_on+0xd/0x10 [ 198.996370] ? do_syscall_64+0xb7/0x940 [ 199.000319] ? SyS_mknod+0x480/0x480 [ 199.004010] do_syscall_64+0x281/0x940 [ 199.007878] ? vmalloc_sync_all+0x30/0x30 [ 199.012004] ? _raw_spin_unlock_irq+0x27/0x70 [ 199.016479] ? finish_task_switch+0x1c1/0x7e0 [ 199.020948] ? syscall_return_slowpath+0x550/0x550 [ 199.025851] ? syscall_return_slowpath+0x2ac/0x550 [ 199.030757] ? prepare_exit_to_usermode+0x350/0x350 [ 199.035750] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 199.041093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.045916] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.051082] RIP: 0033:0x454e79 [ 199.054245] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 199.061927] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 199.069171] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 199.076415] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 199.083661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 199.090907] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000023 2018/03/31 15:12:55 executing program 0 (fault-call:3 fault-nth:36): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:55 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a00", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 199.141511] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 199.146995] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 lc [ 199.197723] FAULT_INJECTION: forcing a failure. [ 199.197723] name failslab, interval 1, probability 0, space 0, times 0 [ 199.209041] CPU: 1 PID: 13972 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 199.216410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.225765] Call Trace: [ 199.228343] dump_stack+0x194/0x24d [ 199.231966] ? arch_local_irq_restore+0x53/0x53 [ 199.236629] should_fail+0x8c0/0xa40 [ 199.240332] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 199.245421] ? find_held_lock+0x35/0x1d0 [ 199.249462] ? __lock_is_held+0xb6/0x140 [ 199.253508] ? check_same_owner+0x320/0x320 [ 199.257807] ? perf_trace_lock+0xd6/0x900 [ 199.261931] ? rcu_note_context_switch+0x710/0x710 [ 199.266847] should_failslab+0xec/0x120 [ 199.270799] __kmalloc_track_caller+0x5f/0x760 [ 199.275362] ? string+0x180/0x200 [ 199.278800] ? kstrdup_const+0x39/0x50 [ 199.282665] kstrdup+0x39/0x70 [ 199.285838] kstrdup_const+0x39/0x50 [ 199.289531] __kernfs_new_node+0xa2/0x570 [ 199.293656] ? kernfs_dop_revalidate+0x380/0x380 [ 199.298391] ? snprintf+0xc0/0xf0 [ 199.301820] ? vsprintf+0x40/0x40 [ 199.305254] kernfs_new_node+0x80/0xe0 [ 199.309124] __kernfs_create_file+0x4b/0x320 [ 199.313517] cgroup_addrm_files+0x3c5/0xa70 [ 199.317821] ? cgroup_file_write+0x710/0x710 [ 199.322210] ? cpu_cgroup_css_alloc+0x30/0x30 [ 199.326692] ? __lock_is_held+0xb6/0x140 [ 199.330736] ? sched_online_group+0x4e0/0x4e0 [ 199.335208] ? cpu_cgroup_css_online+0x3a/0x50 [ 199.339765] ? online_css+0x224/0x2e0 [ 199.343544] css_populate_dir+0x198/0x420 [ 199.347673] cgroup_apply_control_enable+0x390/0xbc0 [ 199.352758] ? cgroup_propagate_control+0x570/0x570 [ 199.357758] ? css_populate_dir+0x289/0x420 [ 199.362057] cgroup_mkdir+0x56f/0xfc0 [ 199.365855] ? __lock_is_held+0xb6/0x140 [ 199.369897] ? cgroup_destroy_locked+0x750/0x750 [ 199.374629] ? rcu_read_lock_sched_held+0x108/0x120 [ 199.379622] ? kmem_cache_free+0x258/0x2a0 [ 199.383836] ? set_nlink+0xc1/0x160 [ 199.387438] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 199.392342] ? generic_permission+0x105/0x3c0 [ 199.396813] ? cgroup_destroy_locked+0x750/0x750 [ 199.401547] kernfs_iop_mkdir+0x153/0x1e0 [ 199.405674] vfs_mkdir+0x390/0x600 [ 199.409194] SyS_mkdirat+0x22b/0x2b0 [ 199.412887] ? SyS_mknod+0x480/0x480 [ 199.416577] ? trace_hardirqs_on+0xd/0x10 [ 199.420702] ? do_syscall_64+0xb7/0x940 [ 199.424655] ? SyS_mknod+0x480/0x480 [ 199.428346] do_syscall_64+0x281/0x940 [ 199.432211] ? vmalloc_sync_all+0x30/0x30 [ 199.436337] ? _raw_spin_unlock_irq+0x27/0x70 [ 199.440807] ? finish_task_switch+0x1c1/0x7e0 [ 199.445279] ? syscall_return_slowpath+0x550/0x550 [ 199.450186] ? syscall_return_slowpath+0x2ac/0x550 [ 199.455091] ? prepare_exit_to_usermode+0x350/0x350 [ 199.460084] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 199.465862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.470687] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.475852] RIP: 0033:0x454e79 [ 199.479023] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 199.486713] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 2018/03/31 15:12:55 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000", 0xe1, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 199.493958] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 199.501203] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 199.508450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 199.515695] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000024 [ 199.523120] cgroup: cgroup_addrm_files: failed to add weight, err=-12 2018/03/31 15:12:55 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a00", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x0, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) [ 199.551585] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 lc 2018/03/31 15:12:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/qat_adf_ctl\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000a80)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x5a0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x200000e0], 0x0, &(0x7f0000000040), &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fefeffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000b0000000000000000006966623000000000000000000000000069726c616e3000000000000000000000766c616e30000000000000000000000062726964676530000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa00000000000000000000000900000000000000000069705f7674693000000000000000000079616d300000000000000000000000006970646470300000000000000000000069666230000000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000e00000001801000050010000726174656573740000000000000000000000000000000000000000000000000048000000000000006966623000000000000000000000000069703667726574617030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fcffffff020000ef0c000000000000000000626f6e6430000000000000000000000069726c616e30000000000000000000007465716c3000000000000000000069705f76746930000000000000000000aaaaaaaaaa00000025180000aaaaaaaaaa000000000000000000b000000018010000500100006d61726b5f6d00000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000434c41535349465900000000000000000000000000000000000000000000000008000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa00000000000000000000006172707265706c790000000000000000000080000000000000000000000000001000000000000000000000000000060000000000000000001500000000000000000069706464703000000000000000000000766c616e3000000000000000000000006772657461703000000000000000000062707130000000000000000000000000aaaaaaaaaa000000000000000000000000000000000000000000b0000000200100009801000064657667726f75700000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000d69f762d788c000000000000000000004e464c4f470000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000e1352a3c801ad0fdfa299ae7c12bb56fcdaaa219de14188f25770f32dd0704cc53050baa7859afa7abdeba2055c7defae35082e6d5bc40499265dcde3d9472ae00000000d5c353cb0c1b224afdd54d3953857dc761d633c3bf31f2ee51257dc4eb23736ce0bbfca59cd1ee9c7775599982ae507fc20b23e012a772e45ca7a4d348cc6280399e90e3111d0004bc7fbd01729b7fb995011f3390167cd8a1caec3cbebe18ec429ec067dc14778e98e42a956a65662eff218cd99ee536fbe5bd4e0f26d64d587def5a312424300124aa6f0ee754eae83dcf2618525febbc0fbf3998b2748a6054ed27e48efcb49538317018344cd807552aa609e92ec8a6401fe0f9d51c7c9357195f72141b39cf6e5eddb2d841024b"]}, 0x6e6) [ 199.695995] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 199.709537] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/31 15:12:55 executing program 0 (fault-call:3 fault-nth:37): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:55 executing program 3: clone(0x200, &(0x7f0000151000), &(0x7f0000000080), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x2001001, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000240), &(0x7f0000002000)=[&(0x7f0000002040)='/dev/audio#\x00', &(0x7f00000013c0)='/dev/audio#\x00', &(0x7f0000001b80)='-\x00', &(0x7f0000001c80)='!##\x00', &(0x7f0000001f00)='*vmnet1nodevmd5sum#.\x00', &(0x7f0000001f40)='cpuacct.usage_percpu_sys\x00', &(0x7f0000001f80)='*vmnet1nodevmd5sum#.\x00', &(0x7f0000001fc0)='*vmnet1nodevmd5sum#.\x00']) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001780)='/dev/sequencer2\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001880)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='syscall\x00') signalfd4(0xffffffffffffffff, &(0x7f0000001380)={0x2}, 0x8, 0x80800) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000001cc0)=""/23) sched_setaffinity(0x0, 0x0, &(0x7f00000020c0)=0xe5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)=0x0) getpriority(0x0, r2) preadv(r1, &(0x7f0000000040)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={r3, 0x1}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000300)={0x0, 0x0, 0x10000000000, 0x0, 0x2, 0xef71}) finit_module(r1, &(0x7f0000000000)='*vmnet1nodevmd5sum#.\x00', 0x3) pread64(r1, &(0x7f0000001b00)=""/53, 0x35, 0x8000000000) r4 = getpgrp(r2) process_vm_readv(r4, &(0x7f0000001800)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001400)=""/142, 0x8e}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f00000015c0)=""/176, 0xb0}, {&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/84, 0x54}, {&(0x7f00000002c0)=""/11, 0xb}], 0x8, &(0x7f0000001c40)=[{&(0x7f00000018c0)=""/249, 0xf9}, {&(0x7f00000019c0)=""/53, 0x35}, {&(0x7f0000001a00)=""/244, 0xf4}, {&(0x7f0000001bc0)=""/94, 0x5e}], 0x4, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000002080)={0x82, 0x1, 0x1, 0x0, 0xacfe}, 0xc) syz_open_dev$random(&(0x7f0000001b40)='/dev/random\x00', 0x0, 0x20040) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001d00)={0x0, @in6={{0xa, 0x0, 0xffffffffffffff80, @loopback={0x0, 0x1}, 0x2}}, 0x8}, &(0x7f0000001dc0)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001e00)={r5, 0x6ecd, 0x10}, 0xc) accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @reserved=0x1}, 0x10, 0x80000) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000180)={0x5, 0x1f, 0x993, 0xac, 0x6d72, 0x4}) syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x1ff, 0x0) creat(&(0x7f0000b7a000)='./file0\x00', 0x0) 2018/03/31 15:12:55 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x107, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:55 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x0, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:55 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x9e) r1 = timerfd_create(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = pkey_alloc(0x0, 0xffffff7ffffffffa) pkey_alloc(0x0, 0x2) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) 2018/03/31 15:12:55 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:12:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 200.001290] FAULT_INJECTION: forcing a failure. [ 200.001290] name failslab, interval 1, probability 0, space 0, times 0 [ 200.012836] CPU: 0 PID: 14035 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 200.017452] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 200.020196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.020201] Call Trace: [ 200.020223] dump_stack+0x194/0x24d [ 200.020239] ? arch_local_irq_restore+0x53/0x53 [ 200.020259] should_fail+0x8c0/0xa40 [ 200.055066] ? kstrdup+0x39/0x70 [ 200.058437] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 200.063543] ? cgroup_apply_control_enable+0x390/0xbc0 [ 200.069097] ? kernfs_iop_mkdir+0x153/0x1e0 [ 200.073422] ? vfs_mkdir+0x390/0x600 [ 200.077139] ? SyS_mkdirat+0x22b/0x2b0 [ 200.081039] ? do_syscall_64+0x281/0x940 [ 200.085103] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.090469] ? find_held_lock+0x35/0x1d0 [ 200.094534] ? find_held_lock+0x35/0x1d0 [ 200.098595] ? __lock_is_held+0xb6/0x140 [ 200.102662] ? check_same_owner+0x320/0x320 [ 200.106971] ? rcu_note_context_switch+0x710/0x710 [ 200.111885] ? rcu_read_lock_sched_held+0x108/0x120 [ 200.116889] should_failslab+0xec/0x120 [ 200.120848] kmem_cache_alloc+0x47/0x760 [ 200.124887] ? memcpy+0x45/0x50 [ 200.128146] ? kstrdup+0x59/0x70 [ 200.131496] __kernfs_new_node+0xe2/0x570 [ 200.135629] ? kernfs_dop_revalidate+0x380/0x380 [ 200.140371] ? snprintf+0xc0/0xf0 [ 200.143811] ? vsprintf+0x40/0x40 [ 200.147243] kernfs_new_node+0x80/0xe0 [ 200.151108] __kernfs_create_file+0x4b/0x320 [ 200.155497] cgroup_addrm_files+0x3c5/0xa70 [ 200.159800] ? cgroup_file_write+0x710/0x710 [ 200.164185] ? cpu_cgroup_css_alloc+0x30/0x30 [ 200.168671] ? __lock_is_held+0xb6/0x140 [ 200.172714] ? sched_online_group+0x4e0/0x4e0 [ 200.177184] ? cpu_cgroup_css_online+0x3a/0x50 [ 200.181744] ? online_css+0x224/0x2e0 [ 200.185522] css_populate_dir+0x198/0x420 [ 200.189651] cgroup_apply_control_enable+0x390/0xbc0 [ 200.194737] ? cgroup_propagate_control+0x570/0x570 [ 200.199734] ? css_populate_dir+0x289/0x420 [ 200.204039] cgroup_mkdir+0x56f/0xfc0 [ 200.207822] ? __lock_is_held+0xb6/0x140 [ 200.211866] ? cgroup_destroy_locked+0x750/0x750 [ 200.216599] ? rcu_read_lock_sched_held+0x108/0x120 [ 200.221598] ? kmem_cache_free+0x258/0x2a0 [ 200.225813] ? set_nlink+0xc1/0x160 [ 200.229417] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 200.234322] ? generic_permission+0x105/0x3c0 [ 200.238794] ? cgroup_destroy_locked+0x750/0x750 [ 200.243529] kernfs_iop_mkdir+0x153/0x1e0 [ 200.247657] vfs_mkdir+0x390/0x600 [ 200.251176] SyS_mkdirat+0x22b/0x2b0 [ 200.254868] ? SyS_mknod+0x480/0x480 [ 200.258557] ? trace_hardirqs_on+0xd/0x10 [ 200.262688] ? do_syscall_64+0xb7/0x940 [ 200.266641] ? SyS_mknod+0x480/0x480 [ 200.270332] do_syscall_64+0x281/0x940 [ 200.274196] ? vmalloc_sync_all+0x30/0x30 [ 200.278320] ? _raw_spin_unlock_irq+0x27/0x70 [ 200.282794] ? finish_task_switch+0x1c1/0x7e0 [ 200.287267] ? syscall_return_slowpath+0x550/0x550 [ 200.292175] ? syscall_return_slowpath+0x2ac/0x550 [ 200.297082] ? prepare_exit_to_usermode+0x350/0x350 [ 200.302088] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 200.307432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.312254] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.317419] RIP: 0033:0x454e79 [ 200.320586] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 200.328277] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 200.335523] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 200.342774] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/03/31 15:12:56 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x0, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) [ 200.350051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 200.357300] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000025 [ 200.364816] cgroup: cgroup_addrm_files: failed to add weight, err=-12 2018/03/31 15:12:56 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:56 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x107, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 200.426773] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:12:56 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:56 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:12:56 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x107, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:56 executing program 0 (fault-call:3 fault-nth:38): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x0, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x1000, 0x6006, 0x5000], 0x1ff, 0x4, 0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/03/31 15:12:56 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) 2018/03/31 15:12:56 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x80002) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x806) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f0000000040)=[{&(0x7f0000e3b000)=""/61, 0x28}], 0x10000208) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000ff0000)) dup3(r1, r0, 0x0) [ 201.023563] FAULT_INJECTION: forcing a failure. [ 201.023563] name failslab, interval 1, probability 0, space 0, times 0 [ 201.032008] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 201.035104] CPU: 1 PID: 14101 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 201.053115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.062466] Call Trace: [ 201.065066] dump_stack+0x194/0x24d [ 201.068710] ? arch_local_irq_restore+0x53/0x53 [ 201.073399] should_fail+0x8c0/0xa40 [ 201.077125] ? kstrdup+0x39/0x70 [ 201.080498] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 201.085603] ? cgroup_apply_control_enable+0x390/0xbc0 [ 201.090881] ? kernfs_iop_mkdir+0x153/0x1e0 [ 201.095201] ? vfs_mkdir+0x390/0x600 [ 201.098921] ? SyS_mkdirat+0x22b/0x2b0 [ 201.102813] ? do_syscall_64+0x281/0x940 [ 201.106877] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.112247] ? find_held_lock+0x35/0x1d0 [ 201.116319] ? find_held_lock+0x35/0x1d0 [ 201.120381] ? __lock_is_held+0xb6/0x140 [ 201.124446] ? check_same_owner+0x320/0x320 [ 201.128775] ? rcu_note_context_switch+0x710/0x710 [ 201.133702] ? rcu_read_lock_sched_held+0x108/0x120 [ 201.138720] should_failslab+0xec/0x120 [ 201.142697] kmem_cache_alloc+0x47/0x760 [ 201.147188] ? memcpy+0x45/0x50 [ 201.150464] ? kstrdup+0x59/0x70 [ 201.153833] __kernfs_new_node+0xe2/0x570 [ 201.157979] ? kernfs_dop_revalidate+0x380/0x380 [ 201.162736] ? snprintf+0xc0/0xf0 [ 201.166190] ? vsprintf+0x40/0x40 [ 201.169642] ? rq_clock+0x90/0x90 [ 201.173099] kernfs_new_node+0x80/0xe0 [ 201.176983] __kernfs_create_file+0x4b/0x320 [ 201.181389] cgroup_addrm_files+0x3c5/0xa70 [ 201.185721] ? cgroup_file_write+0x710/0x710 [ 201.190135] ? cpu_cgroup_css_alloc+0x30/0x30 [ 201.194639] ? __lock_is_held+0xb6/0x140 [ 201.198710] ? sched_online_group+0x4e0/0x4e0 [ 201.203201] ? cpu_cgroup_css_online+0x3a/0x50 [ 201.207869] ? online_css+0x224/0x2e0 [ 201.211672] css_populate_dir+0x198/0x420 [ 201.215823] cgroup_apply_control_enable+0x390/0xbc0 [ 201.220932] ? cgroup_propagate_control+0x570/0x570 [ 201.225952] ? css_populate_dir+0x289/0x420 [ 201.230272] cgroup_mkdir+0x56f/0xfc0 [ 201.234070] ? __lock_is_held+0xb6/0x140 [ 201.238133] ? cgroup_destroy_locked+0x750/0x750 [ 201.242892] ? rcu_read_lock_sched_held+0x108/0x120 [ 201.247910] ? kmem_cache_free+0x258/0x2a0 [ 201.252138] ? set_nlink+0xc1/0x160 [ 201.255761] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 201.260947] ? generic_permission+0x105/0x3c0 [ 201.265441] ? cgroup_destroy_locked+0x750/0x750 [ 201.270194] kernfs_iop_mkdir+0x153/0x1e0 [ 201.274339] vfs_mkdir+0x390/0x600 [ 201.277875] SyS_mkdirat+0x22b/0x2b0 [ 201.281584] ? SyS_mknod+0x480/0x480 [ 201.285291] ? trace_hardirqs_on+0xd/0x10 [ 201.289431] ? do_syscall_64+0xb7/0x940 [ 201.293401] ? SyS_mknod+0x480/0x480 [ 201.297114] do_syscall_64+0x281/0x940 [ 201.300997] ? vmalloc_sync_all+0x30/0x30 [ 201.305138] ? _raw_spin_unlock_irq+0x27/0x70 [ 201.309628] ? finish_task_switch+0x1c1/0x7e0 [ 201.314117] ? syscall_return_slowpath+0x550/0x550 [ 201.319042] ? syscall_return_slowpath+0x2ac/0x550 [ 201.323961] ? prepare_exit_to_usermode+0x350/0x350 [ 201.328974] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 201.334340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 201.339196] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.344380] RIP: 0033:0x454e79 [ 201.347565] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 201.355354] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 201.362620] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 2018/03/31 15:12:57 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:57 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:57 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a00", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:57 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') fsync(0xffffffffffffffff) unlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(0xffffffffffffffff, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(0xffffffffffffffff) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r0, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(0xffffffffffffffff, &(0x7f0000000300)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:57 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') fsync(0xffffffffffffffff) unlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(0xffffffffffffffff, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(0xffffffffffffffff) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r0, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(0xffffffffffffffff, &(0x7f0000000300)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:57 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') fsync(0xffffffffffffffff) unlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(0xffffffffffffffff, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(0xffffffffffffffff) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r0, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(0xffffffffffffffff, &(0x7f0000000300)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:57 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 201.369879] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 201.377139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 201.384401] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000026 [ 201.391900] cgroup: cgroup_addrm_files: failed to add weight, err=-12 2018/03/31 15:12:58 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x0, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:58 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0xffffffffffffffff) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x401, 0x6, 0x9000}, 0x4) 2018/03/31 15:12:58 executing program 0 (fault-call:3 fault-nth:39): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:58 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x11a, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r5 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)='cpuset*-\x00', 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f0000000200)='/dev/kvm\x00') r6 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 2018/03/31 15:12:58 executing program 3: perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xc60, 0x101) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x8001, 0x4, @dev={0xfe, 0x80, [], 0x17}, 0x5}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f000010ef70)=ANY=[@ANYBLOB="cd390b081bf2ffffffffffff86dd6002290f00383a0000000000000000000000ffff00000000ff02000000000000000000000000ed60a7e3c3a50001010090780000000060d5cae200003a0000000000000000000000000000000000ff020000000000000000000000000001f601"], 0x0) 2018/03/31 15:12:58 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) [ 202.423223] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 202.444828] FAULT_INJECTION: forcing a failure. [ 202.444828] name failslab, interval 1, probability 0, space 0, times 0 [ 202.456259] CPU: 0 PID: 14153 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 202.458668] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 1 transid 5 /dev/loop7 [ 202.463614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.463621] Call Trace: [ 202.463639] dump_stack+0x194/0x24d [ 202.463655] ? arch_local_irq_restore+0x53/0x53 [ 202.463675] should_fail+0x8c0/0xa40 [ 202.463692] ? kstrdup+0x39/0x70 [ 202.499839] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 202.504947] ? cgroup_apply_control_enable+0x390/0xbc0 [ 202.510229] ? kernfs_iop_mkdir+0x153/0x1e0 [ 202.514544] ? vfs_mkdir+0x390/0x600 [ 202.518249] ? SyS_mkdirat+0x22b/0x2b0 [ 202.522118] ? do_syscall_64+0x281/0x940 [ 202.526159] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 202.531531] ? find_held_lock+0x35/0x1d0 [ 202.535580] ? find_held_lock+0x35/0x1d0 [ 202.539627] ? __lock_is_held+0xb6/0x140 [ 202.543671] ? check_same_owner+0x320/0x320 [ 202.548144] ? rcu_note_context_switch+0x710/0x710 [ 202.553052] ? rcu_read_lock_sched_held+0x108/0x120 [ 202.558048] should_failslab+0xec/0x120 [ 202.561999] kmem_cache_alloc+0x47/0x760 [ 202.566039] ? memcpy+0x45/0x50 [ 202.569297] ? kstrdup+0x59/0x70 [ 202.572643] __kernfs_new_node+0xe2/0x570 [ 202.576768] ? kernfs_dop_revalidate+0x380/0x380 [ 202.581504] ? snprintf+0xc0/0xf0 [ 202.584934] ? vsprintf+0x40/0x40 [ 202.588361] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 202.593266] ? cgroup_file_name+0x1d0/0x1d0 [ 202.597573] kernfs_new_node+0x80/0xe0 [ 202.601440] __kernfs_create_file+0x4b/0x320 [ 202.605827] cgroup_addrm_files+0x3c5/0xa70 [ 202.610130] ? cgroup_file_write+0x710/0x710 [ 202.614515] ? cpu_cgroup_css_alloc+0x30/0x30 [ 202.618993] ? __lock_is_held+0xb6/0x140 [ 202.623041] ? sched_online_group+0x4e0/0x4e0 [ 202.627511] ? cpu_cgroup_css_online+0x3a/0x50 [ 202.632073] ? online_css+0x224/0x2e0 [ 202.635853] css_populate_dir+0x198/0x420 [ 202.639981] cgroup_apply_control_enable+0x390/0xbc0 [ 202.645069] ? cgroup_propagate_control+0x570/0x570 [ 202.650696] ? css_populate_dir+0x289/0x420 [ 202.655002] cgroup_mkdir+0x56f/0xfc0 [ 202.658786] ? __lock_is_held+0xb6/0x140 [ 202.663347] ? cgroup_destroy_locked+0x750/0x750 [ 202.668081] ? rcu_read_lock_sched_held+0x108/0x120 [ 202.673074] ? kmem_cache_free+0x258/0x2a0 [ 202.677286] ? set_nlink+0xc1/0x160 [ 202.680899] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 202.685806] ? generic_permission+0x105/0x3c0 [ 202.690279] ? cgroup_destroy_locked+0x750/0x750 [ 202.695013] kernfs_iop_mkdir+0x153/0x1e0 [ 202.699144] vfs_mkdir+0x390/0x600 [ 202.702664] SyS_mkdirat+0x22b/0x2b0 [ 202.706356] ? SyS_mknod+0x480/0x480 [ 202.710048] ? trace_hardirqs_on+0xd/0x10 [ 202.714172] ? do_syscall_64+0xb7/0x940 [ 202.718125] ? SyS_mknod+0x480/0x480 [ 202.721816] do_syscall_64+0x281/0x940 [ 202.725683] ? vmalloc_sync_all+0x30/0x30 [ 202.729810] ? _raw_spin_unlock_irq+0x27/0x70 [ 202.734282] ? finish_task_switch+0x1c1/0x7e0 [ 202.738753] ? syscall_return_slowpath+0x550/0x550 [ 202.743666] ? syscall_return_slowpath+0x2ac/0x550 [ 202.748577] ? prepare_exit_to_usermode+0x350/0x350 [ 202.753575] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 202.758918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 202.763741] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 202.768907] RIP: 0033:0x454e79 2018/03/31 15:12:58 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 202.772158] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 202.779842] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 202.787087] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 202.794331] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 202.801580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 202.808826] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000027 [ 202.817437] cgroup: cgroup_addrm_files: failed to add weight.nice, err=-12 2018/03/31 15:12:58 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x11a, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:58 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f000020a000)=@generic={0x3, 0x800006}) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x80, 0x4) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x3) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x80) 2018/03/31 15:12:58 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x0, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:59 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x11a, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:59 executing program 0 (fault-call:3 fault-nth:40): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:12:59 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 203.058996] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:12:59 executing program 3: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000b00)={0x0, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x10580) userfaultfd(0x80000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000012000)}], 0x1, 0x0) wait4(0x0, 0x0, 0x1, &(0x7f0000781f70)) r1 = syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/101) r4 = dup2(r3, r2) accept4$ax25(r4, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) pread64(r1, &(0x7f0000000900)=""/195, 0xc3, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000001040)=ANY=[@ANYBLOB="1a17612be07ed0e8b6ab0166e88f982858a58727b20e4f938a5c73fd0f054441b33be49415878bdeecb0b0e0c234892cc8eb9e09a24c680a39039bac82c11de00000"]) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f000079d000)=0x100000000000001) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000f80)={r0, r0, 0x1f}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000240)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000012c0)) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x16907e, 0x0) pwritev(r6, &(0x7f0000001400)=[{&(0x7f0000001440)="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", 0xdc1}], 0x1, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001180)=@generic={0x0, 0x3, 0xe4}) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x200000000022) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000011c0)={0x7, 0x4, 0x2, 0x0, 0x2, [{0x8000, 0xfffffffffffffff8, 0x1000, 0x0, 0x0, 0x801}, {0x3, 0x9, 0x6, 0x0, 0x0, 0xc06}]}) userfaultfd(0x0) ioctl$sock_netrom_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) [ 203.238101] FAULT_INJECTION: forcing a failure. [ 203.238101] name failslab, interval 1, probability 0, space 0, times 0 [ 203.249382] CPU: 0 PID: 14199 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 203.256739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.266090] Call Trace: [ 203.268681] dump_stack+0x194/0x24d [ 203.272310] ? arch_local_irq_restore+0x53/0x53 [ 203.276990] should_fail+0x8c0/0xa40 [ 203.280730] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 203.280747] ? rb_first_postorder+0xa0/0xa0 [ 203.280756] ? __mutex_lock+0x16f/0x1a80 [ 203.280770] ? trace_event_raw_event_lock+0x340/0x340 [ 203.280779] ? trace_hardirqs_off+0x10/0x10 [ 203.280792] ? find_held_lock+0x35/0x1d0 [ 203.280805] ? __lock_is_held+0xb6/0x140 [ 203.311788] ? check_same_owner+0x320/0x320 [ 203.321484] ? lock_downgrade+0x980/0x980 [ 203.325615] ? rcu_note_context_switch+0x710/0x710 [ 203.330525] should_failslab+0xec/0x120 [ 203.334480] __kmalloc_track_caller+0x5f/0x760 [ 203.339046] ? string+0x180/0x200 [ 203.342480] ? kstrdup_const+0x39/0x50 [ 203.346349] kstrdup+0x39/0x70 [ 203.349521] kstrdup_const+0x39/0x50 [ 203.353213] __kernfs_new_node+0xa2/0x570 [ 203.357341] ? kernfs_dop_revalidate+0x380/0x380 [ 203.362089] ? snprintf+0xc0/0xf0 [ 203.365521] ? vsprintf+0x40/0x40 [ 203.368950] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 203.373862] ? cgroup_file_name+0x1d0/0x1d0 [ 203.378164] kernfs_new_node+0x80/0xe0 [ 203.382032] __kernfs_create_file+0x4b/0x320 [ 203.386419] cgroup_addrm_files+0x3c5/0xa70 [ 203.390731] ? cgroup_file_write+0x710/0x710 [ 203.395115] ? cpu_cgroup_css_alloc+0x30/0x30 [ 203.399591] ? __lock_is_held+0xb6/0x140 [ 203.403634] ? sched_online_group+0x4e0/0x4e0 [ 203.408103] ? cpu_cgroup_css_online+0x3a/0x50 [ 203.412660] ? online_css+0x224/0x2e0 [ 203.416440] css_populate_dir+0x198/0x420 [ 203.420573] cgroup_apply_control_enable+0x390/0xbc0 [ 203.425656] ? cgroup_propagate_control+0x570/0x570 [ 203.430651] ? css_populate_dir+0x289/0x420 [ 203.434949] cgroup_mkdir+0x56f/0xfc0 [ 203.438727] ? __lock_is_held+0xb6/0x140 [ 203.442766] ? cgroup_destroy_locked+0x750/0x750 [ 203.447501] ? rcu_read_lock_sched_held+0x108/0x120 [ 203.452495] ? kmem_cache_free+0x258/0x2a0 [ 203.456707] ? set_nlink+0xc1/0x160 [ 203.460310] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 203.465215] ? generic_permission+0x105/0x3c0 [ 203.469689] ? cgroup_destroy_locked+0x750/0x750 [ 203.474422] kernfs_iop_mkdir+0x153/0x1e0 [ 203.478552] vfs_mkdir+0x390/0x600 [ 203.482070] SyS_mkdirat+0x22b/0x2b0 [ 203.485766] ? SyS_mknod+0x480/0x480 [ 203.489459] ? do_syscall_64+0xb7/0x940 [ 203.493414] ? SyS_mknod+0x480/0x480 [ 203.497116] do_syscall_64+0x281/0x940 [ 203.500981] ? vmalloc_sync_all+0x30/0x30 [ 203.505109] ? _raw_spin_unlock_irq+0x27/0x70 [ 203.509584] ? finish_task_switch+0x1c1/0x7e0 [ 203.517886] ? syscall_return_slowpath+0x550/0x550 [ 203.522795] ? syscall_return_slowpath+0x2ac/0x550 [ 203.527706] ? prepare_exit_to_usermode+0x350/0x350 [ 203.532706] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 203.538052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 203.542879] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 203.548046] RIP: 0033:0x454e79 [ 203.551216] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 203.558903] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 203.566153] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 203.573402] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 203.580649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 203.587894] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000028 [ 203.595449] cgroup: cgroup_addrm_files: failed to add max, err=-12 2018/03/31 15:12:59 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, [0x1000, 0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x8000, 0x6, 0x3f, 0x1, 0x44bb2909, 0x26eb, 0x3f, 0x4, 0x8001, 0xa82]}, &(0x7f0000000300)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e21, 0x7fff, @empty, 0x54a}}, 0x2, 0x1000, 0x1, 0x81, 0x8}, 0x98) r2 = timerfd_create(0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) readv(r2, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r3 = pkey_alloc(0x0, 0x2) pkey_free(r3) syslog(0x4, &(0x7f0000000040)=""/17, 0x11) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r4, r5/1000+30000}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) 2018/03/31 15:12:59 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:59 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748ae", 