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", 0x1000}, {&(0x7f0000004a00)="1d4ec3567bf07b9d8556dec419bc5ae634873094b0805ea6c95ac6e8f22deb514420c7f790319a0ab5da93aa114a18266703131d8c09079f68ecb842caf2bc83b3d4088d7f519357c4ba09e27968de28a3fdbdf9bb160148ca980352b8afc705e0b70b7cde2fbe4e5d40b34dfbd336d82bd9d0cee6d6d443be72b10841f539d66268db2c79d9ab0f13b1eae598c82c6c56dabb5e1578f06070b0d2d34f4fe4aae76ea60b970a3f5194040b", 0xab}, {&(0x7f0000004ac0)="b7168422e9b06c261f4455b0dcbf451b8d30c8205f4b483609390250759632c4e02ff6a9c8c0f5b29aa0264ee9089c9b9cb2f5fe7641ae08a53166899e0832a86525068de3b1e74c0f446b4c601cc8d13a103584e926bd0fe69075148cbf1c570bf395124caf1db6dc206b190f8a8042af9aa020d22b1f2f1f0eed805e0a93eb418b47309375fa6b7db0a109992e70588e070df154100b524e1683118cc88b5c47562cd127b55c4ca25eed9a09681fd2785c4af4f1b6f23faf", 0xb9}, {&(0x7f0000004b80)="d052a25b2485f514499f2b5d34c825350600ce60976dcdf25a03b01d9e0ce2cb0cedf5c488a05c23f1ca94197ea2fe07f2d936fbde85c0b19a45e2735832d030c1974964fe5fb6a55b34cd1901916c41a4be0b1b8a3721e19995fc80e184f4aea67ddbef51598fccefa94767cbee9fd657f207bd3271f8a2f448dcf4de801057a3fb4d275d0a07027f6b3ee63a9f2c2db18dffb62526554e3aaaa209f67f7bb9907fd0197ac3f58e7ef214c20191f777029f23506fa21f6b72911628a721a0175648102d8b6ae30886234ebab754b8126280e86924", 0xd5}, {&(0x7f0000004c80)="6db3ace5a23de6522f99aba80eb227120a1ba7ddd5b9a1d5360837933d7152f3747b957e304cc83fe34478ce81dc2c5f90d2258666739d55c52f963a94890fd639351097bc8fcfd2db1099abdfaaaf9334f66d203d27a5ac4bb8c52fc0b7452410f8fa58136a12fac3c2fbbcaf63bcae63af583e9e8a5a7b9bc9c4ea0114c664975d66b1ac49bfe0c981570b07efc1104dbb6a63e257b5c7", 0x98}], 0x9, &(0x7f0000004f80)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x58, 0x1}, {&(0x7f0000005000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000006400)=[{&(0x7f0000005080)="4bcb3a9347ec98d1e7309f98c9343386c9c24847ef015fe4acc93e5fe17fc7d1575fe9ba41b16bb291cf491c2651659431b281519f90b6747a48c2", 0x3b}, {&(0x7f00000050c0)="f34265edbc4916eac3c854eb4964e705c02ab2340d6d3459f3cef9113177cd7f62fd44b586818bd5243a2a26d5145607ccaa0a03393f71db743f0a046db2bd85880678738b3d28bdd780508c070d72f637ad57a5b6c9ff94cd2a1b8e27bf06a255664a7e4d862f4bed6b200e8709dbad3689c3e6746ef5e6c950b8a374bcb46b506b8802ef3980d4a0171c0ebd41af21bcc9e454633f7e", 0x97}, {&(0x7f0000005180)="be3db624451078945f2300243dffa21850dacefc2de80f233e3f78665dbb957f3dd860f1901d440c346af84c1ee97ba9713f164635777bc0353106396b11ea3af456045829418c1111276549d29febeb4e8741b6d140df4cbdae0cf78b166ccfb121d8b7249856d0f36e8ab02d3be11e61cfee3d3e51dc8a0704667eb3c11989e618c48d69d05a96d7535a56", 0x8c}, {&(0x7f0000005240)="8aa103fb847b147f53a3b1b7fb0a3e94ee560da34e3c6e820ab3b24c47e98c6f0b871d4dbc2b80bcd82c66dc3115617431f46bbec2defb82ed8bb6dda46ef6ad430d9bacf7ba864fd8c8dbccbd1ca24b5ee22800a91e5e4310becd4552b5474906807530635308f1abd871a9afa89b853899d0d7d354e251a71c14dd4f665e0341eb486da0", 0x85}, {&(0x7f0000005300)="a9bfd0d3fdad5aa0d8c9670252ee9461c44576d5eb883747263ced8a44c72202ddd8ae7017c2ad14d10bd22f8f25a17626ab4696f6727c371e992c1293dc633678bf3cb90394342a53a761baeafe846ac0b105c3929f85e84c4828a56b8f15629cd040e7bc98c58659d131e24d7599c9553ea6c553d0a011fbaeb25bce49632632058d1da115a29e9d86ea85afc5c2dbf6ff1b750917e4c57f4659089e72985895d37047e3fec93b2bffc1fb97967f8917af1a9153997b2c4c37f949560827c60043183deaeb12a24fa01207acdd6e8706b2", 0xd2}, {&(0x7f0000005400)="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", 0x1000}], 0x6, &(0x7f00000065c0)=[@rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r0, r1]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r1, r0, r1, r0, r1, r0, r1, r0, r1]}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0xb8, 0x19dd2df466bd53d8}, {&(0x7f0000006680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000067c0)=[{&(0x7f0000006700)="e33a81cd1aab28c005bd6cf875590709b35eabd68fcd98a2f28dd243870a8b7ce25fe2372abe97cc252dd37a0d9b329a80b0f30d49552b5d377304030d3ae9a19c4c6d18876547935e29acc7cf0f178dfcff24f90f574220c2d3c7bee1ac4692344c7dea015c4a6e5942d72cbde55e6877a0162121731916876a2c3ec3391f7f936b8d6dd7cdee4c5e3b1a6df1741c7baae6e63d7fe582b9", 0x98}], 0x1, &(0x7f0000006c00)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0000000000000100000001000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r18, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0], 0xf8}, {&(0x7f0000006d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007100)=[{&(0x7f0000006d80)="b79c44d00d", 0x5}, {&(0x7f0000006dc0)="01c90a56f214a788cfb902f2970b7f3a3028d8ed3ad9cd0a884b7f33971d63450337de87e25e11f4d4198356d0353e1ac622f85ba16c0ee68dc3aaf2f4d386e035af8568c47bf2270101f8a63c8603b0cd2dae259d0e39753d40d7a2038e7a60c9fe6bafa8829e63d021c31e8f19e86cf0f36af47f8acb929e29fe2cbcd80d064b54e5a5dc071faddc265325cc4ffe414b94244d99a9c548ac2e3db12948ceabebcfe9c9d884b23d950d7eadade684f479ad9021ba55a1fdb5513dfe9dbe9715dbc45dd5bd009084546560c41785c1b2657eab52ade4815fd9ff", 0xda}, {&(0x7f0000006ec0)="86f63de3", 0x4}, {&(0x7f0000006f00)}, {&(0x7f0000006f40)="ea9e512f9bae8af37e9ba98eaa32b4166273909711db63de8b00c31dfc4827469a7671945efc2f6eaac354d00b3552bc3a44b9907267bb23499ca46375b2f5f3", 