0x123, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:12:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x0, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:12:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) fsync(r0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x72) fcntl$getown(r2, 0x9) mmap(&(0x7f000058a000/0x3000)=nil, 0x3000, 0x0, 0x19013, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/145, 0x91) read(r1, &(0x7f00000010c0)=""/4096, 0x1000) time(&(0x7f0000000000)) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 203.692363] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 1 transid 5 /dev/loop7 [ 203.784695] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:13:00 executing program 0 (fault-call:3 fault-nth:41): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:13:00 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:00 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000e47000)=&(0x7f0000a65000)) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000cff000)={0x0, 0xe}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) 2018/03/31 15:13:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r5 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000200)={0x7b, 0x0, [0x2, 0x7fffffff, 0x0, 0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000180)={&(0x7f00000000c0)=[0x2, 0x8], 0x2, 0xffff, 0x6, 0x0, 0x6, 0x2, {0x101, 0x7, 0x7fff, 0x74, 0x8, 0x7, 0x4, 0x2, 0x0, 0x6, 0x3, 0x7fff, 0x5, 0x5, "23ff8b4e11200f88fbda7c06e0dde90f1be672716e05131264c69140ed680c80"}}) 2018/03/31 15:13:00 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x123, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:00 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:13:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0x0, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:00 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) timerfd_create(0x3, 0x80000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) [ 204.704477] FAULT_INJECTION: forcing a failure. [ 204.704477] name failslab, interval 1, probability 0, space 0, times 0 [ 204.715890] CPU: 1 PID: 14277 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 204.723257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.732614] Call Trace: [ 204.735214] dump_stack+0x194/0x24d [ 204.738854] ? arch_local_irq_restore+0x53/0x53 [ 204.741711] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 204.743534] should_fail+0x8c0/0xa40 [ 204.743548] ? kstrdup+0x39/0x70 [ 204.743563] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 204.743576] ? cgroup_apply_control_enable+0x390/0xbc0 [ 204.743589] ? kernfs_iop_mkdir+0x153/0x1e0 [ 204.776062] ? vfs_mkdir+0x390/0x600 [ 204.779776] ? SyS_mkdirat+0x22b/0x2b0 [ 204.783664] ? do_syscall_64+0x281/0x940 [ 204.787730] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 204.793095] ? find_held_lock+0x35/0x1d0 [ 204.797159] ? find_held_lock+0x35/0x1d0 [ 204.801224] ? __lock_is_held+0xb6/0x140 [ 204.805297] ? check_same_owner+0x320/0x320 [ 204.809633] ? rcu_note_context_switch+0x710/0x710 [ 204.814558] ? rcu_read_lock_sched_held+0x108/0x120 [ 204.819562] should_failslab+0xec/0x120 [ 204.823513] kmem_cache_alloc+0x47/0x760 [ 204.827553] ? memcpy+0x45/0x50 [ 204.830811] ? kstrdup+0x59/0x70 [ 204.834155] __kernfs_new_node+0xe2/0x570 [ 204.838283] ? kernfs_dop_revalidate+0x380/0x380 [ 204.843038] ? snprintf+0xc0/0xf0 [ 204.846469] ? vsprintf+0x40/0x40 [ 204.849899] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 204.854809] ? cgroup_file_name+0x1d0/0x1d0 [ 204.859107] kernfs_new_node+0x80/0xe0 [ 204.862971] __kernfs_create_file+0x4b/0x320 [ 204.867358] cgroup_addrm_files+0x3c5/0xa70 [ 204.871663] ? cgroup_file_write+0x710/0x710 [ 204.876049] ? cpu_cgroup_css_alloc+0x30/0x30 [ 204.880527] ? __lock_is_held+0xb6/0x140 [ 204.884567] ? sched_online_group+0x4e0/0x4e0 [ 204.889037] ? cpu_cgroup_css_online+0x3a/0x50 [ 204.893593] ? online_css+0x224/0x2e0 [ 204.897373] css_populate_dir+0x198/0x420 [ 204.901501] cgroup_apply_control_enable+0x390/0xbc0 [ 204.906599] ? cgroup_propagate_control+0x570/0x570 [ 204.911770] ? css_populate_dir+0x289/0x420 [ 204.916071] cgroup_mkdir+0x56f/0xfc0 [ 204.919850] ? __lock_is_held+0xb6/0x140 [ 204.923892] ? cgroup_destroy_locked+0x750/0x750 [ 204.928627] ? rcu_read_lock_sched_held+0x108/0x120 [ 204.933621] ? kmem_cache_free+0x258/0x2a0 [ 204.937838] ? set_nlink+0xc1/0x160 [ 204.941458] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 204.946367] ? generic_permission+0x105/0x3c0 [ 204.950840] ? cgroup_destroy_locked+0x750/0x750 [ 204.955586] kernfs_iop_mkdir+0x153/0x1e0 [ 204.959715] vfs_mkdir+0x390/0x600 [ 204.963236] SyS_mkdirat+0x22b/0x2b0 [ 204.966929] ? SyS_mknod+0x480/0x480 [ 204.970622] ? trace_hardirqs_on+0xd/0x10 [ 204.974774] ? do_syscall_64+0xb7/0x940 [ 204.978725] ? SyS_mknod+0x480/0x480 [ 204.982417] do_syscall_64+0x281/0x940 [ 204.986284] ? vmalloc_sync_all+0x30/0x30 [ 204.990411] ? _raw_spin_unlock_irq+0x27/0x70 [ 204.994884] ? finish_task_switch+0x1c1/0x7e0 [ 204.999356] ? syscall_return_slowpath+0x550/0x550 [ 205.004267] ? syscall_return_slowpath+0x2ac/0x550 [ 205.009177] ? prepare_exit_to_usermode+0x350/0x350 [ 205.014183] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 205.019527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.024351] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 205.029516] RIP: 0033:0x454e79 [ 205.032683] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 205.040369] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 205.047616] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 2018/03/31 15:13:01 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 205.054872] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 205.062120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 205.069364] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000029 [ 205.076770] cgroup: cgroup_addrm_files: failed to add max, err=-12 2018/03/31 15:13:01 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:01 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0x0, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:01 executing program 0 (fault-call:3 fault-nth:42): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:13:01 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x123, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f00000000c0)={0x101, 0x3, 0x8}) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/03/31 15:13:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000082000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={"73726f75746500000000000000000000000000000000009f76000000ecff00", 0x0, 0x0, 0xfffffffffffffd0e, [], 0x27b, &(0x7f0000000240), &(0x7f0000000280)=""/139}, &(0x7f00000003c0)=0x78) socket$inet_tcp(0x2, 0x1, 0x0) accept4$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x14, 0x80000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'bridge0\x00'}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x10001, 0x5}) 2018/03/31 15:13:01 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:13:01 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) 2018/03/31 15:13:01 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 205.732237] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:13:01 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0x50, &(0x7f00000001c0)}, 0x10) pkey_alloc(0x0, 0x0) r3 = pkey_alloc(0x0, 0x2) pkey_free(r3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000100)={r4, r5/1000+30000}, 0x10) [ 205.818882] FAULT_INJECTION: forcing a failure. [ 205.818882] name failslab, interval 1, probability 0, space 0, times 0 [ 205.830750] CPU: 1 PID: 14348 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 205.838125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.847479] Call Trace: [ 205.850076] dump_stack+0x194/0x24d [ 205.853712] ? arch_local_irq_restore+0x53/0x53 [ 205.858392] should_fail+0x8c0/0xa40 [ 205.862110] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 205.867219] ? trace_hardirqs_off+0x10/0x10 [ 205.871553] ? find_held_lock+0x35/0x1d0 [ 205.875626] ? __lock_is_held+0xb6/0x140 [ 205.879701] ? check_same_owner+0x320/0x320 [ 205.884032] ? rcu_note_context_switch+0x710/0x710 [ 205.888971] should_failslab+0xec/0x120 [ 205.892954] kmem_cache_alloc_trace+0x4b/0x740 [ 205.897538] blkcg_css_alloc+0xc8/0x6b0 [ 205.901495] ? blkcg_deactivate_policy+0x430/0x430 [ 205.906408] ? __lock_is_held+0xb6/0x140 [ 205.910456] cgroup_apply_control_enable+0x44d/0xbc0 [ 205.915543] ? cgroup_propagate_control+0x570/0x570 [ 205.920543] ? css_populate_dir+0x289/0x420 [ 205.924846] cgroup_mkdir+0x56f/0xfc0 [ 205.928623] ? __lock_is_held+0xb6/0x140 [ 205.932663] ? cgroup_destroy_locked+0x750/0x750 [ 205.937400] ? rcu_read_lock_sched_held+0x108/0x120 [ 205.942394] ? kmem_cache_free+0x258/0x2a0 [ 205.946609] ? set_nlink+0xc1/0x160 [ 205.950212] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 205.955118] ? generic_permission+0x105/0x3c0 [ 205.959593] ? cgroup_destroy_locked+0x750/0x750 [ 205.964325] kernfs_iop_mkdir+0x153/0x1e0 [ 205.968450] vfs_mkdir+0x390/0x600 [ 205.971967] SyS_mkdirat+0x22b/0x2b0 [ 205.975659] ? SyS_mknod+0x480/0x480 [ 205.979350] ? trace_hardirqs_on+0xd/0x10 [ 205.983483] ? do_syscall_64+0xb7/0x940 [ 205.987434] ? SyS_mknod+0x480/0x480 [ 205.991127] do_syscall_64+0x281/0x940 [ 205.994989] ? vmalloc_sync_all+0x30/0x30 [ 205.999120] ? _raw_spin_unlock_irq+0x27/0x70 [ 206.003596] ? finish_task_switch+0x1c1/0x7e0 [ 206.008067] ? syscall_return_slowpath+0x550/0x550 [ 206.012973] ? syscall_return_slowpath+0x2ac/0x550 [ 206.017879] ? prepare_exit_to_usermode+0x350/0x350 [ 206.022873] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 206.028216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 206.033044] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 206.038216] RIP: 0033:0x454e79 [ 206.041384] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 206.049078] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 206.056323] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 2018/03/31 15:13:02 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0x0, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:02 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{r3, r4+30000000}, {r5, r6+30000000}}, &(0x7f0000000200)) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r8 = dup3(r7, r2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000240)={0x6}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 206.063570] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 206.070817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 206.078062] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000002a 2018/03/31 15:13:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x600000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10) write(r2, &(0x7f0000000100), 0x10174) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x8000400) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0xfffffffffffffffe, 0x4, &(0x7f000004b000)={0x3, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) unshare(0xc000000) getpgrp(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000005, 0x1000000200032, r6, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x4000002}) write$sndseq(r7, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) tee(r6, r5, 0x1, 0x0) r8 = dup2(r6, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') dup2(r1, 0xffffffffffffffff) ioctl$TCXONC(r8, 0x540a, 0x7) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000180)=0x200, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x6}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000b00)=ANY=[@ANYRES32=r9, @ANYBLOB="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"], 0x2) memfd_create(&(0x7f0000000540)='\x00', 0x0) perf_event_open(&(0x7f00000005c0)={0x0, 0x195, 0x8, 0x9, 0x0, 0x8, 0x0, 0xfffffffffffffe01, 0x142, 0x1, 0x0, 0x0, 0x6, 0x9, 0x4, 0x5, 0x100000000, 0x8, 0x6, 0x0, 0x1, 0x8, 0x1, 0x800, 0x0, 0xfff, 0x0, 0xf4ca, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0xfd, 0xb6, 0x7, 0x0, 0xf21, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) 2018/03/31 15:13:02 executing program 0 (fault-call:3 fault-nth:43): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:13:02 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010", 0x96, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 206.181509] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 206.232104] FAULT_INJECTION: forcing a failure. [ 206.232104] name failslab, interval 1, probability 0, space 0, times 0 [ 206.243404] CPU: 0 PID: 14377 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 206.250763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.260098] Call Trace: [ 206.262670] dump_stack+0x194/0x24d [ 206.266278] ? arch_local_irq_restore+0x53/0x53 [ 206.270930] should_fail+0x8c0/0xa40 [ 206.274621] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 206.279705] ? trace_hardirqs_off+0x10/0x10 [ 206.284007] ? find_held_lock+0x35/0x1d0 [ 206.288052] ? __lock_is_held+0xb6/0x140 [ 206.292096] ? check_same_owner+0x320/0x320 [ 206.296395] ? rcu_note_context_switch+0x710/0x710 [ 206.301303] should_failslab+0xec/0x120 [ 206.305255] kmem_cache_alloc_trace+0x4b/0x740 [ 206.309819] blkcg_css_alloc+0xc8/0x6b0 [ 206.313771] ? blkcg_deactivate_policy+0x430/0x430 [ 206.318679] ? __lock_is_held+0xb6/0x140 [ 206.322722] cgroup_apply_control_enable+0x44d/0xbc0 [ 206.327805] ? cgroup_propagate_control+0x570/0x570 [ 206.332799] ? css_populate_dir+0x289/0x420 [ 206.337100] cgroup_mkdir+0x56f/0xfc0 [ 206.340876] ? __lock_is_held+0xb6/0x140 [ 206.344917] ? cgroup_destroy_locked+0x750/0x750 [ 206.349653] ? rcu_read_lock_sched_held+0x108/0x120 [ 206.354644] ? kmem_cache_free+0x258/0x2a0 [ 206.358855] ? set_nlink+0xc1/0x160 [ 206.362460] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 206.367364] ? generic_permission+0x105/0x3c0 [ 206.371837] ? cgroup_destroy_locked+0x750/0x750 [ 206.376574] kernfs_iop_mkdir+0x153/0x1e0 [ 206.380702] vfs_mkdir+0x390/0x600 [ 206.384222] SyS_mkdirat+0x22b/0x2b0 [ 206.387915] ? SyS_mknod+0x480/0x480 [ 206.391608] ? trace_hardirqs_on+0xd/0x10 [ 206.395732] ? do_syscall_64+0xb7/0x940 [ 206.399681] ? SyS_mknod+0x480/0x480 [ 206.403378] do_syscall_64+0x281/0x940 [ 206.407244] ? vmalloc_sync_all+0x30/0x30 [ 206.411366] ? _raw_spin_unlock_irq+0x27/0x70 [ 206.415835] ? finish_task_switch+0x1c1/0x7e0 [ 206.420306] ? syscall_return_slowpath+0x550/0x550 [ 206.425212] ? syscall_return_slowpath+0x2ac/0x550 [ 206.430118] ? prepare_exit_to_usermode+0x350/0x350 [ 206.435109] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 206.440448] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 206.445272] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 206.450437] RIP: 0033:0x454e79 [ 206.453605] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 206.461290] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 206.468537] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 206.475782] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/03/31 15:13:02 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 206.483035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 206.490283] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000002b 2018/03/31 15:13:02 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010", 0x96, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:02 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x0, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:02 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010", 0x96, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 206.711297] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:13:02 executing program 0 (fault-call:3 fault-nth:44): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:13:02 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:13:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000180)=0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/31 15:13:02 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd", 0x12a, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:02 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000", 0xe1, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) flistxattr(r0, &(0x7f0000000000)=""/36, 0x24) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x83, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) r5 = getuid() setresuid(r3, r4, r5) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000100)={0x0, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) 2018/03/31 15:13:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x0, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:02 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @rand_addr}, &(0x7f0000000240)=0xc) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x80000001, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={@local={0xfe, 0x80, [], 0xaa}, 0x38, r2}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000002c0)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r3 = pkey_alloc(0x0, 0x2) pkey_free(r3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r4, r5/1000+30000}, 0x10) accept$netrom(r0, &(0x7f0000000340)=@full, &(0x7f0000000300)=0x48) [ 206.987067] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:13:03 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000", 0xe1, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) r6 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000006000/0x3000)=nil) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="0f0769b69c374a3bedd40cd06a3bc35d988adabb681783ed044c6c3bcc8be5d678a2e3fd7330b595d52cd854a4f42bf7ccc30cbbf6be4d4d90e79c2faf8de6903a57cff3b87340edd7fd4ba902f9644e3219f23878", 0x55}], 0x1, 0x0) shmctl$SHM_LOCK(r6, 0xb) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/03/31 15:13:03 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12a, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000240)={'bpq0\x00', {0x2, 0x1ff, @local={0xac, 0x14, 0x14, 0xaa}}}) io_setup(0x2, &(0x7f0000000080)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000002c0)={'bcsh0\x00', {0x2, 0x4e22}}) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="0202000000008a000000002924be7b7f", 0x10}]) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e07091300000027bd7000fedbdf2508001900000000000a004e22ff07000000000000000000000000ffff00000000feffffff0a004e2300000000000080000000000000000000000000010800000005001a00bffffff9000000000000000000000000ff0100000000000000000000000000010f00141004000400400000000500000000000000f9050000000000008100000000000000"], 0x98}, 0x1}, 0x0) 2018/03/31 15:13:03 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x0, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:03 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000", 0xe1, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:03 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12a, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:03 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d0500000000000000001040000000000000000200000000000000000000000000000000000000000000008002000000000070000000000000060000000000000001000000000000000010000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000000000000000100000000000000000080020000000000008000000000000010000000100000001000000000000000000000000000000000000000000000000000000000", 0x107, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 207.210290] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 207.376739] FAULT_INJECTION: forcing a failure. [ 207.376739] name failslab, interval 1, probability 0, space 0, times 0 [ 207.388057] CPU: 0 PID: 14489 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 207.395414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.404762] Call Trace: [ 207.407354] dump_stack+0x194/0x24d [ 207.410985] ? arch_local_irq_restore+0x53/0x53 [ 207.415651] ? __save_stack_trace+0x7e/0xd0 [ 207.419980] should_fail+0x8c0/0xa40 [ 207.423697] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 207.428797] ? kasan_kmalloc+0xad/0xe0 [ 207.432685] ? kmem_cache_alloc_trace+0x136/0x740 [ 207.437525] ? cfq_cpd_alloc+0x54/0x90 [ 207.441409] ? blkcg_css_alloc+0x165/0x6b0 [ 207.445646] ? cgroup_apply_control_enable+0x44d/0xbc0 [ 207.450919] ? SyS_mkdirat+0x22b/0x2b0 [ 207.454804] ? do_syscall_64+0x281/0x940 [ 207.458863] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 207.464221] ? do_syscall_64+0x281/0x940 [ 207.468280] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 207.473643] ? find_held_lock+0x35/0x1d0 [ 207.477704] ? __lock_is_held+0xb6/0x140 [ 207.481770] ? check_same_owner+0x320/0x320 [ 207.486093] ? rcu_note_context_switch+0x710/0x710 [ 207.491024] should_failslab+0xec/0x120 [ 207.494997] kmem_cache_alloc_trace+0x4b/0x740 [ 207.499577] ? rcu_read_lock_sched_held+0x108/0x120 [ 207.504590] ? kmem_cache_alloc_trace+0x459/0x740 [ 207.509436] bfq_cpd_alloc+0x54/0x90 [ 207.513149] blkcg_css_alloc+0x165/0x6b0 [ 207.517203] ? bfq_pd_alloc+0xe0/0xe0 [ 207.520999] ? blkcg_deactivate_policy+0x430/0x430 [ 207.525926] ? __lock_is_held+0xb6/0x140 [ 207.530002] cgroup_apply_control_enable+0x44d/0xbc0 [ 207.535109] ? cgroup_propagate_control+0x570/0x570 [ 207.540132] ? css_populate_dir+0x289/0x420 [ 207.544459] cgroup_mkdir+0x56f/0xfc0 [ 207.548263] ? __lock_is_held+0xb6/0x140 [ 207.552322] ? cgroup_destroy_locked+0x750/0x750 [ 207.557074] ? rcu_read_lock_sched_held+0x108/0x120 [ 207.562086] ? kmem_cache_free+0x258/0x2a0 [ 207.566318] ? set_nlink+0xc1/0x160 [ 207.569938] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 207.574857] ? generic_permission+0x105/0x3c0 [ 207.579346] ? cgroup_destroy_locked+0x750/0x750 [ 207.584098] kernfs_iop_mkdir+0x153/0x1e0 [ 207.588240] vfs_mkdir+0x390/0x600 [ 207.591778] SyS_mkdirat+0x22b/0x2b0 [ 207.595496] ? SyS_mknod+0x480/0x480 [ 207.599202] ? trace_hardirqs_on+0xd/0x10 [ 207.603347] ? do_syscall_64+0xb7/0x940 [ 207.607319] ? SyS_mknod+0x480/0x480 [ 207.611030] do_syscall_64+0x281/0x940 [ 207.614916] ? vmalloc_sync_all+0x30/0x30 [ 207.619061] ? _raw_spin_unlock_irq+0x27/0x70 [ 207.623554] ? finish_task_switch+0x1c1/0x7e0 [ 207.628045] ? syscall_return_slowpath+0x550/0x550 [ 207.632971] ? syscall_return_slowpath+0x2ac/0x550 [ 207.637897] ? prepare_exit_to_usermode+0x350/0x350 [ 207.642914] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 207.648278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.653126] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 207.658310] RIP: 0033:0x454e79 [ 207.661495] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 207.669201] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 207.676472] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 207.683737] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 207.691006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 207.698270] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000002c 2018/03/31 15:13:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r4 = dup3(r3, r2, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x400, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/31 15:13:03 executing program 0 (fault-call:3 fault-nth:45): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:13:03 executing program 3: r0 = perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_bp={&(0x7f0000000140)}, 0x2000003fc, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x40000000000) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x4, 0x4) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x6, 0x6000) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/10) 2018/03/31 15:13:03 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x107, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:03 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:03 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) getpid() readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) 2018/03/31 15:13:03 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x0, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000008000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000000000000697064647030000000000000000000007663616e30000000000000000000000069705f7674693000000000000000000073797a6b616c6c6572310000000000000180c20000000000000000000180c2000000000000000000000070000000f000000040010000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000006772657461703000000000000000000065716c000000000000000000000000006966623000000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaaaa000000000000000070000000a0000000d8000000434f4e4e5345434d41524b000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000001fce0b0bce0b00aced3e3152fc5b3f64049b6ff0d81edd4976662397c7045ccbd81cc2eed1d62966aee97f0eddce60c26561567164e0411be7ed90d7d414d08cceddfd077fb3ae9ae66f12206e9b0f5a5210dc040babd70e3e77f2873a4038f349498cea1f81d9da17a22022f6fcdc7e5c9e7f5e2f8cfdf1bb763a9010cc25e5afdb799fa7c72ca4b3c6de3536af37bf16ad7da6b9c674f7bb5cadfaf42c33e45e6668aa4b524c14d80015731658ddee60b733165311388a186c5869ac58d90cf242068f4c30eaf71cbb77492bf20c54d6f75"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:03 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) [ 207.981327] FAULT_INJECTION: forcing a failure. [ 207.981327] name failslab, interval 1, probability 0, space 0, times 0 [ 207.992609] CPU: 1 PID: 14537 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 207.999969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.009312] Call Trace: [ 208.011892] dump_stack+0x194/0x24d [ 208.015502] ? arch_local_irq_restore+0x53/0x53 [ 208.020157] should_fail+0x8c0/0xa40 [ 208.023849] ? kstrdup+0x39/0x70 [ 208.027193] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 208.032275] ? cgroup_apply_control_enable+0x390/0xbc0 [ 208.037529] ? kernfs_iop_mkdir+0x153/0x1e0 [ 208.041826] ? vfs_mkdir+0x390/0x600 [ 208.045515] ? SyS_mkdirat+0x22b/0x2b0 [ 208.049377] ? do_syscall_64+0x281/0x940 [ 208.053415] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 208.058768] ? find_held_lock+0x35/0x1d0 [ 208.062810] ? find_held_lock+0x35/0x1d0 [ 208.066858] ? __lock_is_held+0xb6/0x140 [ 208.070902] ? check_same_owner+0x320/0x320 [ 208.075201] ? rcu_note_context_switch+0x710/0x710 [ 208.080105] ? rcu_read_lock_sched_held+0x108/0x120 [ 208.085100] should_failslab+0xec/0x120 [ 208.089054] kmem_cache_alloc+0x47/0x760 [ 208.093090] ? memcpy+0x45/0x50 [ 208.096353] ? kstrdup+0x59/0x70 [ 208.099700] __kernfs_new_node+0xe2/0x570 [ 208.103824] ? kernfs_dop_revalidate+0x380/0x380 [ 208.108559] ? delete_node+0x2db/0xbc0 [ 208.112427] ? snprintf+0xc0/0xf0 [ 208.115860] ? vsprintf+0x40/0x40 [ 208.119295] ? trace_event_raw_event_lock+0x340/0x340 [ 208.124463] kernfs_new_node+0x80/0xe0 [ 208.128330] __kernfs_create_file+0x4b/0x320 [ 208.132719] cgroup_addrm_files+0x3c5/0xa70 [ 208.137029] ? cgroup_file_write+0x710/0x710 [ 208.141420] ? cgroup_idr_replace+0x3f/0x50 [ 208.145722] ? __lock_is_held+0xb6/0x140 [ 208.149763] ? __local_bh_enable_ip+0x121/0x230 [ 208.154407] ? online_css+0x224/0x2e0 [ 208.158186] css_populate_dir+0x198/0x420 [ 208.162314] cgroup_apply_control_enable+0x390/0xbc0 [ 208.167396] ? cgroup_propagate_control+0x570/0x570 [ 208.172392] ? css_populate_dir+0x289/0x420 [ 208.176691] cgroup_mkdir+0x56f/0xfc0 [ 208.180468] ? __lock_is_held+0xb6/0x140 [ 208.184510] ? cgroup_destroy_locked+0x750/0x750 [ 208.189241] ? rcu_read_lock_sched_held+0x108/0x120 [ 208.194233] ? kmem_cache_free+0x258/0x2a0 [ 208.198444] ? set_nlink+0xc1/0x160 [ 208.202049] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 208.206950] ? generic_permission+0x105/0x3c0 [ 208.211427] ? cgroup_destroy_locked+0x750/0x750 [ 208.216160] kernfs_iop_mkdir+0x153/0x1e0 [ 208.220284] vfs_mkdir+0x390/0x600 [ 208.223802] SyS_mkdirat+0x22b/0x2b0 [ 208.227493] ? SyS_mknod+0x480/0x480 [ 208.231184] ? trace_hardirqs_on+0xd/0x10 [ 208.235310] ? do_syscall_64+0xb7/0x940 [ 208.239262] ? SyS_mknod+0x480/0x480 [ 208.242954] do_syscall_64+0x281/0x940 [ 208.246818] ? vmalloc_sync_all+0x30/0x30 [ 208.250945] ? _raw_spin_unlock_irq+0x27/0x70 [ 208.255419] ? finish_task_switch+0x1c1/0x7e0 [ 208.259892] ? syscall_return_slowpath+0x550/0x550 [ 208.264797] ? syscall_return_slowpath+0x2ac/0x550 [ 208.269704] ? prepare_exit_to_usermode+0x350/0x350 [ 208.274697] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 208.280039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.284861] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 208.290031] RIP: 0033:0x454e79 [ 208.293204] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 208.300890] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 208.308145] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 208.315390] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 208.322636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 208.329878] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000002d [ 208.337397] cgroup: cgroup_addrm_files: failed to add stat, err=-12 2018/03/31 15:13:04 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d0500000000000000001040000000000000000200000000000000000000000000000000000000000000008002000000000070000000000000060000000000000001000000000000000010000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000000000000000100000000000000000080020000000000008000000000000010000000100000001000000000000000000000000000000000000000000000000000000000", 0x107, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000024c0)={0xffffffff}, 0x111}}, 0xfffffffffffffdad) write$rdma_cm(r0, &(0x7f0000000480)=@join_mcast={0x16, 0x0, 0xfa00, {&(0x7f0000000200), 0x0, r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"ee2f8f36063cbc2b738ff0a61680f11a"}}}}, 0x76) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x100) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)={0x1, [0x7]}, &(0x7f0000000040)=0x6) [ 208.373066] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:13:04 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x11a, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:04 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:04 executing program 0 (fault-call:3 fault-nth:46): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') [ 208.538681] FAULT_INJECTION: forcing a failure. [ 208.538681] name failslab, interval 1, probability 0, space 0, times 0 [ 208.549998] CPU: 0 PID: 14567 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 208.557353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.566686] Call Trace: [ 208.569253] dump_stack+0x194/0x24d [ 208.572864] ? arch_local_irq_restore+0x53/0x53 [ 208.577523] should_fail+0x8c0/0xa40 [ 208.581217] ? kstrdup+0x39/0x70 [ 208.584568] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 208.589649] ? cgroup_apply_control_enable+0x390/0xbc0 [ 208.594907] ? kernfs_iop_mkdir+0x153/0x1e0 [ 208.599205] ? vfs_mkdir+0x390/0x600 [ 208.602894] ? SyS_mkdirat+0x22b/0x2b0 [ 208.606760] ? do_syscall_64+0x281/0x940 [ 208.610800] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 208.616144] ? find_held_lock+0x35/0x1d0 [ 208.620190] ? find_held_lock+0x35/0x1d0 [ 208.624235] ? __lock_is_held+0xb6/0x140 [ 208.628285] ? check_same_owner+0x320/0x320 [ 208.632588] ? rcu_note_context_switch+0x710/0x710 [ 208.637496] ? rcu_read_lock_sched_held+0x108/0x120 [ 208.642497] should_failslab+0xec/0x120 [ 208.646975] kmem_cache_alloc+0x47/0x760 [ 208.651024] ? memcpy+0x45/0x50 [ 208.654285] ? kstrdup+0x59/0x70 [ 208.657638] __kernfs_new_node+0xe2/0x570 [ 208.661766] ? kernfs_dop_revalidate+0x380/0x380 [ 208.666501] ? delete_node+0x2db/0xbc0 [ 208.670551] ? snprintf+0xc0/0xf0 [ 208.673984] ? vsprintf+0x40/0x40 [ 208.677419] ? trace_event_raw_event_lock+0x340/0x340 [ 208.682591] kernfs_new_node+0x80/0xe0 [ 208.686464] __kernfs_create_file+0x4b/0x320 [ 208.690861] cgroup_addrm_files+0x3c5/0xa70 [ 208.695169] ? cgroup_file_write+0x710/0x710 [ 208.699561] ? cgroup_idr_replace+0x3f/0x50 [ 208.703864] ? __lock_is_held+0xb6/0x140 [ 208.707909] ? __local_bh_enable_ip+0x121/0x230 [ 208.712554] ? online_css+0x224/0x2e0 [ 208.716336] css_populate_dir+0x198/0x420 [ 208.720471] cgroup_apply_control_enable+0x390/0xbc0 [ 208.725564] ? cgroup_propagate_control+0x570/0x570 [ 208.730565] ? css_populate_dir+0x289/0x420 [ 208.734867] cgroup_mkdir+0x56f/0xfc0 [ 208.738644] ? __lock_is_held+0xb6/0x140 [ 208.742688] ? cgroup_destroy_locked+0x750/0x750 [ 208.747421] ? rcu_read_lock_sched_held+0x108/0x120 [ 208.752420] ? kmem_cache_free+0x258/0x2a0 [ 208.756639] ? set_nlink+0xc1/0x160 [ 208.760246] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 208.765150] ? generic_permission+0x105/0x3c0 [ 208.769628] ? cgroup_destroy_locked+0x750/0x750 [ 208.774365] kernfs_iop_mkdir+0x153/0x1e0 [ 208.778493] vfs_mkdir+0x390/0x600 [ 208.782022] SyS_mkdirat+0x22b/0x2b0 [ 208.785718] ? SyS_mknod+0x480/0x480 [ 208.789409] ? trace_hardirqs_on+0xd/0x10 [ 208.793537] ? do_syscall_64+0xb7/0x940 [ 208.797491] ? SyS_mknod+0x480/0x480 [ 208.801182] do_syscall_64+0x281/0x940 [ 208.805047] ? vmalloc_sync_all+0x30/0x30 [ 208.809173] ? _raw_spin_unlock_irq+0x27/0x70 [ 208.813646] ? finish_task_switch+0x1c1/0x7e0 [ 208.818121] ? syscall_return_slowpath+0x550/0x550 [ 208.823033] ? syscall_return_slowpath+0x2ac/0x550 [ 208.827940] ? prepare_exit_to_usermode+0x350/0x350 [ 208.832935] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 208.838283] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.843108] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 208.848274] RIP: 0033:0x454e79 [ 208.851447] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 208.859136] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 208.866381] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 208.873628] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 208.880877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/03/31 15:13:04 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x11a, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:04 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x0, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) [ 208.888126] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000002e [ 208.895661] cgroup: cgroup_addrm_files: failed to add stat, err=-12 [ 