0x40}, {&(0x7f0000006f80)="9ad2c7f543f58d9f2617a3ae0d6d557b010482a75d0b605cb2207aa85a221939383414603db78e266d069128bdcfbdf0d92a9b060505e025289ffd3b46358ae4a2989ee907a6b21a1c775fedf77a07eba2603697dfa5cbd5ab1cb86ede6b50c9f825d5", 0x63}, {&(0x7f0000007000)="bc111b4085a662750719f61da7180964165eebce92acd901fc1a88f52484c69b2e2646c37891d10c68af5b3dc0d109a9690d8ca4d00874aa2a3f9cb6d92881c55e756936a294f0847d9ead428371701e943fff0c2e", 0x55}, {&(0x7f0000007080)="208c42d6f32720d5cdea75158a44f953236c4bd6df3c0710d19a0022313cfa269c6ecf6696f4ea86e77d6c58f1648bccee1d4cf17ef2eedaaf4b97a73315e8821abbb8", 0x43}], 0x8, &(0x7f00000071c0)=[@rights={0x28, 0x1, 0x1, [r0, r1, r1, r1, r22]}, @rights={0x20, 0x1, 0x1, [r1, r0, r0]}, @rights={0x20, 0x1, 0x1, [r1, r1, r0]}], 0x68, 0x20008000}, {&(0x7f0000007240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007480)=[{&(0x7f00000072c0)="e46478a8e39df89c11606059c7d628800f57ee2ae31e1d9fc3155f1faf3d75dad919e07779baeeb0db09f0723fb1c97fd85eb086e87f69498f97fb75342cca39830b1d1fa811afa19d629c9cc05bfe9e0b53fe33645b689fbda1a68d76fd81b5ea4dbf0de195273882f5f895c372682ab50b2f550227ad8236837082f67a956085be5a1eaac596eae43d4057c26190ba35081f9f555d87f73243c17613e31dfcf1fd14754986be7e808517aae98b47", 0xaf}, {&(0x7f0000007380)="70634b462885853c046ecd28e9a2ac1edd76d2584e9ec6d15859989493d4c8a0391eaf7a90996c6386ba20876ac247cc1df20f0b716ab03d946848b9ea019fe0d518fff3865c5ee0d1fd58693d9479081026693a1b1f50d1193a0ca42357baf49df5ea0f9fc14239b5c3d50bbdc9c1e4aa29b6202613aa3eea2c03cebcaaca55da1d631ed7c54e0c8d2a6a1a99d3e3b81192c5e62536f770fd9e8c9ef1fc87295c36b826ad1690c7c6019ad806918883adeb9c1d6c011bb9d918067a6e7789a08dadf5", 0xc3}], 0x2, &(0x7f00000077c0)=[@cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}], 0x68, 0x24000000}, {&(0x7f0000007840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009bc0)=[{&(0x7f00000078c0)="76e3ddc6dd8796dbb41f169f93603f84477a0e82edcab474abd70d1eac5afa20dc0b6bd36ed1636f5658d10676ca0385da04c8b7d2358925585ae16b87021543ea66b6", 0x43}, {&(0x7f0000007940)="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", 0x1000}, {&(0x7f0000008940)="9e8972748a6271ccfb7ba2e4157d2de5b45bdc6d367f49df8ab1f0c5c9f5b071727430f487f7e173c0f6e93cda9711434348ec8644dec9a177a7b193e85d9fa2a0de76053003641a6cb378cd5c5002b63f44995bb735a5ec91210ba35e9921d113459be3c472b1ca4cafe847f398c88a88bbc58396044dafcc096df3845364936f56f4651d37", 0x86}, {&(0x7f0000008a00)="dbd27b874037417d6b0bd286792526dea565e123269fde2143b522edb83f946c738dd2a9786a541d9ed1c478ef7c5d56785ae2c4c8d18daf310575eb209ccb99c62990ce8953b1f60d8e26d2a354567693f3ab9702788dd1a1f6c0367d9d8ef4d2d421db4f63da17e89c012d55ba3cc0d4165305a3ae88afc3787335e8a8c110a9e16727cca8424fd4bca2f6a1a9d8427e295583cbb7578183d770566169c143f636cc3f03889db12a0946c05d15007078aaeb", 0xb3}, {&(0x7f0000008ac0)="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", 0x1000}, {&(0x7f0000009ac0)="3eee42decbdc2c51d69f18bd64bbc6611dd993c51c4549271de561357af5241858a18148b9b0777e0b5dd135979ee6c5b2eb7a850aeb23bdd5a13de633df4362112d26bf728140f011c3cb585df8a060e8053fb416ec458050ca0a980f181386c83091e68bdd88fdfbf24b363fb3569544856f9679458bb2b900089bc638c30c07cfe435c6c21c0d14942ddd59a042babe1b44d55b845074e74ec0ffd3fbc90549d4966297ce9b17185464d5e96424172e478c24a3f593fdbdbe046d63c5d14508c5765ccc37feaf9cd27c0312d7ee6152d833e25eaf0b71d8bbca", 0xdb}], 0x6, &(0x7f0000009f80)=[@cred={0x20, 0x1, 0x2, r29, r30, r31}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @cred={0x20, 0x1, 0x2, r35, r36, r37}], 0x60, 0x4000}, {&(0x7f000000a000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a080)="3f79153e412a65b20fac099d3d1e37200eb0a1e1f3383363b090be9f5f2bbfe8f8986d9724772f09ed7491638df674e5fb6334442ef0adb485c09003d8b2f45fcc4da6e7f53128a0b96bfe42b7dcf75a1833ae07bb8690ea7de9c2fc949b30e61cabd91edce75d5e941e8186cade70bac469eba29ef6e3074bbc0cd0a3b4ab95cec614feea84f9a22bab4fc0cf2dba48309808978e44", 0x96}, {&(0x7f000000a140)="407a1d371bd3909ea27ff4dda6782d673c7abf424d98f8245fddd6c88a721091f562ffd92c03c598b986c30e616a67035434a40f3671096dd32fe408599f94b9c1b22230b37102286570b030", 0x4c}, {&(0x7f000000a1c0)="eb17c0b2bae025ec32348fe808dcc820ad93aeeb8f4de552a7894bcde709b987994bafa166c4e558680a17e0c0a2ab12613ab3d4405e5e195d2563ed7c7d0e450ed27b6df47966c049987bbdb5b2e14b95156b22ef8688a54e1566431de4bcacfb0a86ba572fea9e64dfd95157920ab206c9dd9f9edd8619ee2580d8a53048ac9854b6d647bb9df4843526d0c1c6635c3827692c2d999950a7a04caaf4c82a9bf1d55381fbc02638f83104653f598a9d3df9aac7718783db34892d655ecbb49b59337a1dd3bd79d591ace378da792e1b5f7b283c4ebb0c52e2cdbbc174a563a18b65f5ca4b63fe43310c24dd2a", 0xed}], 0x3, &(0x7f000000a540)=[@cred={0x20, 0x1, 0x2, r38, r39, r40}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r0, r0, r1, r0, r0]}, @rights={0x38, 0x1, 0x1, [r1, r0, r0, r0, r1, r1, r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r41, r42, r43}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1]}], 0xd0, 0x24000011}, {&(0x7f000000a640)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000bb00)=[{&(0x7f000000a6c0)="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", 