208.982959] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:13:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x242, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa}, 0x1c) accept4(r0, &(0x7f0000000100)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f0000000000)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x3, 0x100000001}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={r3, 0x401}, &(0x7f00000002c0)=0x8) listen(r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000040)=0x52d018f4, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) connect$inet(0xffffffffffffffff, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000002200)=ANY=[@ANYBLOB="9c15ffffff"], 0x5}, 0x1}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x14, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='teql0\x00', 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000080)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) recvmsg(r4, &(0x7f00000001c0)={&(0x7f0000000200)=@pppol2tpv3, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001440)=""/213, 0xd5}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000580), 0x4) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xffffff31, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x0) 2018/03/31 15:13:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/03/31 15:13:05 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:05 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x11a, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:05 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x100000, 0x0) readv(r1, &(0x7f0000000380), 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x101, 0x4) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="5970810d160ea77a6875c66efbf2520a5f69fc557c87394b733ae5c937a1b17bda1e561771afdddacd7105a09fb782f6da045ec79481adcccac76523693783d80702a2a9e79a73c30c918b21ba27497b13bb23a944fc08ece4529a713e8feb100516ef8c6896e8673a87fc52b63aecd6cd3dd67139717ac6451131d18aa99aec37aab6dbe491d4c952f0e590a8cef359e0850805e4f1ea0ddc31cd7028ce26d971236b7a997f4e70ad9982691def07d2cdf1651ec8", 0xb5, 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, r3, 0x1f, 0x2, r4) ioctl$TIOCGPTPEER(r0, 0x5441, 0x101) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000004c0)={0x9, 0x4, 0xfff, 0xffffffffffffffc1, &(0x7f00000003c0)=[{}, {}, {}, {}]}) ioctl$KDADDIO(r1, 0x4b34, 0x0) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000001c0)=0x40) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r5, r6/1000+30000}, 0x10) r7 = epoll_create1(0x80000) epoll_pwait(r7, &(0x7f0000000540)=[{}, {}, {}], 0x3, 0x4, &(0x7f0000000580)={0x6}, 0x8) 2018/03/31 15:13:05 executing program 0 (fault-call:3 fault-nth:47): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:13:05 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x0, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:05 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:13:05 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x123, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:05 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a00", 0x12c}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 209.221378] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:13:05 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x123, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) dup3(r0, r0, 0x80000) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 209.396776] FAULT_INJECTION: forcing a failure. [ 209.396776] name failslab, interval 1, probability 0, space 0, times 0 [ 209.408219] CPU: 0 PID: 14632 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 209.415574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.424909] Call Trace: [ 209.427486] dump_stack+0x194/0x24d [ 209.431092] ? arch_local_irq_restore+0x53/0x53 [ 209.435743] should_fail+0x8c0/0xa40 [ 209.439439] ? kstrdup+0x39/0x70 [ 209.442784] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 209.447861] ? cgroup_apply_control_enable+0x390/0xbc0 [ 209.453115] ? kernfs_iop_mkdir+0x153/0x1e0 [ 209.457410] ? vfs_mkdir+0x390/0x600 [ 209.461100] ? SyS_mkdirat+0x22b/0x2b0 [ 209.464965] ? do_syscall_64+0x281/0x940 [ 209.469005] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 209.474351] ? find_held_lock+0x35/0x1d0 [ 209.478392] ? find_held_lock+0x35/0x1d0 [ 209.482437] ? __lock_is_held+0xb6/0x140 [ 209.486483] ? check_same_owner+0x320/0x320 [ 209.490782] ? rcu_note_context_switch+0x710/0x710 [ 209.495687] ? rcu_read_lock_sched_held+0x108/0x120 [ 209.500685] should_failslab+0xec/0x120 [ 209.504634] kmem_cache_alloc+0x47/0x760 [ 209.508669] ? memcpy+0x45/0x50 [ 209.511926] ? kstrdup+0x59/0x70 [ 209.515271] __kernfs_new_node+0xe2/0x570 [ 209.519397] ? kernfs_dop_revalidate+0x380/0x380 [ 209.524127] ? delete_node+0x2db/0xbc0 [ 209.527994] ? snprintf+0xc0/0xf0 [ 209.531426] ? vsprintf+0x40/0x40 [ 209.534863] ? trace_event_raw_event_lock+0x340/0x340 [ 209.540031] kernfs_new_node+0x80/0xe0 [ 209.543895] __kernfs_create_file+0x4b/0x320 [ 209.548285] cgroup_addrm_files+0x3c5/0xa70 [ 209.552585] ? cgroup_file_write+0x710/0x710 [ 209.556974] ? cgroup_idr_replace+0x3f/0x50 [ 209.561271] ? __lock_is_held+0xb6/0x140 [ 209.565313] ? __local_bh_enable_ip+0x121/0x230 [ 209.569959] ? online_css+0x224/0x2e0 [ 209.573739] css_populate_dir+0x198/0x420 [ 209.577866] cgroup_apply_control_enable+0x390/0xbc0 [ 209.582950] ? cgroup_propagate_control+0x570/0x570 [ 209.587943] ? css_populate_dir+0x289/0x420 [ 209.592241] cgroup_mkdir+0x56f/0xfc0 [ 209.596018] ? __lock_is_held+0xb6/0x140 [ 209.600059] ? cgroup_destroy_locked+0x750/0x750 [ 209.604789] ? rcu_read_lock_sched_held+0x108/0x120 [ 209.609781] ? kmem_cache_free+0x258/0x2a0 [ 209.613991] ? set_nlink+0xc1/0x160 [ 209.617598] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 209.622501] ? generic_permission+0x105/0x3c0 [ 209.626976] ? cgroup_destroy_locked+0x750/0x750 [ 209.631707] kernfs_iop_mkdir+0x153/0x1e0 [ 209.635842] vfs_mkdir+0x390/0x600 [ 209.639358] SyS_mkdirat+0x22b/0x2b0 [ 209.643047] ? SyS_mknod+0x480/0x480 [ 209.646736] ? trace_hardirqs_on+0xd/0x10 [ 209.650860] ? do_syscall_64+0xb7/0x940 [ 209.654810] ? SyS_mknod+0x480/0x480 [ 209.658498] do_syscall_64+0x281/0x940 [ 209.662362] ? vmalloc_sync_all+0x30/0x30 [ 209.666485] ? _raw_spin_unlock_irq+0x27/0x70 [ 209.670955] ? finish_task_switch+0x1c1/0x7e0 [ 209.675429] ? syscall_return_slowpath+0x550/0x550 [ 209.680331] ? syscall_return_slowpath+0x2ac/0x550 [ 209.685235] ? prepare_exit_to_usermode+0x350/0x350 [ 209.690225] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 209.695566] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.700388] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 209.705551] RIP: 0033:0x454e79 [ 209.708714] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 209.716398] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 209.723644] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 209.730890] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 209.738134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 209.745377] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 000000000000002f [ 209.752737] cgroup: cgroup_addrm_files: failed to add stat, err=-12 2018/03/31 15:13:06 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x123, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x0, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:06 executing program 0 (fault-call:3 fault-nth:48): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:13:06 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:06 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x90080) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5, 0xfffffffffffffff7}, {0x2, 0x1f}]}) bpf$MAP_CREATE(0x0, &(0x7f0000fc9000)={0x1, 0x6, 0x209e1d, 0x800001}, 0x2c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x3ff, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000140)={r2, 0x81}) 2018/03/31 15:13:06 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:13:06 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) 2018/03/31 15:13:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4002}, 0xffffffffffffff93) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e23, 0x2000000, @dev={0xfe, 0x80, [], 0x1a}, 0x8}, {0xa, 0x4e23, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, 0x6, [0x1, 0xfffffffffffffff9, 0x8, 0x7ff, 0x1, 0x2, 0x81, 0x28000000000000]}, 0x5c) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 210.194724] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 210.210811] FAULT_INJECTION: forcing a failure. [ 210.210811] name failslab, interval 1, probability 0, space 0, times 0 [ 210.222069] CPU: 1 PID: 14675 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 210.229426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.238777] Call Trace: [ 210.241370] dump_stack+0x194/0x24d [ 210.245001] ? arch_local_irq_restore+0x53/0x53 [ 210.249675] should_fail+0x8c0/0xa40 [ 210.253387] ? kstrdup+0x39/0x70 [ 210.256753] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 210.261855] ? cgroup_apply_control_enable+0x390/0xbc0 [ 210.267131] ? kernfs_iop_mkdir+0x153/0x1e0 [ 210.271445] ? vfs_mkdir+0x390/0x600 [ 210.275153] ? SyS_mkdirat+0x22b/0x2b0 [ 210.279039] ? do_syscall_64+0x281/0x940 [ 210.283100] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 210.288465] ? find_held_lock+0x35/0x1d0 [ 210.292521] ? find_held_lock+0x35/0x1d0 [ 210.296568] ? __lock_is_held+0xb6/0x140 [ 210.300611] ? check_same_owner+0x320/0x320 [ 210.304916] ? rcu_note_context_switch+0x710/0x710 [ 210.309825] ? rcu_read_lock_sched_held+0x108/0x120 [ 210.314824] should_failslab+0xec/0x120 [ 210.318777] kmem_cache_alloc+0x47/0x760 [ 210.322814] ? memcpy+0x45/0x50 [ 210.326070] ? kstrdup+0x59/0x70 [ 210.329415] __kernfs_new_node+0xe2/0x570 [ 210.333542] ? kernfs_dop_revalidate+0x380/0x380 [ 210.338279] ? snprintf+0xc0/0xf0 [ 210.341709] ? vsprintf+0x40/0x40 [ 210.345141] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 210.350045] ? cgroup_file_name+0x1d0/0x1d0 [ 210.354344] kernfs_new_node+0x80/0xe0 [ 210.358208] __kernfs_create_file+0x4b/0x320 [ 210.362595] cgroup_addrm_files+0x3c5/0xa70 [ 210.366900] ? cgroup_file_write+0x710/0x710 [ 210.371293] ? cgroup_idr_replace+0x3f/0x50 [ 210.375592] ? __lock_is_held+0xb6/0x140 [ 210.379635] ? __local_bh_enable_ip+0x121/0x230 [ 210.384280] ? online_css+0x224/0x2e0 [ 210.388058] css_populate_dir+0x198/0x420 [ 210.392185] cgroup_apply_control_enable+0x390/0xbc0 [ 210.397270] ? cgroup_propagate_control+0x570/0x570 [ 210.402264] ? css_populate_dir+0x289/0x420 [ 210.406562] cgroup_mkdir+0x56f/0xfc0 [ 210.410335] ? __lock_is_held+0xb6/0x140 [ 210.414373] ? cgroup_destroy_locked+0x750/0x750 [ 210.419105] ? rcu_read_lock_sched_held+0x108/0x120 [ 210.424095] ? kmem_cache_free+0x258/0x2a0 [ 210.428307] ? set_nlink+0xc1/0x160 [ 210.431913] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 210.436820] ? generic_permission+0x105/0x3c0 [ 210.441294] ? cgroup_destroy_locked+0x750/0x750 [ 210.446031] kernfs_iop_mkdir+0x153/0x1e0 [ 210.450159] vfs_mkdir+0x390/0x600 [ 210.453674] SyS_mkdirat+0x22b/0x2b0 [ 210.457365] ? SyS_mknod+0x480/0x480 [ 210.461052] ? trace_hardirqs_on+0xd/0x10 [ 210.465177] ? do_syscall_64+0xb7/0x940 [ 210.469128] ? SyS_mknod+0x480/0x480 [ 210.472817] do_syscall_64+0x281/0x940 [ 210.476680] ? vmalloc_sync_all+0x30/0x30 [ 210.481504] ? _raw_spin_unlock_irq+0x27/0x70 [ 210.485977] ? finish_task_switch+0x1c1/0x7e0 [ 210.490451] ? syscall_return_slowpath+0x550/0x550 [ 210.495353] ? syscall_return_slowpath+0x2ac/0x550 [ 210.500266] ? prepare_exit_to_usermode+0x350/0x350 [ 210.505258] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 210.513034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 210.517857] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 210.523024] RIP: 0033:0x454e79 [ 210.526198] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 210.533884] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 2018/03/31 15:13:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x0, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:06 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b0092", 0x128, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 210.541129] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 210.548373] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 210.555617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 210.562862] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000030 [ 210.570257] cgroup: cgroup_addrm_files: failed to add max, err=-12 2018/03/31 15:13:06 executing program 3: r0 = memfd_create(&(0x7f0000000040)='syzkaller\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000659ffe), &(0x7f00003c6ffc), &(0x7f0000a2effc), &(0x7f00007c4000)) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x66, &(0x7f0000000200)=0x4) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1}) recvmsg(r3, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x80, &(0x7f00000023c0), 0x9, &(0x7f0000b30000)}, 0x0) r4 = dup2(r0, r3) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "95894d5c46486fd8a1fca32f9968b48c3754d0c897b6b32ace84588a23242f597f283810ca461fab7bdd79582a6c71234192dc4426ac7a41432083b5678ea66f", "eb868bd6719752c787ecce0f52f8955f58d49fe54a66b17030b86ca46925dbac192e0734db138379d96711eab5a0e917c09b55cc3eb706730dbbf21b6680df16", "ee0ad01f767161abde2052f7cf8c001f9063c0a1080ad31717e46861cd7db006"}) tkill(r1, 0x15) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x100, 0x8000) wait4(0x0, 0x0, 0x80000000, &(0x7f000005af70)) wait4(0x0, 0x0, 0x60000002, &(0x7f0000a94f70)) 2018/03/31 15:13:06 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a00", 0x12c}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:06 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:06 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2440, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x4040}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/03/31 15:13:06 executing program 0 (fault-call:3 fault-nth:49): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') [ 210.701824] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:13:06 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:06 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x0, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:06 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd", 0x12a, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:06 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 210.924174] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:13:07 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(r1, r0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f00000000c0)={0x4, 0xd56}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000180)={0x0, 0x7}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 211.107558] FAULT_INJECTION: forcing a failure. [ 211.107558] name failslab, interval 1, probability 0, space 0, times 0 [ 211.118859] CPU: 0 PID: 14732 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 211.126219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.135565] Call Trace: [ 211.138151] dump_stack+0x194/0x24d [ 211.141787] ? arch_local_irq_restore+0x53/0x53 [ 211.146467] should_fail+0x8c0/0xa40 [ 211.150182] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 211.155285] ? rb_first_postorder+0xa0/0xa0 [ 211.159605] ? __mutex_lock+0x16f/0x1a80 [ 211.163673] ? trace_event_raw_event_lock+0x340/0x340 [ 211.168856] ? trace_hardirqs_off+0x10/0x10 [ 211.173183] ? find_held_lock+0x35/0x1d0 [ 211.177247] ? __lock_is_held+0xb6/0x140 [ 211.181326] ? check_same_owner+0x320/0x320 [ 211.185655] ? lock_downgrade+0x980/0x980 [ 211.189803] ? rcu_note_context_switch+0x710/0x710 [ 211.194743] should_failslab+0xec/0x120 [ 211.198723] __kmalloc_track_caller+0x5f/0x760 [ 211.203310] ? string+0x180/0x200 [ 211.206762] ? kstrdup_const+0x39/0x50 [ 211.210657] kstrdup+0x39/0x70 [ 211.213849] kstrdup_const+0x39/0x50 [ 211.217569] __kernfs_new_node+0xa2/0x570 [ 211.221720] ? kernfs_dop_revalidate+0x380/0x380 [ 211.226490] ? snprintf+0xc0/0xf0 [ 211.229944] ? vsprintf+0x40/0x40 [ 211.233403] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 211.238335] ? cgroup_file_name+0x1d0/0x1d0 [ 211.242661] kernfs_new_node+0x80/0xe0 [ 211.246551] __kernfs_create_file+0x4b/0x320 [ 211.250969] cgroup_addrm_files+0x3c5/0xa70 [ 211.255300] ? cgroup_file_write+0x710/0x710 [ 211.259717] ? cgroup_idr_replace+0x3f/0x50 [ 211.264042] ? __lock_is_held+0xb6/0x140 [ 211.268113] ? __local_bh_enable_ip+0x121/0x230 [ 211.272783] ? online_css+0x224/0x2e0 [ 211.276583] css_populate_dir+0x198/0x420 [ 211.280737] cgroup_apply_control_enable+0x390/0xbc0 [ 211.285846] ? cgroup_propagate_control+0x570/0x570 [ 211.290870] ? css_populate_dir+0x289/0x420 [ 211.295195] cgroup_mkdir+0x56f/0xfc0 [ 211.298992] ? __lock_is_held+0xb6/0x140 [ 211.303058] ? cgroup_destroy_locked+0x750/0x750 [ 211.307814] ? rcu_read_lock_sched_held+0x108/0x120 [ 211.312828] ? kmem_cache_free+0x258/0x2a0 [ 211.317063] ? set_nlink+0xc1/0x160 [ 211.320689] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 