0x1000}, {&(0x7f000000b6c0)="d4493b3eb351912d7d6a157896c5bd05df5041cbd5fd94112f3b646e2418ff81b03397cc0ba8b0d3dc65258a92f593a60c14d0a13a59e2c6ecf56336a0c25350f3ba589712c2d0009c830e87bb1b0ac2af7e25d68d2e59506b27e14c0c42574a4c00b281d10d0282b493d4a23ac0777d0459a889", 0x74}, {&(0x7f000000b740)="3c5e0901794a473aa7ba6c8263551815fa7662da11097bf8b008a7d384314410142b51991208cc6107d9682969c18ba2119be10c3f9df5c2dda22ab73e987c042aea2038bbb76d6e1df0c94218cdc1a6a3c5668e3157b619f103b77c622b4c4103f9edc73eb131791eb99cfe49e13e347b9fcea34ddfc0dbc6991a1589c6b02c453986104078ab9612035b5bbd3105422e5015e022d90e178781f9cf47ab490b46365c1182000a2728f2ac4fa9af9f69dada6725aafa41d357b31fbb139705bb79216c", 0xc3}, {&(0x7f000000b840)="78760a700e6201c32ef64a0729cc91a0b5f5cf908b20dcd9708436566a918215885885ef4fc324a0e10273bcff5fc1be28728e1aedbd6e48aed758d935fb3211332f7776b49d6323b95b5f86e7a68e738d3376e50aedc63c1224ad5b463fa83f7a86b7d81bfc2b4b13802bce54352c9e239afdd2b6", 0x75}, {&(0x7f000000b8c0)="ff34a7c6d1fb325429c0ace5f2a7518824e209413f98175cbd", 0x19}, {&(0x7f000000b900)="e966e584", 0x4}, {&(0x7f000000b940)="84e9", 0x2}, {&(0x7f000000b980)="eeab71258477537e63303672243457cc6295da03e887da11cfff77919cc80081fcdcbbee06c4cbd63f7e66a7a623aaa63d3de718232f44210681275b85b61e6b5fac6cf1778dcf5e5592680f9dc159db49e90c4eb52afc9823ddc14fee3003459ebb1b54d2825b454bb1e9795899acc334b98c65cd5bcabec3bfb2204b6710909fae29626f9a794364d55b1a8cc21564d3d5a6fbab4e168bcf9f05ef75df9685eb3ac430e2417110ca20553b5456882cb69b20bda428c21d83c86e045e133d2672dc09c5145086c6d8c5455d4ed4f5aef8ca4e30fa95917a88992101d841da7c397b1679aa65f1481fb6959bd142", 0xee}, {&(0x7f000000ba80)="858e06f763802462f700fa1215a6469f489a90a705bbaba4d367e8a91a9ae42750c9bc7ba17c285b2537b567b63548821efca8e3cf4a8eb47af969381c3eda9c62081c58e4c9a16e01", 0x49}], 0x9, 0x0, 0x0, 0x40}, {&(0x7f000000bbc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f000000bc80)=[{&(0x7f000000bc40)="59e3d1eeddc4a8907fd316d1f4935bdec453c91127bd7f2f49b5342227a28e23aca3144108fa14ae49f45f60", 0x2c}], 0x1, &(0x7f000000bdc0)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r44, r45, r46}], 0x38, 0x4000}], 0x9, 0xc000) 2018/04/02 19:57:58 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000100)={0x6, 0x6, 0x10000, 0x4, 0x3ff}) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000000c0)={0x7, 0x4e, 0xffff, 0x1, 0x6}) 2018/04/02 19:57:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") io_setup(0x5, &(0x7f0000000000)=0x0) socketpair(0x0, 0x5, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r0, r0) r4 = syz_open_dev$adsp(&(0x7f0000001200)='/dev/adsp#\x00', 0x8001, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002280)='/dev/rfkill\x00', 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x406, r0) r7 = syz_open_dev$mice(&(0x7f00000024c0)='/dev/input/mice\x00', 0x0, 0x400) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0xfa0}) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000003600)={0x5ae280000, r8}) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000003640)='/dev/qat_adf_ctl\x00', 0x4, 0x0) io_submit(r1, 0x7, &(0x7f00000035c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000040), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x10000, r0, &(0x7f0000000100)="9ca33c0ec98d3ba9b4c23d7ae0f39727eb0f94455b5abd13ff6cfc41a827745d066c7279838ae025ea232dff3c7f75faad1079538e65c44f0ca4790b3f0738164b54eb139f34c122777e4c5af1a1bd79ac6955ae05e546ef27cbe252fc3fee2ad3fbab8c45b213e10ec69ff2a6a494ac5af8db73f4e1ef58746f46650fef580ce7316c2ee08f42", 0x87, 0x8000, 0x0, 0x1, r3}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000200)="8d409522612d48f0cb82848a5e0b947f872faaa34f515b2bee0c161e27e9b4530bee3c0c113d52add1be2363646d89f2d0f4054083be5ad398dfbbe0b85a68355e440fc086c147d26b34a374fe05e7d3683447c7e3cba42eb0ab26da574906e2f09e9c271d5f81cd3b81c41ab65df13907a50b6242159a0e6ab080783217d0158e3402b9977fc614f1912bbe6ffd126ccd9f2442eaaf51ca855b81fbcf2c9fe114825572ba5962147fe3e132d28a53461fae9c5f315b083726492c43eb5c161b5320b62bf64657643dabac8279a60791ab30f3197316de301514bb1f06876774cbab1989775d4e37c0eb4bf547f59acd331d234ff2deddb3a610a4b36c01ca93b4688574ff7c7f27263da397700d2b74516b7d9e7c29f99c6caffe0c518d0355d9d6e0945f407ae04c56f94966d4e71daeb443abe6d36010b984a807339d414c5b600cd83d175b9a8b90894a22f3cbea779c4ecee373de9ee22ab6e90c1ee9fb02c7b88db62e3e62b09aa5ca4324ddb825c93c2c6294f1ae968678ed7c590aa5593a4ba3f79dbfabae42eadf7abe84a71400ec95c170c5fd3cf440b5a75ae4ff079b628e5285ef34471653875cd7c40efa9b1ef9afc922ef4f2897a4704c6a46de4799acf476b763f4394899402d043d8fb026229d70c9e2446396d0b078e38607a5de0393c6a544f56521609811c76eace1f66d748bfc82f9e263c942a2e73c8aadc98da4a1e4c2fa95377095befd0982df3c80208bc2323a084c693663b4cf08fec67679f01dda8cc5236d53b79df2aee6be11018e200a22c5a1248c54063a32d2c9751a782d728af3e8fb95bf6fff846ec7e183f87db685334d833229a3592b0cbfb0fb2c63a92166b414f5a19d702aad6b08de125a2d6fc6b8ccb4f777e9a761d54e6ab441c36cb9eadc5b064bda9a5f7bce625271588b6922a239e3f4e2ec24c0735708433132df683fbb8f2d4d344f624559f6b39fdf6df1aad162bab4ac97c23c5830965e7113434d01618671ebe9a9dcc28e85211475b17bb110439372926abda26484ba746f2106cdc2e5b1262be8c8b3e4902b9f7660f08c38f3dbf10153b1c7d79f7b65db15355495e907ea270dfae9add80a0c27d923ccabd9512a390a32c677ef00dee78bc5103ef45f00fb18398d582133ee48e429f5bb2b689dc770356e4fc6e1f66ebae91a26213a585622bc54f72cd4832fa654fd5f52246809e2c65e0320a4f328cbbe915d9ef5c5a9aa3bdaf4c8d0581f7306a2f8f777460b41cb4859f2a68468101fa09c14269dea0dbb22cac4fb4715c11d7a9d53a73ba638b8e6bdecfce914b3449504ce6b7f3bf3a3e635a7255ce8c9755da48a3014eddc19739758633a843834cfaf1bdf7de9c325d04adf2de4ea01c0a70b07dfac368da079823a3363fe542c3a35b858935e272c2e6862c0afb525c960b2c2ec4c89b93a4ea218d841f3febdc75146ed770ffa037ae9c6efa4fc7f8582bedcc84e83d40171a010cd4454c01950d1e96802505ba8a3905a336374b83b3df3c5fb05defeabff329c169910a87c3bbd2ad7499335e5c06bd2bfc45938fd8b0263ace821e3c65d38ba2669bb9f3c13fb69d503a48a035221355bad40920221452ca6f38b1f242bf8cf54957c8dc7bd40eaa55e051c43596964156c258d9c73a7d747f9676027344f3d4fee301156dcea9cd7160288bbb1647471303698e56e395ef9783eeceed04adfc88b11fdbe17fb15b4dd80f5bb2bcec5c82af351ed2b4798c24153372dda120d4be7cfc75cc6f2e6a13f2705f0f2ebdbc59d86a18d102e18a47c54d17f35719a94a018f4e0588efff73caece13310142f745339ecf208205f3853a4c533411473802e84a81e60830c7b2f7609690f6c12442f5d0722a94645cfa6c0efe0d274bcea3857a86fe22a5ec27eda7b28f905e3c8df90035b52e991bd99d45fcbc5fe7379ad98f8c9375094dd3f51ccc743543c74e43de6ce7ec4c930e0ed7517a422113423805a34115a52da20bc4ac7c4c2bbe9c79a68382e8a8886dce3a8b93204b5a84260ea8c295e22f9d1b24b41e6023c07f94850eb62f0e05e1f8c9e6bed109689afcf429430c2e23a2227ac6e3991a37e8fe17a0b60e735cc01f4b3e141e7449313a12f289406d36ad4e0e59f89e0d5561a9ed41fa1a9a224877dfecaedfe7c4da51cb3792de9a97df6ff7b8b4dc97f67d698d5285e3be14e419c842ab89657d7c7e676d7e3b6183dc48601c9d133f2c2204a8f18dede8dcfe3f97d919ca2a252396220aa8e2ecf8ba22983d666fe8fa83c84edb38c10ff175e128f554a7699f2f8cb7c886fc1c112bd4a1bfe6834e8c341a5e124b6f3d57d1a7f78e6d8402871b0f5d2f3dd1554ee36ab77ae2d5768588fa7442970711aa0ca1b7c4de1863c5ce45f6e141acc0f21ba3b4faf765df0fb4bc249aaa2541ca5181e281edd9878d7c1fd098091f0512a96cfb1b08f42cb6a82dfe156f6fb321afc146a6beb3edb0b476c6d5e0a1b4d261dc63a5a77834e16ebfd686996087669e0e7543a936eefb8572ffca2b97f2b025d0329050225118fa73373970f0d812d6cb5ec80393a522087a27a44e9a979c94d9d4f41070519070cd6b93b417fea2d614763a2eab5f27fce9606fe4738f270304308ac5f490c8acc4243239c087684c8ca1cdaf0003881278a9a76938b84ba044f459f7979fafd3cd5bd74a8cefa24b7727d5d12ebb51747e9b451a7b37ef4e313e87852fa9457dec8187c3a12d50baf268c4a22da4190a038073653cf33898b35346553d55f1becf7aac10dac7999061a0705ade9d7ae94448b70fb47315c06d4e56b730a0d5d15a8bb88455b2132081bd765e2a086fefadd03f2b149d552d746dc3f2ea718a295afa48be882921a09b68f6c5f3d3b8087d67991b7b8f2582c2c394a4cdf76e8f0a80b6f93a9cd4a9efb7f162598aec14ef9c7a469e147a35509242611dcb8e211f1adeb3c1f657bcdf17e91385b983cb82bff5d4224dacf0e56e6fd93b00c0d0e92a5b8a7e96d79fe3f0df69adb96b1977fbb611d45866d8444556aa46f781f1a0cb2e8a284c9c6468869fe25d141c2d3b3ada12ac10cceaab94c5e8105bdd551d6f29320358352fe60b5851af55cddb9ff7296ab09ae8735330cf338a2828e259deb934752d691ac0a9a7eebedc847d769801a82debf26e312086f3a96bd195485694264c0b44bcb7fcbbdbbab7bce42e8ac88adaa4967dd7fc9f4cd4af906a63f067473cbfa9f6e4394cdc56af3fd0203c3bf47e7b45c55596605ca40387752c1712bf5d46e1a76443b06d2b5b738d60a28ad5fe4c4640a50abfe68e0f321913050beaf9c0c43c7cf650f54fcd7f05e7f5fb7f679457341f84bf6247662842a10859555c89ebba652917a5c7378532d0b356f27c2fbba8d2744101bbc5b4de51b06ba7e9e72f32370c48ea4f69fffb194519c822c4e075395d971034ed84ea99ceeff1114ee7e061e5c370473757c7b68d539cc22b5b3a6071d04de2780192ffd230eaf119e6751420dfd037123aa08b0047f1ecc0cead0e19a03f8d6eb052d94de38e97cf376a9606f2b5affbe050318d71105d3c5a76fb3f81eb84ff34a966b64e6ab72b5e88e69c9ecdf0eeba93ebd656a43a75575c492b8f8931486e0f4bcc4d16bc180ba665c5f13ef91feccbbee426c63272064ff5bbfae10e012ccd181827e087126dc8fe1c68eaeefdfee0ea533120874eee39a93fe93b67daf7daff30b484a88835f39d1549b235006ea6a93b24d5e5810bad7df9cde59c36c690b386ad908e50d9aa60c3d69a8ca7daa37bccf70abc641c80c47a6d66b5dd8a1f16f8f8dbbf7a80c08d23701dcab7b807a98ea2123ebd3ecd4ed0befe70080841f21117d2339aca3f2a3fdb7e064d92788db6e4054357f12abb6aca25c8b804db6cba8b6f3e88253733aefcfd54aa9beb8db3608f9e63bae3fe5bef03108c50fdbf5ac07468936c40815391314052dbd4a09020fe04a09eb1b8b5cf29f518d01371a40acbd1a38f1806f1194e66b6c5e4a74c757a02ae873dc7ebb99aaacbb43422520a73d1762fbe4bb196b598cbe65b58e1a202841d8f45c49e693d997f6762d0519a6ee03144d272f61c40eaa6aa18163b2433ffed4e8a8afd72eeb5bd759bbdbcfa821bc62970f12e67f9400fc327323d5bacdcd5917fb520aa64aabfc0eea986b7f0ca80a09976156fbc3435e2721511775f6f17afa0454c85b783f3f95a1003e3fe9b2a78a4f666758636f63ad8f448049302ef429cb36b419643ba2be329f95dcdec728a293604551a8ec7b41e208582ad341ffe5f94cbbe31ebd99435b97ca571de86441bc9c1cc363b6754078a13f7829fc4cdccb152a073a941e4daa7d17a1217ea16b2d29886073b30b85c14b996f68ca0519e31a630a7bc16089f318adb0c4a39191d43b9a068958a1be5c2936268b02ced2afdcc9c1bb4cd754d11a64c5a2de3a676e1636b592b5413523926f5d5e3388e8efe017f4e8859b6f5e56451e04b0b93b34f7b3c6b0ea189337fe4832cf521151f2cec0f76fb6ddddc3f5a1de3be499d8f9c1e0a9862a99faa41daa73e3eb8b94ad96050d6972c10e2a2c99620e8a40b4cb68ffebbb7f299a39535d8c980a7d7f59dc44b11bcfd86ee5fa2d893e4dc99a3608a06cd3d1e5ea6b02004193209f24ea3a46a0af719e7cb1618614227b5df8b8204e889