211.325613] ? generic_permission+0x105/0x3c0 [ 211.330111] ? cgroup_destroy_locked+0x750/0x750 [ 211.334869] kernfs_iop_mkdir+0x153/0x1e0 [ 211.339016] vfs_mkdir+0x390/0x600 [ 211.342563] SyS_mkdirat+0x22b/0x2b0 [ 211.346279] ? SyS_mknod+0x480/0x480 [ 211.349991] ? trace_hardirqs_on+0xd/0x10 [ 211.354136] ? do_syscall_64+0xb7/0x940 [ 211.358109] ? SyS_mknod+0x480/0x480 [ 211.361826] do_syscall_64+0x281/0x940 [ 211.365713] ? vmalloc_sync_all+0x30/0x30 [ 211.369858] ? _raw_spin_unlock_irq+0x27/0x70 [ 211.374354] ? finish_task_switch+0x1c1/0x7e0 [ 211.378852] ? syscall_return_slowpath+0x550/0x550 [ 211.383781] ? syscall_return_slowpath+0x2ac/0x550 [ 211.388711] ? prepare_exit_to_usermode+0x350/0x350 [ 211.393730] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 211.399095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 211.403943] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 211.409126] RIP: 0033:0x454e79 [ 211.412311] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 211.420013] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 211.427276] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 211.434540] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 211.441805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 211.449074] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000031 2018/03/31 15:13:07 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:13:07 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12a, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:07 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 211.456514] cgroup: cgroup_addrm_files: failed to add weight, err=-12 2018/03/31 15:13:07 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x0, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:07 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000001c0)=""/107) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x7, 0x8) r2 = pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x2) pkey_free(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) [ 211.548220] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/31 15:13:08 executing program 0 (fault-call:3 fault-nth:50): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:13:08 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x0, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:08 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:13:08 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd", 0x12a, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:08 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x1000, "a46534bfdd3c98e441ba58ccbba9ceb8449e84411da5aea3d58ee7860b7f1f264f78a2b33a77c93db01373335efbf1c13ef8125538522738c41be7e1b129b5dec79c280ccf6a43511dcf2454f35ce4d777d2c1efb2bec24cca51a4b6efa08734824d075abfed163e7361535ad64f730a5b7d723f2b93dd8ed9a5ddc32796e63daf8236c550e26282fd2852e40e1abdd8bb437463c8f2a380bfd46170ba77efe3042d8f7ee0925526013836e872011c9d2b800286b3b49530b7cbf25b7732237e168fadfd2a1962a1dc73104148155c79f731c9d15a27c3e9d364d28bbea7c4ec847c12bc6d250c765e00f38ca029b7941fc583028019f1387a56de7992370b95ef9dc7398c6755a6fea0d50d4b255c70d17ed7582a58d61833b168f24e24c7bec0166c75a73c6defbbe1fc3a93789c42c055fd754a7f4ee43cc6e3f32d353780221b9c6e618816d125d98d5d50c61377a527b9ef2191f9b6818157c5c33389e8ee1510452bda0d854ab467fb5065dcfb68d5a6c3d0a733016d12a90d1e156150d71eddab6f579cea5202d5e1d65fc20b58fb90e84e916812c9ba8f8c03577cbfe34f1118f73ef94614b9906dbd9b9a7d3145fcbd7adb70eb6110002f4d9056e4b7f929884d34e5c0a6062b1b46c38f9a5572e339e424dd3f80869d60c7802025133da2a5032c08be7dd219a9dbe929fba1fefede7c127978e27f0ed13e06d15f8fa3d68db1165cf81e4542f0e1e8041f2f31a33757313bddd2ee4e792b35327d348ce971b37d43d3af3673bd0000bd6c033fae2049ac1fa79d355054677ffd758d181f3a82f126dc71c5738a56f5317c67d69ffddf179ca9c901574392f271b8dcdae6972bb9763a70da4d136f92ecce8772562eeada7ee314323b737b708b2c740b88e13a99e4e414e046070910d79f48e97416fd969060053ae4860b8b3d89a88108605292e285e1ed0e82e9e72ef392a43fc3d7ba8ac497b96f7f0e44d01ccb399fbcab9119e34db56bd77ec19ab2612a39541c2bc3bf6683ca53b22d013e1d8b37341b47a7db68d36aac7b8559dc6987a16a97a7adc792de42d321cacd2e29307dde70d2397bb0196781d35ba4fce091298941464714c411a1ba2204671aafdc2fcd51b9d21750e230978f87ae29aefe5d43997766163781c13264c4ed42e916fb1b4656237da890c1f07d1e141d3a101ba053742aa1324f3f06c1618a21192e102c6535bd9b4a9f0ea368ee634236b33211f001d2a9ecd8cc9c383650ade4f3e8fd6a57ca39c4106cceec17b24b817180d261897e21abf7d4743c4190f9bbe557d59f1467b5399397344d1f02e3b1627029f14c48640739b2d1b672d01d09a3e96b9ee53fd479ffb4c0e4eb4038f271fc7063df9286f6f6c38aece01171d03fd5a8acb81515c23c64a0b274395939ad7486c5835a7095f7606d03f8443c2c7aa098a891edc181224b006fbb47ff7326eef8b9e1bd9a8cb148b4112a3f5bf60a1a77be2706ed1aef2de87eb29fbc8c931513f22ef9529eed43f818afacc16750a36170a135e3e8512b9c1c8ec08e41e7f4782ec0ce06fcb66100f74e7ea3c0109eccb7b06c49e6754020eec581ba53bd66675da012908a98183ad89b6b98cf1f25e68f33d482df6096cd9df5a354ed931431aa89ff676f1564d44eea8c4063a1ac03c38765efe71f822b696ebdf7d05ae237ec3bbe31b691d62926bfd7dfbd97f99be36786b83e554d2164a341578f5fd1d3451cc85407b47230307017b4447a53370948c4a6673dfdcd9bc4805a5b4555d23e3c191b4fa6c2702bf0fde1da420ec618a8093c5ea37a495532ecd7e16b3e78533355857af0a1594540d8123813e29a89d2c40b50f888c676acdca1852f5e37a281e66d71e542df157ff0bc48c4c7315b990a61260899bf7d718c154908bb3b081d69c7c12b254c67e9bceabfbec5654a673b7f1f6437355b9b4b5e35e99ae012ffc5305a8730622555e03196828bb72130b76373ba30a7c187c41a972d63be5df5490c04a192fa928b388c6ae9ae5a87cd07a7f73105e2f26207c7507e420077ed29983f2625438df490d726e087476daad708d0c5343f188a020d93f0a9ea9db51073910bf28558b451254b785d3b2b10568d6473835e47e2bb9925c54db4c188696f9e3cb13a0e2cbe3b3fb31af4e7a6f253aee7da108f2ed3ae434a6bff13600d1175107530bc264ff57acbd7dd5d9308cf842fb086448579ca84358346791c59bb01138275a7871eade05ad70bf0b896a9a9d685f5534ed92a6abc4b8cb5b50a9f5886769cb7c2adb890e9a164cdf6dfeaea0d2c9508aee83011adb67e460802c7306719495f9bf741684f61590719ede0208770af15c5126cc4ac967de61a835550b7b248576e492b6a3a8ed36093d9325d2f3dae88531979735e62dd1a56d4045e5931fd307105c7d7ef4af9b0e437100e7f4614090eaee4948d47e4e8803b61a1e9000dda8422d12db8d6381d7238f0d427d98f7bfb083eb85faa08c52a77c5a2c948d148d3221f3ad1c8113c2677508f20671ba9cc248e9622eb0730a6d8a8e4841001d0660d91463de64e6799194b66c332d9d4fd7edf554b9f1dfa26e70f83f75fe1f65c39bd45d76d8d8e3dc2c1f8ffe01e3927e179f2362d164809d4e64f6c46b0e55030b36c78836335bef16843d2cfcccea3998f24cf61f497237b59da8b6771d5e1c12044f34840510b1452bfb82e8ff53b3c7c70c78603daee865ec56366852e05825a318cddf217f07ca95eea7630b9e3849234267697f1c95b9b5e837ca598453dd83738c4ac4455d5f369968e8d987cd03bb172cf5df8761591983fe26c6ae94045671f446914a0e3af1cd291c2949e9eb9fe9077342e677f3c9166226b1ab387732767b931d5cdd16ff6a8ab3a33509a739e7cd140ff65beb776b464f40f3aa34a6e1d6958b208afa96e19c4298cd274a081f0288404770dab5758498a8e2523c957b287ca2d50b34b830655a7c3b2f55e82928b2e15f7ad61fdaa3aef4af763202c0d2b15bc3a5d82cd2a7dd6dfb9ff74fed87896c442d06779b8038cf21d99135afbacbf879ff200898b12acf64eab4555c739c15caac61666422dd51613e91cd747d376bc719730354a59bad40730ed167c1992a72190d42fd5872ef2679b147cd58a438dd0b345a88b18845380764f86eeb70ab5471d055b82dfee2890bd398a13cbd776e556351908eef7317c5605f2fd9d2b8497f53466cf1ae830deca09f48d64d7c7079adc6bcf15abbe342cfbd18945d488a9d130c928a5dcac39187263e97682253676cd37bdc96e03be1e37d8b60251d8ee6a50926e269eadaea3a159582845f63c68e1d330e8c4869664dc2901bb4cf4a5165614cbd79e7be6d230304ba3c8548d483c8264c5e4bb6e85fa4218155cbb95e34207de2b4d3cec4a46b2e526df30de8e362aab92d88970fdee5ff918a6e56faf75f7e96c0908300bf11cc255c8ff1f6bbf15476067fdf88cdb52055e1b809057e79d7bfb3e0b05bb9d659ae04e51998ad3a7fea155d28cf6bfe4deca2266092a8ed10ffced6615a1ba43ce2f0816c99addbe8911d429640d2e001117a6c5fd441b99808e1cfdb4d78891d0f0b41c0040541eddffd4ccb471fe2f6b2455a023a2f960e874aef0fc0d643495368a295d9d3ac658b63e587c74cae532466ef83ac80e0c192a3358430485561d1f17f1bb9d86222430bb3d4c68a231d08d56ac7578fa48f69c03780d098b44e3339019c6150dfec0060aee155a70ad018ca32e1345bff1e659d51e5eb9f318ac70c7646a3e515bcb07b71fb18ccc36da692b573d8ae68f733620fdad3a54a1e6c446f799ba327c4d9030bcfd8f8e84a8f06bc0ac81696a5036ab5e6119b9e97d1a1a55de1325111a51daf70a79b975de30a4902100038bab8a94736b9f51bb909d52c25809b31ae3bbf33c115af6817d908bb3dddf0020ec5f28e71281e476d488d3175d2e7966f23a62242da1ee04aa6297d6acd5702aa50cf23c67c9edd4baaeb22554684b84786dc82e664b9453eba0ecd14763f8bda546dece15b6feddb109bc544e70e116fa115cb0ae48f783f348a3afe7ef03553d0c619907555d2f95a8555e4752e4ca5da15a37a409db1589b7bb3aebf6de35a49cb3440788bd592384b1d9a4e07c7dba555c943d9691aa1bfe48b6cebbd1c08269b566c352e6245f206067bf1e5d167838bcb7618963555c32b9ec0defcffe53eb0b178e2ebfd9287145f809e803cd3034f219e45b5cd1fed9d6af38211b043c688ec642512c9f9bbd60831f582baf1e831404705aff4ad43783c171ce009c86edc424470377b9d7458fab1f9cf54880535c2174eed3ead4ef09636f44cbf561314568dfca0788e4f9b43060807c6ecbfbde7e3327aecb9edc15bb4fe3395b8166d3ddd0218e6382f4b6b56b242181cf7a7043db43b710f457cfba986a0962a4170e108736d9c773a865a4f03c0ee15511d8160a0684c854eb48780140b2cc3f0c925745093d714c13e018d826bd37ebe2f42fb8d16def9f927ceba1b2ec96a7edada099c2ecaec932f0045354ddf5f13da601cf6584b6b2b6cdd6e0ba6654b37bb0cac1edcd4689ed4c7f011aee8f045eda2171ffdbc165cba0583ec8daea27065350d3d8740942c63e40ee8a7de60cf4883f530e880708c7159d0d05e89fe53f80c13ec5fbe50f1b2f1c7ba34a4d2db7a9c2b3d58720aa42053b2c8807467e2cb1bd3b2ed75104ee45e8779555e6463c2850e2993fe5b8898ad631630c27f95f6f4a1e84e33e69f09e6ec403fd1c1775a2e538c6a30cf30ea893956c440de1f86182c4c0b98b99c76e2ce811d1fc9d073c3cb1753b84290b7e12796066b3ed474d40e0f7da3f7606109de04cc52b3a073af9a3d95c291238e4287bd0e4627dcab10ae6b7ae1ff95ce6cb5b83c9e7a7049e5ce89046e0f76de1d8f457aa1b0153d6ae572c951a5e07141428c584c4f50eb355d39c0356fd44283876e050922cb7a2e1a92f59ff4516a44439ba45943f839a90e664828f088a7c0dfbbf4bff50c25b4b923a32e827682ed4bc6b1c60d8a2f6e24ba21b5818c8073c0c4ba19e3938ce38f072afaf92f03b0e243056377b7045961997ffd62bdb9e7e099299924ed5036aa20e38dba3180ca92f5d122aaa0e64e0a41ecfb776edb20f3dc4a08409db99eae8b0807a5183bac7308bb4c5603d19d67198ab8d7aa22bde71b306322de36f1c07b8fe207dde3bdf92f6ce32afccc680688ec3791b8cc1608019a846910de50a1a323cdf1dc9ee504c9d52b3dced0d8c4e9dc7a276c8167f3665e56dfeb6142593c257b9885d12d2150238ff2cda69e0b5dcf4e905a77f1555db92c3d08765f85e100e4f69de5c005e33173c7420e75bb2171ff991c20246f72551ed82ed233453d3134cc2f88fcf61d9b43d3df7c42ab116f1e59ef43e0f8e22bfcfdc886db7d018e9a44565470857fadba6fd14594037cc34147a324879d7ff1a7d3dcec1186e8ea1419c6a1b8c088779a587d61557782b1541a2b8b61aae17fdf8692bd0a3a59f03ded3a5092eb38712cd3bb39e4cc06fd02bbc57bfe75037d133f112fb540449eab07cc08aa373c7994d6f553351b5479db6a907b46d429e1dc8921e16e5054bcd2d6ab9fa85637d36bfbb33f21ed1bd3e2fedc65c84bd91aa33ab3e70d24d0728606ae5f5ff91076183743af2c69bce4781c4076f8b327bb526477a1b49d88f1b6bf0164560611a07cccb0b8109d2bb3a20884e07d8d142969407252bcd126136"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001200)={r2, 0x78, "8e5dc9c00cf8f120490cc499b40bb9a4d183270cf4b69013a61b5746304fecb20867d512e7b5dd90de4154d36ee6e86d9dbee9a88c075e9ff6037090cb7a2b1f7681341d935a01d85fa87df01ea9cc1877174b5486ca67e222a791ab133caad18c7286cb78d59b600e1b45c1f71ca6dae2157955264c050a"}, &(0x7f0000000080)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r3 = pkey_alloc(0x0, 0x2) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x73, @loopback=0x7f000001, 0x4e24, 0x3, 'fo\x00', 0x23, 0x4, 0x39}, 0x2c) pkey_free(r3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r4, r5/1000+30000}, 0x10) 2018/03/31 15:13:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f0000000040)='./file0\x00'}, 0xfffffffffffffe4e) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) sendmsg$nl_generic(r2, &(0x7f0000000480)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x26c, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, {0x19}, [@nested={0x1dc, 0x84, [@generic="702cba901bd52ee8ac0276bf0f8312a1a59b4908ab005a7362cf75a4ea8ae99fa8e14626c06c2edb3345ec66d889f671e67ad70a0cd979af6266270c0c2d18ad4cfafba9238a0f12057df6ae63a3a072ad70d239c0c485135397259cd215573da5c75d886d02317f26478c8e128e817a8be7af26ac45e7f795c47d0597a5f8bb32902f6d8a0d9d4c8223b8893e559b044ac23979d1894a6f111ca44559ef4236fb9231913f25e8bce6a9576e7a363a86ab16e72b707e6a65b9691abed454a95d1b943c06e4b3b939ce696a7cbac0b5", @generic="f06cbf84123c1fbcc0c19d5eb819", @generic="808f1849908a9b8b827a74c96c31041abc7b52024a437491b94a4c7ed3507c5f1fad5e6b3c6b5fdbbe85dd5afe7ea7b717892797a562bf1026e4fe994b40ceaf0d0dbebab262bf696be192a8f2656bf824df1bc0eb88cad4e585a357d87b0bfee506045531ce183f3537d830fad3aaf693201fc1e9474979606b5f2b2c53b92c2a1f98f68c", @generic="19df4849419ed2b72021", @typed={0x4, 0x2c}, @generic="126c604a960040e281945a2c01f85165192517f6c54a8f9fca2c9233a0858bce2f470d67d69b15a86b9d3dcf77453d0471fe9e62d88b35620d31e7de02ce749f282657e57457bdbd2b39077396e6d160c643a857aaad2036299b7fbaa6e77163d33ac03b79a7f41a"]}, @typed={0x8, 0x69, @pid=r6}, @generic="0a5cc0cce5e835bd9b8e3eb7f83bc5442629b91533a598f7e481aebf6ae842498732b0bb7328df4d7886f3c83344", @generic="432b8581e4562c3388b81592e2338461959b1372a02e65db179e2ec6dca0253ffb3fa7a1278e3b12684e076eebbe0988e37d01d1c79cc2d72a790b595b0c2f", @nested={0x4, 0x4a}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/03/31 15:13:08 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x0, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='security.capability\x00') ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) [ 212.578582] FAULT_INJECTION: forcing a failure. [ 212.578582] name failslab, interval 1, probability 0, space 0, times 0 [ 212.589904] CPU: 1 PID: 14829 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 212.597260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.599854] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 212.606619] Call Trace: [ 212.606639] dump_stack+0x194/0x24d [ 212.606654] ? arch_local_irq_restore+0x53/0x53 [ 212.606673] should_fail+0x8c0/0xa40 [ 212.606686] ? kstrdup+0x39/0x70 [ 212.635588] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 212.640668] ? cgroup_apply_control_enable+0x390/0xbc0 [ 212.645932] ? kernfs_iop_mkdir+0x153/0x1e0 [ 212.650228] ? vfs_mkdir+0x390/0x600 [ 212.653916] ? SyS_mkdirat+0x22b/0x2b0 [ 212.657778] ? do_syscall_64+0x281/0x940 [ 212.661813] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 212.667154] ? find_held_lock+0x35/0x1d0 [ 212.671190] ? find_held_lock+0x35/0x1d0 [ 212.675228] ? __lock_is_held+0xb6/0x140 [ 212.679270] ? check_same_owner+0x320/0x320 [ 212.683570] ? rcu_note_context_switch+0x710/0x710 [ 212.688474] ? rcu_read_lock_sched_held+0x108/0x120 [ 212.693467] should_failslab+0xec/0x120 [ 212.697420] kmem_cache_alloc+0x47/0x760 [ 212.701454] ? memcpy+0x45/0x50 [ 212.704708] ? kstrdup+0x59/0x70 [ 212.708048] __kernfs_new_node+0xe2/0x570 [ 212.712257] ? kernfs_dop_revalidate+0x380/0x380 [ 212.716993] ? snprintf+0xc0/0xf0 [ 212.720426] ? vsprintf+0x40/0x40 [ 212.723851] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 212.728759] ? cgroup_file_name+0x1d0/0x1d0 [ 212.733054] kernfs_new_node+0x80/0xe0 [ 212.736917] __kernfs_create_file+0x4b/0x320 [ 212.741303] cgroup_addrm_files+0x3c5/0xa70 [ 212.745602] ? cgroup_file_write+0x710/0x710 [ 212.749986] ? cgroup_idr_replace+0x3f/0x50 [ 212.754288] ? __lock_is_held+0xb6/0x140 [ 212.758326] ? __local_bh_enable_ip+0x121/0x230 [ 212.762970] ? online_css+0x224/0x2e0 [ 212.766746] css_populate_dir+0x198/0x420 [ 212.770884] cgroup_apply_control_enable+0x390/0xbc0 [ 212.775968] ? cgroup_propagate_control+0x570/0x570 [ 212.780960] ? css_populate_dir+0x289/0x420 [ 212.785259] cgroup_mkdir+0x56f/0xfc0 [ 212.789035] ? __lock_is_held+0xb6/0x140 [ 212.793073] ? cgroup_destroy_locked+0x750/0x750 [ 212.797802] ? rcu_read_lock_sched_held+0x108/0x120 [ 212.802792] ? kmem_cache_free+0x258/0x2a0 [ 212.807005] ? set_nlink+0xc1/0x160 [ 212.810612] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 212.815513] ? generic_permission+0x105/0x3c0 [ 212.819985] ? cgroup_destroy_locked+0x750/0x750 [ 212.824715] kernfs_iop_mkdir+0x153/0x1e0 [ 212.828837] vfs_mkdir+0x390/0x600 [ 212.832355] SyS_mkdirat+0x22b/0x2b0 [ 212.836048] ? SyS_mknod+0x480/0x480 [ 212.839735] ? trace_hardirqs_on+0xd/0x10 [ 212.843857] ? do_syscall_64+0xb7/0x940 [ 212.847807] ? SyS_mknod+0x480/0x480 [ 212.851497] do_syscall_64+0x281/0x940 [ 212.855360] ? vmalloc_sync_all+0x30/0x30 [ 212.859484] ? finish_task_switch+0x1c1/0x7e0 [ 212.863955] ? syscall_return_slowpath+0x550/0x550 [ 212.868857] ? syscall_return_slowpath+0x2ac/0x550 [ 212.873762] ? prepare_exit_to_usermode+0x350/0x350 [ 212.878751] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 212.884089] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 212.888908] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 212.894073] RIP: 0033:0x454e79 [ 212.897237] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 212.904919] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 212.912162] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 212.919406] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/03/31 15:13:08 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 212.926650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 