e9a3e03ec35c8ee32f1d5393eb87c03c3f43a94618a2e62a1c6a03f80b8dd0a7c03bba72918bd6be6a0915d11d9dbd4ec0400b25169f29d47fb2d7854c2ea4855158029652911a7a70041c177832bcb1f4e687db3f8207cafc1c6c6e7e8ffddd6d8fa115dd32a550facb945f2bb18c6171fb6785f743f1c7797350947f1750e6044e3d5d415ade548fd3485a9f0816e636c2d6ab858a5755a324e060d0c2a1a842e1c835bee25ca2014e8e622e055ba418c90b6ffcdc488770838b2c40f5a03b7d4145271dc7fc950e362e954a287eb3782d8d56608fb8f48fa918c82405bd8c218024b92cba4eb568765c4fc30aeeb08cfe0c072d6710ce9ad3a2696313619f40da8cfcdd8e78d159d65525d708bc6c7ce3fef141a75b2a0da7c14afa610ef633791c9d8e1d36e9195f07b7644c231461ec1fe36bee59c231f4334bd572b74c16745e2baa994c5df37d116b500b5f905ee58dbb13f703f800b51fe5d94469f71949ed12ee3604a78ecae81ec01f02a71f516a49e65844bd3b117e67f7b2b8c8912a587c3e8d3a7d67ca12823bb0be0cfd0ded6fe81d67288da8f08b144070ac7052a7993ee8f30781904fde2d6ddd5575b72edadc0a3c8985a7c470c5995e86f82b1c4495f2b12cc0fe11892ec043299433362a8b6fa748a1a1e97e1186948c5502600d3ae3bcad16a5c844b5347bb8f9fe5d63134a9e0dff0606f96ecda351592ba94ee1d5a64f87541d7bcab4e9f8cc50bd2ec673ae607564230bb4d6c4745e158794261a70dcd1e59d5f0e4673cbf3b9687b3f67b01ac5b30267416a1a6032c093cf046f088bcb2443d6f0407dae65fd4075440cdb7413d3089470389449343e235018a2db321553480b6d9981a83bc28f06b4d560211192c2f4ab91c7c3e3d9c3fbd4bc16aec750e29b04b50079089c4f6f1b6761b9303f4f5eb0e0350f64ffa440010397d82caac069bed0f16593f82de71b45b3ef23edffce6d2b4a4be517cc0c0d825b37541a07f02151fad0825fb0138887b92aa0109291a07ea74877d191788569c4361be9fc8886286dcb4e2cade697923860d2f606", 0x1000, 0x2, 0x0, 0x1, r4}, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000001280)="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", 0x1000, 0x1, 0x0, 0x1, r5}, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000002300)="209db8641f1143766a97fb358cec6a5de6f2f9c084f4399801405584c4e3383b2a53e1a2b09d04a5be546421ab48b562389945f1942dc39493e2b6b868831f78503e38ef79603d401c1c42c6706f3fdd45b32d6335902298fb872242b09f7979518f245582fe0054ebd6ae5b915413bc9feb24c90213f8e17a7828220b7b92fcc74bbea7a8f1217a6530deccde710302ea2bdf85d248f53997aab5cdbbd8a75479166aae4db0270879a4dcb9c368efd63226df39d257a23ac11a3c477f3c7bda8a664558cca75a97066343e2d6bce94fd1482406245e7fb2df", 0xd9, 0x0, 0x0, 0x0, r6}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x698a, r0, &(0x7f0000002440)="cbb3e0ccb0f20ad38af4873de0c4309ab1bd0d4b9ccde6ae1a76a018739c7810e14141cf39e32c042f84961398a723fd05970f668eab6389fac3e7a8ca33964ee40a68c9e8224e981830f086ee868a3685902b70ecb67c73f2f6a692029f532a7c793ce615c8c69a65e6", 0x6a, 0x5, 0x0, 0x1, r7}, &(0x7f0000003580)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000002540)="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", 0x1000, 0x27, 0x0, 0x1, r9}]) 2018/04/02 19:57:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000005640)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$sock_bt(r1, 0x8907, &(0x7f0000005680)="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") symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000140)={0xc9, 0x0, {0xffffffffffffffff, 0x3, 0x1, 0x3, 0x7}}) 2018/04/02 19:58:00 executing program 7: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x10000, 0xa00) getpeername$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x14) perf_event_open(&(0x7f000001d000)={0x2, 0xfffffd65, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x242c0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1}, 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4140, 0x0) 2018/04/02 19:58:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000270063810000000000000000040000000c00070008000200e0000002ab64008f28513009d0bb2e38b08ced9d7cd7fc449798abee0cadf89a02338a47b23bc88dce04747709583a9ee27d564fb6a197a740c47e443bafe907d5daf77cb2301973f75edcc2ca8b9f8c238be96561ec3aaa497103282eb39c1e88713d1f3cbf89a335c0bc69609e6d47320d97704a8d52de09887059efacea8d460b4d0245b428c2dc02109497ce1c7ccbe57af46520b920f58efbcfb1b6fe59c20afe96eb87213d0dac778e08b0586d3ae2acb839b07813fb2226e3d18b49be04257fc5"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}}, 0x84) ioctl(r0, 0x8, &(0x7f0000000040)='`') 2018/04/02 19:58:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) socketpair$ax25(0x3, 0x5, 0x8, &(0x7f0000000000)) 2018/04/02 19:58:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000000100)="0800000000000000cf") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1010c0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x9}, 0x8) 2018/04/02 19:58:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80400, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x8) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x4, 0x200000) ioctl$TCXONC(r0, 0x540a, 0x5) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x3, [0xfffffffffffeffff, 0x80, 0x62]}, &(0x7f0000000280)=0xe) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x20, 0x400000) connect$ax25(r1, &(0x7f00000001c0)={0x3, {"0a886cf35072a3"}, 0x2}, 0x10) fcntl$setstatus(r1, 0x4, 0x44000) accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x80000) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000180)=0x4, 0x2) 2018/04/02 19:58:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1000, 0x400040) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x3, 0x12, 0x8}, {{r2, r3/1000+10000}, 0x3ff, 0x66bd, 0x6}, {{0x77359400}, 0x27, 0x80000000000000, 0x100000001}], 0x48) syz_open_pts(r1, 0x2000) 2018/04/02 19:58:00 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x54, 0x105000) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000080)="d280b127add54f13c9", 0x9) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4140, 0x0) 2018/04/02 19:58:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x40a, 0x4) 2018/04/02 19:58:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0xffffff9d}, 0x1}, 0x0) 2018/04/02 19:58:00 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4140, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0xdf, &(0x7f0000000140)=0x1) seccomp(0x0, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x10001, 0xfffffffffffffff7, 0x2, 0xb56}, {0x8, 0x0, 0xa3d, 0x1}, {0x4, 0x2, 0x4, 0xffcf}, {0x80, 0x373b, 0x0, 0x9}]}) 2018/04/02 19:58:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x200, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x37) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="5b0000000c000000000000000000000000000000517aee707b86c23f239dffdabec7e190882e869d1136aa43505ac56fed492c417424419e24b346ddf687c8df9fd93fc524c46d1b1494e8072d3f2b0cbd32663c724221bdab18efa5c4ad90499ef2e6cbcd3e903813ec49649c895f0d13346213bee32385c3561e3a3dcd5481d2749469c77a7cf550b1ccb65f92d731ee28a895196deb0835e15d8a2e6ec180bb15f016ec0719"]) 2018/04/02 19:58:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x8, 0x0) r1 = semget(0x3, 0x4, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000140)=""/84) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x174, r2, 0x802, 0x70bd27, 0x25dfdbfd, {0x9}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xcff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x88, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000360a7951e205a9ff19d4618d7c1042b70c0a4a275af58be0e00b940038d32b194ea77b960cb39ce82bf9569fc7b0083c82ada831032113cf7c4abe57e5dd5ed5219f1c4755bb2767231761bb24e4b7a046ed7611cdb46c16949b7e44448044045a716a9817d2475a9560b8209a5a47f254dec836d32d73b18fd956ec4d267caa7016773ef1fe", @ANYRES16=r3, @ANYBLOB="10042abd7000fcdbdf25020000003c000200080007000000000008000800ff7f000008000800bc060000080009000e04001b0800040007000000080100000008000400040000000000000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000270063810000000000df4e53d863e129ff0300000000000000ffe000000000000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl(r0, 0xc0184900, &(0x7f0000000040)="60858872c608e1d3d52b1c22315d1e345585754f417a029a03cc93d3dedc44f9f50d12714990a4f802f6a543bac8be745236cc330cd1016c9be5f96e37e59224572c0965b841ccfce4d619ff8c87edd308000000def4fe6d5c9033a4d7040b39ba151c67ec5a342745e878f8e8fe35f96a92d66a7be993439cafe19bd2ea139f2c1c805c494a005bc9539afb56d17b64754462e8f97aa16d6083c7ab9b9f094f9c226e6142797bd8f7f2cfc377c25f3d18cfc445316f153cfb2c2fc9e08a2c9564d5ae955c292bb349ba9b31454e0433803ccb39364e14cc9aa2e766b9c3f56b124cbfb5df645734199eb4fa4f1035c9239287e35bd40eba121fe4d001452b07b19b2814d8604f867f30c52c8c2169f2911bd0e3b0818a70bee9998c123e635e8ab23c1ab7a0bd0d9cfd5a9136399935037a668ac15c4411c9291166d31c495e2a194263cc877b0e17ca659a6cde3ae61fd8737b2f647a044a34c48144a9e38c8d7b5e9da64373c8f82b8e9b0cbffbf85e9dd3198179d034490a636ba5ee758cfda9f2fbd379fe2d0a5b2ce2128ea3850f57064f73292e1a8ed9") shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) unshare(0x2000000) 2018/04/02 19:58:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl(r0, 0xc0184900, &(0x7f0000000140)="60bc836ead2c9193cf") r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x400) r3 = shmget(0x2, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x7530}}, 0x0) 2018/04/02 19:58:01 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4140, 0x0) 2018/04/02 19:58:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x6, 0x3f}) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0xd}, 0x1}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in6={0xa, 0x4e20, 0x6, @loopback={0x0, 0x1}, 0xb1}, @in6={0xa, 0x4e22, 0xd2e, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x2}, @in6={0xa, 0x4e22, 0x400, @dev={0xfe, 0x80, [], 0xb}}, @in6={0xa, 0x4e21, 0xfffffffffffffbe4, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}, 0x7fffffff}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}], 0xac) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) 2018/04/02 19:58:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x4) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200040, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0x30ac, 0x4) 2018/04/02 19:58:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x3, [0xfffffffffffeffff, 0x80, 0x62]}, &(0x7f0000000280)=0xe) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={r2, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) r3 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x3001}) timerfd_gettime(r3, &(0x7f0000000100)) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x400f}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x1000337) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:01 