212.933893] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000032 [ 212.941444] cgroup: cgroup_addrm_files: failed to add weight, err=-12 2018/03/31 15:13:09 executing program 0 (fault-call:3 fault-nth:51): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:13:09 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x0, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:09 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a", 0x12b, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 213.078341] FAULT_INJECTION: forcing a failure. [ 213.078341] name failslab, interval 1, probability 0, space 0, times 0 [ 213.089699] CPU: 1 PID: 14848 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 213.097072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.106420] Call Trace: [ 213.109009] dump_stack+0x194/0x24d [ 213.112640] ? arch_local_irq_restore+0x53/0x53 [ 213.117320] should_fail+0x8c0/0xa40 [ 213.121032] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 213.126132] ? rb_first_postorder+0xa0/0xa0 [ 213.130449] ? __mutex_lock+0x16f/0x1a80 [ 213.134510] ? trace_event_raw_event_lock+0x340/0x340 [ 213.139693] ? trace_hardirqs_off+0x10/0x10 [ 213.144013] ? find_held_lock+0x35/0x1d0 [ 213.148070] ? __lock_is_held+0xb6/0x140 [ 213.152138] ? check_same_owner+0x320/0x320 [ 213.156459] ? lock_downgrade+0x980/0x980 [ 213.160611] ? rcu_note_context_switch+0x710/0x710 [ 213.163005] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 213.165543] should_failslab+0xec/0x120 [ 213.165556] __kmalloc_track_caller+0x5f/0x760 [ 213.165571] ? string+0x180/0x200 [ 213.165584] ? kstrdup_const+0x39/0x50 [ 213.165596] kstrdup+0x39/0x70 [ 213.195300] kstrdup_const+0x39/0x50 [ 213.198992] __kernfs_new_node+0xa2/0x570 [ 213.203121] ? kernfs_dop_revalidate+0x380/0x380 [ 213.207860] ? snprintf+0xc0/0xf0 [ 213.211290] ? vsprintf+0x40/0x40 [ 213.214719] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 213.219622] ? cgroup_file_name+0x1d0/0x1d0 [ 213.223922] kernfs_new_node+0x80/0xe0 [ 213.227785] __kernfs_create_file+0x4b/0x320 [ 213.232170] cgroup_addrm_files+0x3c5/0xa70 [ 213.236471] ? cgroup_file_write+0x710/0x710 [ 213.240864] ? cgroup_idr_replace+0x3f/0x50 [ 213.245164] ? __lock_is_held+0xb6/0x140 [ 213.249207] ? __local_bh_enable_ip+0x121/0x230 [ 213.253850] ? online_css+0x224/0x2e0 [ 213.257632] css_populate_dir+0x198/0x420 [ 213.261761] cgroup_apply_control_enable+0x390/0xbc0 [ 213.266842] ? cgroup_propagate_control+0x570/0x570 [ 213.271839] ? css_populate_dir+0x289/0x420 [ 213.276143] cgroup_mkdir+0x56f/0xfc0 [ 213.279918] ? __lock_is_held+0xb6/0x140 [ 213.283964] ? cgroup_destroy_locked+0x750/0x750 [ 213.288693] ? rcu_read_lock_sched_held+0x108/0x120 [ 213.293685] ? kmem_cache_free+0x258/0x2a0 [ 213.297898] ? set_nlink+0xc1/0x160 [ 213.301503] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 213.306408] ? generic_permission+0x105/0x3c0 [ 213.310878] ? cgroup_destroy_locked+0x750/0x750 [ 213.315612] kernfs_iop_mkdir+0x153/0x1e0 [ 213.319738] vfs_mkdir+0x390/0x600 [ 213.323257] SyS_mkdirat+0x22b/0x2b0 [ 213.326946] ? SyS_mknod+0x480/0x480 [ 213.330635] ? trace_hardirqs_on+0xd/0x10 [ 213.334762] ? do_syscall_64+0xb7/0x940 [ 213.338713] ? SyS_mknod+0x480/0x480 [ 213.342403] do_syscall_64+0x281/0x940 [ 213.346265] ? vmalloc_sync_all+0x30/0x30 [ 213.350390] ? _raw_spin_unlock_irq+0x27/0x70 [ 213.354867] ? finish_task_switch+0x1c1/0x7e0 [ 213.359336] ? syscall_return_slowpath+0x550/0x550 [ 213.364242] ? syscall_return_slowpath+0x2ac/0x550 [ 213.369145] ? prepare_exit_to_usermode+0x350/0x350 [ 213.374140] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 213.379483] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 213.384303] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 213.389467] RIP: 0033:0x454e79 [ 213.392631] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 213.400316] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 213.407561] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 213.414805] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 213.422052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/03/31 15:13:09 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a00", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x0, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x6ed}, &(0x7f0000000180)=0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000140)={0x2, 0x50c, 0x4b, 0x5d017987}, 0x10) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r2 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioprio_set$pid(0x0, r2, 0x539) r4 = memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x1) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r4, &(0x7f00000002c0)={r4, r0}) dup2(0xffffffffffffffff, r3) 2018/03/31 15:13:09 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000c08de47c70514c95b95e109e96a0b90decf6f2a3299748aeb81e1b00920efd9a", 0x12b, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 213.429299] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000033 [ 213.436891] cgroup: cgroup_addrm_files: failed to add bfq.weight, err=-12 2018/03/31 15:13:09 executing program 0 (fault-call:3 fault-nth:52): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') [ 213.546573] FAULT_INJECTION: forcing a failure. [ 213.546573] name failslab, interval 1, probability 0, space 0, times 0 [ 213.557883] CPU: 0 PID: 14867 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 213.565240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.574588] Call Trace: [ 213.577177] dump_stack+0x194/0x24d [ 213.580810] ? arch_local_irq_restore+0x53/0x53 [ 213.585488] should_fail+0x8c0/0xa40 [ 213.589204] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 213.594299] ? __might_sleep+0x95/0x190 [ 213.598272] ? rb_first_postorder+0xa0/0xa0 [ 213.602593] ? trace_event_raw_event_lock+0x340/0x340 [ 213.607781] ? trace_hardirqs_off+0x10/0x10 [ 213.612099] ? find_held_lock+0x35/0x1d0 [ 213.616159] ? __lock_is_held+0xb6/0x140 [ 213.620232] ? check_same_owner+0x320/0x320 [ 213.624556] ? lock_downgrade+0x980/0x980 [ 213.628704] ? rcu_note_context_switch+0x710/0x710 [ 213.633652] should_failslab+0xec/0x120 [ 213.637631] __kmalloc+0x63/0x760 [ 213.641083] ? idr_alloc_cyclic+0x1d6/0x320 [ 213.645415] ? mem_cgroup_css_alloc+0x177/0x19c0 [ 213.650174] mem_cgroup_css_alloc+0x177/0x19c0 [ 213.654759] ? setup_cpu_cache+0x1c0/0x1c0 [ 213.658993] ? __kernfs_new_node+0x3f5/0x570 [ 213.663401] ? kernfs_dop_revalidate+0x380/0x380 [ 213.668154] ? trace_hardirqs_off+0x10/0x10 [ 213.672462] ? kernfs_link_sibling+0x27d/0x380 [ 213.677031] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 213.681941] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 213.686413] ? cgroup_file_name+0x1d0/0x1d0 [ 213.690711] ? mutex_unlock+0xd/0x10 [ 213.694406] ? __lock_is_held+0xb6/0x140 [ 213.698454] ? cgroup_addrm_files+0x67f/0xa70 [ 213.702937] ? trace_hardirqs_off+0x10/0x10 [ 213.707234] ? cgroup_file_write+0x710/0x710 [ 213.711628] ? cgroup_idr_replace+0x3f/0x50 [ 213.715935] ? trace_hardirqs_off+0x10/0x10 [ 213.720236] ? __lock_is_held+0xb6/0x140 [ 213.724280] ? __local_bh_enable_ip+0x121/0x230 [ 213.728929] ? __lock_is_held+0xb6/0x140 [ 213.732976] cgroup_apply_control_enable+0x44d/0xbc0 [ 213.738067] ? cgroup_propagate_control+0x570/0x570 [ 213.743065] ? css_populate_dir+0x289/0x420 [ 213.747371] cgroup_mkdir+0x56f/0xfc0 [ 213.751147] ? __lock_is_held+0xb6/0x140 [ 213.755190] ? cgroup_destroy_locked+0x750/0x750 [ 213.759924] ? rcu_read_lock_sched_held+0x108/0x120 [ 213.764918] ? kmem_cache_free+0x258/0x2a0 [ 213.769134] ? set_nlink+0xc1/0x160 [ 213.772738] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 213.777642] ? generic_permission+0x105/0x3c0 [ 213.782118] ? cgroup_destroy_locked+0x750/0x750 [ 213.786853] kernfs_iop_mkdir+0x153/0x1e0 [ 213.790982] vfs_mkdir+0x390/0x600 [ 213.794507] SyS_mkdirat+0x22b/0x2b0 [ 213.798202] ? SyS_mknod+0x480/0x480 [ 213.801896] ? trace_hardirqs_on+0xd/0x10 [ 213.806031] ? do_syscall_64+0xb7/0x940 [ 213.809984] ? SyS_mknod+0x480/0x480 [ 213.813675] do_syscall_64+0x281/0x940 [ 213.817539] ? vmalloc_sync_all+0x30/0x30 [ 213.821664] ? _raw_spin_unlock_irq+0x27/0x70 [ 213.826139] ? finish_task_switch+0x1c1/0x7e0 [ 213.830614] ? syscall_return_slowpath+0x550/0x550 [ 213.835523] ? syscall_return_slowpath+0x2ac/0x550 [ 213.840431] ? prepare_exit_to_usermode+0x350/0x350 [ 213.845426] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 213.850770] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 213.855595] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 213.860761] RIP: 0033:0x454e79 [ 213.863928] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 213.871615] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 213.878862] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 213.886109] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 213.893364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 213.900609] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000034 2018/03/31 15:13:10 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40600) unshare(0x4000200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r1, 0x0) accept4(r1, &(0x7f0000001a00)=@un=@abs, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r3, 0x1000000000013) connect$inet(r2, &(0x7f000024dff0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000b01ffc)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x7}) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xd29, 0x101000) getsockname$inet6(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r7 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0x2, 0x101, 0x0, 0x0, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x80000000, 0xb9, 0x3, 0x7c, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r9, 0x100000001}, &(0x7f00000001c0)=0x8) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2018/03/31 15:13:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x0, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r8 = socket(0x1e, 0x80001, 0x0) listen(r8, 0x0) connect$ax25(r8, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/03/31 15:13:10 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:10 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x0, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:10 executing program 0 (fault-call:3 fault-nth:53): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0/file0\x00') renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') symlinkat(&(0x7f0000000400)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/45, 0x2d, 0x206e}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f00000018c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10a00) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)={0x0, 0x100, 0x9, &(0x7f0000001900)}) recvfrom$ipx(r3, &(0x7f00000006c0)=""/52, 0x34, 0x100, &(0x7f0000000700)={0x4, 0x0, 0x4, "dc108d9d4391", 0x5}, 0x10) renameat(r0, &(0x7f0000001980)='./file1\x00', r4, &(0x7f00000019c0)='./file0/file0\x00') 2018/03/31 15:13:10 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7fffffff, 0x200) sendmsg(r0, &(0x7f0000002600)={&(0x7f0000000100)=@in={0x2, 0x4e24}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000240)="5630a78d4d13d1df8d", 0x9}, {&(0x7f0000000280)="2139a70f45bca415f4722a7f88cf60896412ae558a2cb09e4cde2e009952657e2c2b0d2c3da05296859becb54adf2dc9f77df0ab1c8e1f0f18b1ac80bd13ed9aaffc928e79224ee4c37e035e591103b96d4cdb6ab8685485c07a04f7f805227b666c9f324c7252e3ac1c2fcd69069bcde6da1299eaf2cbad236316e9c6345abeb724b880e7b6e43309e5e179cce340bc6c1a977dd7252727ce818dfc67833af372f95e87ee579be3032bb83d6ca6baee3b07a620dd81203a6c0b28d3ac2ec719ff757c5edfcd78125bda", 0xca}, {&(0x7f0000000380)="d83ca56d1ceeeea23c42f8c93d7320a4f8e06c63", 0x14}, {&(0x7f00000003c0)="c30f1216c71b3a177d238816c0ee2e4d9c12804e68c8e67b3062cba35a3b80ad8ce0cec9a2b144da4b9a52d6afa0d4ffc61b565c7592f711ff820b2f244464fa43dfe30aad0f03df738ffcc88937", 0x4e}, {&(0x7f0000000440)="cb91a39abaac9d82161f65b53c9eb84a5c2ea783d6d87d74c1f2b3ab5d4b35820d003513bdc544779a0171fd9930a1719056dffd27c40e67aab6d3c981cd64d0e37565c0e6b7c7f05f9d0751af28010321e7a91323395ffc892187c8e83c9bf4e83642e36d066620a68ff0b4e01600ef744c6050f836b7bae681ab62594c7215cf9a540e93d693e991d7ddda77bbec958e4224860a2de4984d016c72604a1285ac2c12fc2a83b46f9b962a2b2b4a09122e5f4c482c9321195772c5e55c42181837054f2ab7d0bed09d16db059a508d9f24c6b4319ae124ada5c3cf316de1583f84b8d2648047b4d40c4bfdd588ef669317fb2a8aa49bf74922bd22705599364faf15fd995a27eb3528850dead2a81647f131ea23a13f3d6e2bb63724595d642aa16684d82a63259045a07f32757f84dc9152bdd929b1386ef722d1d186fd434fc61b83909b73a33c6844093848aef871fd2116b7566b52b3a5a97d341aa6a6f2ae3d76c9233ceb0b7c4734756297392e83625890c731856a7f00a0f36d4d63dc592cb5b4d6b8b0bbb2df87cddec0b812471c0da6f23ff2c3b7fade79a75e96fe2f7934f0332e91fa811335c631176eca0694e2f630336896e868796be89764a19005847470fa15ae15bff500d8ce3c77a0265dea0ebbfc770e0abd96f3d55734c00248d46b07ed4c8151f1974b6d57d59d63854b76db2156e9e587a242a5dd5536543e2254e20e18ed1a9d8ed45be8f95ec22bc4b4953e6859b09cced901f6b25a718053ec87ba6dd0f75a9260d90af00a6f2f26896f3e702b98772fd34a7e4af8e7af336b20c238f10252f616ebf8862ea926309f9e5216cb650d9370fd4bc303a1bcd063f3ee69d30a5fb9d3d3f1032056c04ca1a0b1acfe2ff392c0971a462eb87515550ca81f6bf0fe39240ebef333382adc79e4205b7285a8089a42919c88addcf35db92f5160be4c8da1a861b7e5d98c582a922a1b1c09dc1e03cc0b560048774ffd97540f25d81c5982e986d9edf1567caa27b5fb30c1214f4c4be30b11f435f0c1a2a58d4febe43552df6ae676e5885302509f3a4eedc452e15df20401af60b0ce2b4abded1411b2ed4cb80bb4829d6ab675fb658ab300fad1ec741fffadede3957366dc7f35b5361e66a11b790ea31a3510355f309f28c874b8188ea8ddd4af6e3d444bbc286d001e39de9546227253ce626ae5f51372a78f4c3aa79c2c4280588ad47b9cd94fe03b86453df5eec55d0fa06119200b2fb91637fd9269a42eebafc631f64d7e6269114474ab98ec919ec78e7a9f423dc28537675e840fb6c8c6501c2089a07cbdf1b793b48ebd9e64325eb06dd5fbdef36734489a10f55ba2b094159ea762517e3eb63cfa8eb858d83f808201d30fc6cc8aa6e5c6e005a2a52c355ae368dbb78e000f055e2b271e9a2730b3655c882d658c93e8dd995fabd5bc81934a204e84b4f5694f28f998e3a590e437c23325677ffa4a51ed491139f70d65cb24112580b3d8c80d6314465c98fb9e91ea74e63ccba90b759b611dc1e30e22225db6b122377435cc8db6f22e284b8b8f942d3143cbb0a6fb8f14ea8444c736dc7a580093a246037745996ac8f0f61597f32e2b38a728e132399faf7541b2e4ca0d32107a9d8f922128080298cbb75aee375d8fc4ad35b38f8e6c93481ffdbf8ac66ba29433d8702fee8d2d35e76865a233eceead0f2eef0357b730796fc7254c1a41e05b97c63b254bba66b6a8435145c29cd756e33ed6d08229472e6e2e4b29a16dc40efff19964d9f919307f1f1055b656ed83c02942a0a1e6d80312f8e05f05c61bd5ba0634f59fc372eb03004facae672a2aa2b8c274a629411033a3273847e70c42c002e3d12adb3a67b5a1351bc754d247cfff24ac1975087b4c5a9d431f3960cb721d89765c1246a614e55ec15daca4757418d228d08f6653def777d54d814142f6b8fd5e07449787effb3c3141050b008d74327797444757ab86697b737364e16ec68f824db3ad529076c21a2a3ed239431247abb0d1e6d64839f59e39f385fdc4cb6f9225d58f069ced602970bb7f143cc225abd78ab96fb540f2391ecfc63e8d4bb534404ca5f6d77f6887663a4c0f14aefe38b8b45f95a1570a823c0f1a39bff5824b7b1b15d9cc36bcc5c9e4aa86933758f8e9e8b0e2f6cf3c31de56d3ab7578bcf62f5f843c3670a94e3501a40e3def4ecf05951f159c9816ed5311b8a86958f4bc035f821a4fb425280c57add8cc67e7aab2307de093eafc1983a20c6047de0582d74193a3a27c0d03a0a866c55805066710bbbd1c639678a9e2ab30596bdd68fa2169730ce3c22f390972e8c13d410aeaa8197d8e9555c760426785bfd95582968cdda0e0534a1754ef5aaf308a7a3c2be46a749060b29820d0db6109ad79ded562a2ff0e21d3c989cb6a3751ad6ac7fea61059d4cdd2c9db81704e225a403a6b444153aa66cbd7e66849086d676f7deed3efc2e7a8bb4976b976b5ea9ea7cf2641ba4d2b4dfb4542e0cbd4c86e738511b70f6435d68cc082316b78dd5f03664685161e974a5b726f1dcc03e2da647b14ae5fd8f3045cbdc38f155d3cd578159a8a6c4bc758edded88a2b679be6402877e54b8df1489adec695d065adc965ccc1a3cb60fdffa440b2707126cd8a897ea668af45a69c83dc13c9bb7d21cc8dfaa62a83a7c11cb24227100cd6d2112d520f236379a7af0bfb762015b5a9c3211234c5e3803230cb708eb515ae54bffd019b0b9559ed3af18e378d5026224e14f1983d2a118976bf74f5cc7551d6227fa1ae65c8f5de0698a9160a0dad2e0aaac9cf423e9748cf09040be08d71db968db7d1af8c99fe31d0464b59cc2b7634f6f2caa18141535d6bd573b48bb0f9fce65380f827909664429a7f3666c89994de05abe74715002236b5303db07fb59f85af3ed13f86d3d83d95903fe30b912e8f98bb605455af726ce324fedc2471ead3b0cd4fea02ec1f63701be7a5642791698ba493fb245a270460a8ab3f57f8e4225db5aa53ad56cc3bd61e08431d9c464780ad05edec7b1645d211156ecaba101b5c003b4a98435a32a09638c8b53f2b05ea566ea67dc95bd43307cdceed8111aacbc46443c4141d2ce4f431c275f532c47fd9dd9f39fc6948f42edff4157e27547b0153fb477420ee6957a1fdcebdb38a7ac318d8d4d9a135d1b288f2ceea6f149572e8bfcd2d9e966a4772654c4a31182344af506ced49492436a609fdb6f17021d6351612a206f68ba64f16945d72dbbcb522f736b26a2dcb65ea6db776035bdcacbb401be2d3ec1136a18cd3daf5d9f0f48024eaec9eaf24fdda47517200ab7d6cab233bfd6bbce39d9bb4c7c319bafaf2889c154fe865a550e7bb6dd39b167b43b3f730fae6e7879213241cb7fc4b69e3ccc8ebf8b23eabf3eb0c25f700c15b2f0ddee0f0d8d409612772aaa03225b5e76d8711f130390a2ac2a0649b7f547dd0a1fb97c5643a9bc9d7327bb7e7dd6c6e90c540c3b95dde55655890007fb16ae7882245d57f465cbdea5c15e10b22faa684fabd63276316796377cfdfeb069a9e26927f83e49cabf2c73d9b910c82485a5569f2fdf80e251f5c20b90b4833b42fd9093ea6ded780b286cc2b4