executing program 7: r0 = userfaultfd(0x80800) fdatasync(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4140, 0x0) ioctl$sock_ipx_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x4, 0xfff, 0x2, "4ad7c5ceeee2", 0x80000001}}) 2018/04/02 19:58:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) r1 = accept$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x402, 0x115) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340)={0x1, 0x1ff, 0xf5c, 0x401, 0x200}, 0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3, 0x10001}, 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) 2018/04/02 19:58:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) get_thread_area(&(0x7f0000000080)={0x8, 0x1000, 0x2000, 0x80000000, 0x56, 0x4, 0xe850, 0x6, 0x34, 0x1}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {0xa}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffc00}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xde}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfa19}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbd84}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf48}]}, 0x9c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 2018/04/02 19:58:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x288401, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') socketpair(0x0, 0x80000, 0x72ad, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x23) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) prctl$setfpexc(0xc, 0x120003) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0xfc, 0x5, 0x58, &(0x7f0000ffc000/0x3000)=nil, 0x8}) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x80000000, 0x8, 0x7, 0x3, 0x3, 0x39f, 0x7, 0x81, 0x80000000, 0xee6, 0xffffffffffff4811}) 2018/04/02 19:58:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$getown(r0, 0x9) kcmp(r1, r1, 0x5, r0, r0) 2018/04/02 19:58:03 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x262000) setsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f00000002c0)=0x3f, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)='`') r2 = dup2(r1, r1) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) clock_getres(0x2, &(0x7f0000000300)) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)=0x0) ptrace$setregset(0x4205, r5, 0x6, &(0x7f0000000480)={&(0x7f0000000380)="5fbcb1cdba832c34b70af7c77f46d9a891dcd6943de6a10d14f088e4ee3a69b1d9daf4b1469dc5db42af9d530159b048d0d752ada1b8666ae06b5aa7aaf556b38f37043d604f8e5dfaf90eb9c1a25fe49d06752f8fafca69777ccb384c34843e7afd3dd7799ccd1fc925435c9280f37f8ada8887850ffcbc2b1206ec37025158d96e11a5e6d59c449098e8e64c4dc2ddc6159dc5c3906ed7b33383b5ee7bc07b148be5aed78d7de115090a60f5faea1851943148bc4ac85f03221b89aa5230855b93493c1159155c4d", 0xc9}) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=0x116) 2018/04/02 19:58:03 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4140, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0xfffffffffffffffb, 0x80}) getpeername$netrom(r0, &(0x7f0000000080), &(0x7f0000000100)=0x10) 2018/04/02 19:58:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0x7, &(0x7f0000000440)="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") 2018/04/02 19:58:03 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = socket(0x10, 0xa, 0x3) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x758823e2, 0x4) 2018/04/02 19:58:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0xffffffff) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x480400) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e20, @broadcast=0xffffffff}, @in6={0xa, 0x4e24, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x80}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x3c) ioctl$TCXONC(r0, 0x540a, 0x7) 2018/04/02 19:58:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x3f, 0x2, 0x200000000000000}) 2018/04/02 19:58:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x3, [0xfffffffffffeffff, 0x80, 0x62]}, &(0x7f0000000280)=0xe) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:03 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x420000, 0x0) ioctl(r0, 0x7, &(0x7f0000d68f5d)="7c06831f00000000cf") ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x2, 0x7f, 0x1, 0x10001, 0x5, 0xffffffffffffffff, 0x1, 0xffffffffffff2ca6, 0x7, 0x1, 0x496, 0xfffffffffffffff7}) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x4, 0x2}) 2018/04/02 19:58:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x80000) bind$netrom(r1, &(0x7f0000000300)=@full={{0x3, {"0de387385965e4"}, 0x1f}, [{"21d99fb8063228"}, {"46f7312ffbb844"}, {"33ef39b6a94670"}, {"55a236c207f010"}, {"5cb4220e1ba900"}, {"0235f2b2ffb46d"}, {"0e9e2b29b53ad9"}, {"c89b2394ce6f91"}]}, 0xffffffffffffff2e) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @multicast1=0xe0000001}, {0x800000000000007, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x12, {0x2, 0x4e24, @multicast2=0xe0000002}, 'vlan0\x00'}) 2018/04/02 19:58:03 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000100)={0x7, 