bcae2085f01479f88627aec581ca1ecb6dd1389217d18d63c4b1443d572979cc221cd2a1eea5389eaecd7f8f1c312676967adaba08019231bbde5fb7dca05bd8569f2761feded769968413097284badc4aa6c3bf2191933799182e4dcb6b05401b1a0c1628ac8f853309b17c44293d9bc3cab893a23529bc33647ceead7f69d5486997dbb83638e535dbbf9083e4ce39573e3f304d16f733054a154f2cf26c8f5050bf811ccc656becac4e246092f2a60da449316c23e1c0cff8f7ce79883f5d647ff5f70d4759e5c1b5157712bb41726fc682236f01c3e1796c7fa4e4218b7fbe5d65d0844a35bdb5718a379c0b5bfad3cd746ad9e197d1029dc0257e1d216ecd0c70c91ce1205a7efd2055fa69c4b539f45e35b5a48bcc076cbd18e55ea5ea04158d6a2fa52f177711cc6ccc841820bd6b63f13deb8802781561e6a56105d99818bf15af0ec076d64e11ba187c7bcaff68bc9ac35ff907c90f4e87faebda91f9f66225dea4fcb9da75ce8ce4a6e27585c8e4d7ca3a5abcb3f42d2b951156ecf962c9f0a5f0e3f3a735a45a93129689eff040529debf60fa10405894bc060ffd506ed57ba1e6be5c95faf13bae3cfa630c814eac08fcc03ca65156f66a26e627ab43285fdeae36ce4bab8367f3be7bf598a22e6d4eb566763125b37fe3d6554a4cb24f90bd010e6f51a1f2bcefa6b4374f63a6ff04dc69bf16f2e27bab3b6da68aa845d773dfdd376d073168b072d2959d3baf95b314e885ee4b90f0bcbc7e56759aec685617abe3238c45350525ca4aa6dbf6fd347ad5d6141d0e8e0a64d28e8d1f11957cd1b57836a6757a8b101ca6cc36bbcb632e93e544e593a26db2128691feeacaf3d587f2f77c4d05219a7486332988a076c08b16b1ea325a66e630482687ad38d02d9098a3373496cbb87fd67d41cc1f248329fc1f6ed810aeefafd2917624f2165559c93b40d881df69cab96a8b60ee94d4604fde7ad7a8ec033eac04cde4d874014ff1d8bd16998a43e223d2357e4bb27a726d161a965b5e9112028f165eb2d0dd09c3322a2df2cbc76bc82e3fb721ff31326310a593c1e3b89cba42477472c55a9a3384f838ebabd69c48eb1ebf08158febddc6eaefcaeca5481a95fdab840a527003d746bcbca4d4e27abf98d0dc85942f42ab1ddb874ebd21b02004e43ba08f552defb896cf44c9110f65d4ccb0affae1de5539fe574ca2fcec6dd9c789dd68d682b74a443a3eb805b2cc755a4413af95febec80aa3f07f3ab6df0acb82f26838fd3378b7fb9ce9f106ff669a8bf0505511eec1a28ba6295201626e9bbd0c2bf08ede3b0f5fd76b9ea55d5a2259f2a6d1e9be24c0863e888869208ce94b3e5f7208acc6492116135c9b3a524a887e20cc8f34aa7767aff813784f723fdd5af1b4e5c75bc3c785c62f1207943f3d7231d719048abee9f8dac4bb3703ba5808bd8dc75d01e142fedd1ba83c90f47c6f85974085daefa31291fd478b137e9eb64c5e37894a51e288679be1bcc46afa3a70c8a2288ac59f92f91e2f2d0f288edd930380e39dd9cb2e02f47013c603e817094e6b20d134420ab26f9cb8abab3f8f8c314fe687a1aec91f379a281d6e7b9ec5eec4cd483a01f6bc0f7b4cb8ddb05cbe93b88b03fe10c9bacae192d507fffcc83e4d1a4107c1606e787f2611fc175da5c88bb8643c2e9bc3cf1f371d39ffec9f10347372dd7d12eaf130a44725152f7a99c8660b29e120b30fbc93a92d5f0bc97624f3df21b007465b8223e78a1ab60eb86fc7684142202ece90b91c91636083eed4539f6b72b73498c0882b875692cbfa1359dd0c9d52c2942f4797f24f2d690d6c4235aacd453d8920762069697ebf776ffe9b7479e7f5b4d07d095f301828b974511fa5af739a692af71b763ad74434facc557d9067fec24c6fe43027bf0ff61426775fbc83cbbd37b88739c843b23dd36459bddf19a7fa5bbb77b4c1cf7b6af839d5518d531239cc98d3a278cd0fc8c50a8904dfd5d937ce131d9462458b013ed6678b4cceea6beae57611a88f52f62d05b1104b8b727ddd54f3c1ab113e841ec4b6bb89d098af3df8fea71768c321c87fb8ac1c35189dbea5fe8b38c5c579579170ae1a615b69eec65e2c1fc744c6a99caadabd99f94d5be9be737b6b0b", 0x1000}], 0x5, &(0x7f00000014c0)=[{0x1010, 0x0, 0x100, "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"}, {0xa8, 0xff, 0xe1, "b352e9f74da48ea04f62990bb9cf9005fa605ff2028dd989c9491488d0e72c8a434f6c4bfe0f57dc2dca0f2f7db6c01de4594afab6b188904914e8f54277c9a7bdaf97308ff3ef9b6607ebdc0ba4d2e002603230efe4a46ba5c9fb0d34b11afd01c11cb337b67864138193d6c5b8a9b1e0af6cacc8628fb933b2fc3d606ed68dcee744dec78279dc57a734f5e45f11f31ed320bcbe198c"}, {0x50, 0x13b, 0xff, "1519ebb95e3471ab0bd3811072b862084cf7e11d3e35f13f61f0348510936c44b3d901ef09f66473329892783d2c1da82f2905bb9f7f36d063"}, {0x20, 0x10f, 0x7fff, "95b2877ed23f27eb1299"}], 0x1128, 0x40000}, 0x48000) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="5500000018007fafb72d1cb2a4a280930206002000a843096c26236925000600290002000000ca8a9848a3c728f1c46b7b31afdc1338d54600009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) mq_open(&(0x7f0000002640)='trustedppp0)eth0userwlan0vmnet1!trustedppp1eth0:\x00', 0x840, 0x2, &(0x7f0000002680)={0x3, 0x7fffffff, 0x1000, 0x2, 0x101, 0x9, 0x7fff, 0x3}) 2018/03/31 15:13:10 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380), 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fff) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+30000}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r5}) 2018/03/31 15:13:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f00000000c0)=0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x0, 0x6, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000001240)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01b00000000026f36e0f070f00567ab96d030000b800000000ba000000000f3066b89b008ee80fc7a8000000800f01c90f752b360f10f0", 0x38}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 214.340223] FAULT_INJECTION: forcing a failure. [ 214.340223] name failslab, interval 1, probability 0, space 0, times 0 [ 214.351505] CPU: 1 PID: 14894 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 214.353941] netlink: 'syz-executor3': attribute type 6 has an invalid length. [ 214.358858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.358863] Call Trace: [ 214.358881] dump_stack+0x194/0x24d [ 214.358896] ? arch_local_irq_restore+0x53/0x53 [ 214.358915] should_fail+0x8c0/0xa40 [ 214.358928] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 214.395142] ? rcu_read_lock_sched_held+0x108/0x120 [ 214.400167] ? find_held_lock+0x35/0x1d0 [ 214.404227] ? __lock_is_held+0xb6/0x140 [ 214.406160] netlink: 'syz-executor3': attribute type 6 has an invalid length. [ 214.408294] ? check_same_owner+0x320/0x320 [ 214.408311] ? rcu_note_context_switch+0x710/0x710 [ 214.408328] should_failslab+0xec/0x120 [ 214.408343] kmem_cache_alloc_node_trace+0x5a/0x760 [ 214.433752] ? idr_alloc_u32+0x390/0x390 2018/03/31 15:13:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140)=0x2, 0x4) pipe2(&(0x7f0000000080), 0x7fffe) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="00000300000b7582599937f27d54000000f40c14efd35634ca2bb284a8f12cb9ecb0431d7f7c94e8cd10a507605fda24dfa259b0d471b7bef2436f4a"], 0x20) write$rdma_cm(r0, &(0x7f0000000880)=@migrate_id={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r0}}, 0xa2) [ 214.437813] mem_cgroup_css_alloc+0x3b6/0x19c0 [ 214.442397] ? setup_cpu_cache+0x1c0/0x1c0 [ 214.446628] ? __kernfs_new_node+0x3f5/0x570 [ 214.451036] ? kernfs_dop_revalidate+0x380/0x380 [ 214.455790] ? trace_hardirqs_off+0x10/0x10 [ 214.460112] ? kernfs_link_sibling+0x27d/0x380 [ 214.464692] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 214.469615] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 214.474107] ? cgroup_file_name+0x1d0/0x1d0 [ 214.478915] ? mutex_unlock+0xd/0x10 [ 214.482624] ? __lock_is_held+0xb6/0x140 [ 214.486687] ? cgroup_addrm_files+0x67f/0xa70 [ 214.491182] ? trace_hardirqs_off+0x10/0x10 [ 214.495495] ? cgroup_file_write+0x710/0x710 [ 214.499899] ? cgroup_idr_replace+0x3f/0x50 [ 214.504215] ? trace_hardirqs_off+0x10/0x10 [ 214.508528] ? __lock_is_held+0xb6/0x140 [ 214.512585] ? __local_bh_enable_ip+0x121/0x230 [ 214.517240] ? __lock_is_held+0xb6/0x140 [ 214.521291] cgroup_apply_control_enable+0x44d/0xbc0 [ 214.526377] ? cgroup_propagate_control+0x570/0x570 [ 214.531378] ? css_populate_dir+0x289/0x420 [ 214.535680] cgroup_mkdir+0x56f/0xfc0 [ 214.539456] ? __lock_is_held+0xb6/0x140 [ 214.543495] ? cgroup_destroy_locked+0x750/0x750 [ 214.548226] ? rcu_read_lock_sched_held+0x108/0x120 [ 214.553217] ? kmem_cache_free+0x258/0x2a0 [ 214.557427] ? set_nlink+0xc1/0x160 [ 214.561029] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 214.565931] ? generic_permission+0x105/0x3c0 [ 214.570403] ? cgroup_destroy_locked+0x750/0x750 [ 214.575134] kernfs_iop_mkdir+0x153/0x1e0 [ 214.579259] vfs_mkdir+0x390/0x600 [ 214.582776] SyS_mkdirat+0x22b/0x2b0 [ 214.586465] ? SyS_mknod+0x480/0x480 [ 214.590152] ? trace_hardirqs_on+0xd/0x10 [ 214.594278] ? do_syscall_64+0xb7/0x940 [ 214.598226] ? SyS_mknod+0x480/0x480 [ 214.601914] do_syscall_64+0x281/0x940 [ 214.605775] ? vmalloc_sync_all+0x30/0x30 [ 214.609896] ? _raw_spin_unlock_irq+0x27/0x70 [ 214.614368] ? finish_task_switch+0x1c1/0x7e0 [ 214.618840] ? syscall_return_slowpath+0x550/0x550 [ 214.623745] ? syscall_return_slowpath+0x2ac/0x550 [ 214.628649] ? prepare_exit_to_usermode+0x350/0x350 [ 214.633642] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 214.638983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 214.643802] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 214.648972] RIP: 0033:0x454e79 [ 214.652138] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 214.659820] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 214.667064] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 214.674307] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 214.681549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/03/31 15:13:10 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 214.688792] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000035 [ 214.696306] kasan: CONFIG_KASAN_INLINE enabled [ 214.701282] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 214.708668] general protection fault: 0000 [#1] SMP KASAN [ 214.714190] Dumping ftrace buffer: [ 214.717717] (ftrace buffer empty) [ 214.720525] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 214.721409] Modules linked in: 2018/03/31 15:13:10 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x80, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 214.721421] CPU: 1 PID: 14894 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #373 [ 214.721426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.721441] RIP: 0010:__mem_cgroup_free+0x71/0x110 [ 214.721445] RSP: 0018:ffff88017ac875a8 EFLAGS: 00010206 [ 214.762261] RAX: 0000000000000011 RBX: 0000000000000000 RCX: ffffffff8310cdfd [ 214.769517] RDX: 0000000000040000 RSI: ffffc90001eb0000 RDI: 0000000000000088 [ 214.776775] RBP: ffff88017ac875c8 R08: 0000000000000000 R09: ffff88017ac873a0 [ 214.784030] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 2018/03/31 15:13:10 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x0, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/03/31 15:13:10 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x0, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 214.791287] R13: ffff8801cf46e700 R14: dffffc0000000000 R15: ffff8801cf46e700 [ 214.798547] FS: 00007effc67fa700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 214.806759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.812627] CR2: 00000000004d8884 CR3: 00000001cb895006 CR4: 00000000001626e0 [ 214.819883] DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 [ 214.827140] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 214.834395] Call Trace: [ 214.836976] mem_cgroup_css_alloc+0x403/0x19c0 [ 214.841556] ? setup_cpu_cache+0x1c0/0x1c0 [ 214.845782] ? __kernfs_new_node+0x3f5/0x570 [ 214.850184] ? kernfs_dop_revalidate+0x380/0x380 [ 214.854932] ? trace_hardirqs_off+0x10/0x10 [ 214.859243] ? kernfs_link_sibling+0x27d/0x380 [ 214.863818] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 214.868742] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 214.873229] ? cgroup_file_name+0x1d0/0x1d0 [ 214.877540] ? mutex_unlock+0xd/0x10 [ 214.881243] ? __lock_is_held+0xb6/0x140 [ 214.885294] ? cgroup_addrm_files+0x67f/0xa70 [ 214.889780] ? trace_hardirqs_off+0x10/0x10 [ 214.894090] ? cgroup_file_write+0x710/0x710 [ 214.898491] ? cgroup_idr_replace+0x3f/0x50 [ 214.902800] ? trace_hardirqs_off+0x10/0x10 [ 214.907111] ? __lock_is_held+0xb6/0x140 [ 214.911167] ? __local_bh_enable_ip+0x121/0x230 [ 214.915829] ? __lock_is_held+0xb6/0x140 [ 214.919884] cgroup_apply_control_enable+0x44d/0xbc0 [ 214.924978] ? cgroup_propagate_control+0x570/0x570 [ 214.929988] ? css_populate_dir+0x289/0x420 [ 214.934296] cgroup_mkdir+0x56f/0xfc0 [ 214.938088] ? __lock_is_held+0xb6/0x140 [ 214.942139] ? cgroup_destroy_locked+0x750/0x750 [ 214.946882] ? rcu_read_lock_sched_held+0x108/0x120 [ 214.951884] ? kmem_cache_free+0x258/0x2a0 [ 214.956091] ? set_nlink+0xc1/0x160 [ 214.959692] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 214.964595] ? generic_permission+0x105/0x3c0 [ 214.969065] ? cgroup_destroy_locked+0x750/0x750 [ 214.973795] kernfs_iop_mkdir+0x153/0x1e0 [ 214.977917] vfs_mkdir+0x390/0x600 [ 214.981431] SyS_mkdirat+0x22b/0x2b0 [ 214.985118] ? SyS_mknod+0x480/0x480 [ 214.988804] ? trace_hardirqs_on+0xd/0x10 [ 214.992926] ? do_syscall_64+0xb7/0x940 [ 214.996873] ? SyS_mknod+0x480/0x480 [ 215.000557] do_syscall_64+0x281/0x940 [ 215.004427] ? vmalloc_sync_all+0x30/0x30 [ 215.008549] ? _raw_spin_unlock_irq+0x27/0x70 [ 215.013019] ? finish_task_switch+0x1c1/0x7e0 [ 215.017486] ? syscall_return_slowpath+0x550/0x550 [ 215.022389] ? syscall_return_slowpath+0x2ac/0x550 [ 215.027289] ? prepare_exit_to_usermode+0x350/0x350 [ 215.032278] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 215.037615] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 215.042430] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 215.047591] RIP: 0033:0x454e79 [ 215.050754] RSP: 002b:00007effc67f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 215.058433] RAX: ffffffffffffffda RBX: 00007effc67fa6d4 RCX: 0000000000454e79 [ 215.065674] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000013 [ 215.072914] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 215.080156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/03/31 15:13:10 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12c, 0x10000}], 0x0, &(0x7f0000014300)) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)="2f2f66696c653002", 0x0, 0x1, &(0x7f0000000900)=[{&(0x7f0000000400)="726b0bf4cf9ea0007fa7cf2e5c463c327b275b956e7a407a7776f3f680f45f33407d01287d4ef58cd8d319309c29643917d4bc86f568f8852b2e6c7cee837e0715e7aa7f82e970e6d76f2290b63efeed63f0785b36f4e95bdf2f07271dbd7d278d79d59de5343daa9107af7a21f86008e6f928485979efe96ddf5d8ae27608ab4ce182886717be3e002ba058f81b7fd52c6adf2807bceb4fe97f855e708d59b6fc42fa49dc801f1ee2a10d00509e1fa7a76bffce11b5a2c6b9788cd4e70120da9697", 0xc2, 0x4}], 0x240000, &(0x7f0000000a00)={'nouuid,'}) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') fsync(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f00000007c0)='./file1\x00', 0x7, 0x1, &(0x7f0000002c80)=[{&(0x7f0000001b00)="a3ca5c2924be7af5e6dab3b0816bff898f97086827c35fd3bece80f23b51c6e5a87b0c49fa6fd8ed56f15d63a88b8b7d4e6f89b6fbdc8ad48feabfc25043c67e3be77b16378497283c43874e0ab611657ad87f78751b90893f680fe0d75a9aef315d8a8aadbfbb2df3600eb2d529cc3ea9952de9dae7e0956fbd3ff69a09bdbd0d2719d30c273561616df14fbac4ca6d79f3fe4382794bf4fa7dd5ab9a4491640a8fcabea86942243e86e13fa02cd13c36d5d716bafdb1c9a360ae4aaf22688821f3364c6904825c3ccd6fde92bac9673a294e47797db25586", 0xd9, 0x4}], 0x800000, &(0x7f0000000840)={[{@part={'part', 0x3d, [0x30, 0x7f, 0x39, 0x3f]}, 0x2c}, {@quiet='quiet', 0x2c}, {@codepage={'codepage', 0x3d, 'iso8859-3'}, 0x2c}]}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000500)='./file0/file1\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="f4413aa428701627106f48f57937c9e56d4ff2c236769506ef0973f5f0fd00003722af33119da03aa1b47488096c5bd3928f7e00415258456050938a14d1e657988164b5213fc7461c474a85928899002fa0b24b7fea532752603ad0b15e03479a145aa4bfcd21809592c5cba0f1410d27fa665e0a7eeef617b5cf6cde47cc97", 0x80, 0xfffffffffffff9e2}], 0x40001, &(0x7f0000000980)={[{@creator={'creator', 0x3d, "6189a5e0"}, 0x2c}, {@nls={'nls', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34, 0x7f, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}, {@barrier='barrier', 0x2c}, {@nodecompose='nodecompose', 0x2c}]}) renameat(r0, &(0x7f0000000040)="2f2f66696c653002", 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') fsync(r0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x80180) symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000780)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x45, 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)="968e058428028234781195e9e5c2a286042f49607e6fc8e657fb19fb5aced9104b6d41be2ec183464551d5430ec1bf124beefabeca6ef422ebf6d6b44a0e4b95af34015acce45125ce251a2cd9f92d43a82ad96f9635b298bda6f02287f4f34f3e0c342ad069770c40891af67d7b38d44040fb10dc4b55fc528bdd6bff380d72e5a31d", 0x83}], 0x20, &(0x7f00000000c0)=ANY=[]) renameat(r0, &(0x7f0000000300)="2f2f66696c653002", r0, &(0x7f00000003c0)='./file0/file0/file0\x00') munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 215.087404] R13: 00000000000003eb R14: 00000000006f7ea8 R15: 0000000000000035 [ 215.094647] Code: 00 00 48 89 f8 48 c1 e8 03 42 80 3c 30 00 0f 85 99 00 00 00 4f 8b a4 e5 f0 09 00 00 49 8d bc 24 88 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 88 00 00 00 49 8b bc 24 88 00 00 00 e8 77 [ 215.113750] RIP: __mem_cgroup_free+0x71/0x110 RSP: ffff88017ac875a8 [ 215.120178] ---[ end trace 92438d98f9926ad5 ]--- [ 215.124940] Kernel panic - not syncing: Fatal exception [ 215.130768] Dumping ftrace buffer: [ 215.134283] (ftrace buffer empty) [ 215.137964] Kernel Offset: disabled [ 215.141558] Rebooting in 86400 seconds..