0x80}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000270063810000000040000000140000000c00070008000200e0000002"], 0x20}, 0x1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000480)='/dev/snd/controlC#\x00', 0x0, 0x105000) accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x14, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in, @in=@multicast2=0xe0000002, 0x4e21, 0x1, 0x4e24, 0x2cb6bf0d, 0xa, 0x20, 0x80, 0x2b, r2, r3}, {0x8000, 0x5, 0x30000000000000, 0x100000001, 0x40, 0xff, 0x3, 0x9}, {0x6, 0x7, 0x5, 0xfffffffffffffeff}, 0x8, 0x6e6bbb, 0x3, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xb}, 0x4d2, 0x3f}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xf}, 0x3505, 0x7, 0x0, 0x8, 0x3, 0xfff, 0x6}}, 0xe8) syz_open_dev$urandom(&(0x7f0000000440)='/dev/urandom\x00', 0x0, 0x80) 2018/04/02 19:58:03 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8100000, 0x800) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x380, 0x5a, 0x0, 0xe, 0xe, 0x8, "1c3a4590fa97663e07ef6c32b1a982c1e87b01fa07aac8acf37b1235a099facd98dbeb9b159a6bb53ec01ef38a7a354d0b9cb3a8fd59a7eee2f3497c4e038b9a", "cb6334a6a763921b17ec246ae640249c493749cbcde39e13e31f76c4d29c3ad784f0a05bfaac79623a300633df126f8bba20fb9675bf1a7ed58c15841f8141c9", "95f9c31a4cbd8aa22bda6d8c3c01fc39ac7d3f3e2cd428820177269b91026ab9", [0x4, 0x1c0a]}) 2018/04/02 19:58:03 executing program 7: open(&(0x7f0000000240)='./file0\x00', 0x800000000000002, 0x10) getpgid(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000280)="6c3ef75d00a893cf0e3c3157de576edd30081a6eead46fc65342a56bb534a210442173d89e8f69d95bdebe4a16a35c14c7f6438cbd552ed491cb33f353f6a42730cd9d07d91d934f0b0adf1aa00e7bbd14e36c4d7fc5ad0ca03dfa91da99f9a0a1abe8be13cb26c15bdd40798dc3268430d014b54c11fa72a8db89262b86f012cdb1dd644e13887ffa5f1a7926ce", 0x8e}, {&(0x7f0000000340)="eb823c555f239697a4b75ae8c5ec16bdfbd3b22fae85d00dee7d15afedcd781045caa19a8792727918ed65044ac9d7c4933d14f948e07ce2c9f192de126d004f4c8fa160d2c042f9c16cdf2ff13d4c420f804d523198580e74204331a16e9c747f4acabd17719f8be8351715bf52f301c5162d9c8943a99bf32e8d8a00b93ea67856cef204e4944d2632", 0x8a}, {&(0x7f0000000400)="3e5b44bb02c0270641d5501a56d7434af75f26e05b1ce642c6803cb7bc553a8f6d6e0c64666d8d4699162990481dbe1aaf5f4931c6f84733d90a955244c6c36b55d740ecc6fe09d42cf0754bbfb380899f137a115dac8f6dc68fbc9298a4b7bf484ed9e8ce57607efc525a76112d6a11a6fd7bc48a8d35bb6a552eb9c756f76302bf71d5044b1148f0b8c2f8c1", 0x8d}, {&(0x7f0000000040)="2bfcd468138c1d43416c020bfa6c48f1b031383806c7a60a0f6d1b35ebd4", 0x1e}, {&(0x7f00000004c0)="788cb2cade994eda4eef9be8a25d8a9057f01ba75bddcc9eb12d30007f560011f41f7142d4f670c836747afb7a06daccbe1361e72af76fcf128b2d71a702263eabfb", 0x42}], 0x5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x1, 0x0) 2018/04/02 19:58:03 executing program 5: r0 = getgid() getgroups(0x1, &(0x7f0000000000)=[r0]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:03 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = memfd_create(&(0x7f0000000000)='/dev/ion\x00', 0x3) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xe8, 0x12, 0x400, 0x70bd29, 0x25dfdbfe, {{'sha512-avx2\x00'}, [], [], 0x0, 0x2000}, [{0x8, 0x1, 0xffffffff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x3eaef983d379892b}, 0x24000800) 2018/04/02 19:58:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="96800000270063810008000200e0000002000000000000000000000000000000"], 0x20}, 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580)='/dev/audio#\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) getpeername$netlink(r0, &(0x7f0000000080), &(0x7f0000000100)=0xc) 2018/04/02 19:58:04 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioprio_get$uid(0x3, r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:04 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40, 0x0) syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f0000000400)='./file0\x00', 0x6, 0x3, &(0x7f0000000600)=[{&(0x7f0000000440)="d916bb2d1444b45094a8b2b1ace38ac9477141b0e9ce5a5e647541fb8d75ad2d", 0x20, 0x6ef3}, {&(0x7f0000000480)="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", 0xff, 0x7}, {&(0x7f0000000580)="8be7f1644df9a0e7aaa760ac13aee3ba2feb0c054104f95b84facc30e27bf2b4d07601ea8d1f15efb1b53253a530fd3c4c5c35ad61ff26f71b693e179158943aee71b233490224c87adbc5301c591c0ce982cfbec91c47b305362fdcfd1c9da0b24f9c88f430c34c52570d6123e475fa50ebf1b177f1f5ffe96038ee05", 0x7d, 0x8}], 0x20, &(0x7f0000000680)={[{@usrquota='usrquota', 0x2c}, {@grpquota='grpquota', 0x2c}, {@usrquota='usrquota', 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@discard='discard', 0x2c}, {@integrity='integrity', 0x2c}]}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r1, 0x100, 0x70bd27, 0x25dfdbfb, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffff000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x12}}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xeb2802832d6662dd}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000080)={0x5, 0x0, [{0x80000007, 0xfffffffffffffffa, 0x6, 0x4}, {0xc000000b, 0x6, 0x10000, 0x7, 0x100000000}, {0x80000001, 0x4, 0x8, 0x9b, 0x9}, {0x8000000d, 0x1ff, 0xa8be, 0x101, 0xee81}, {0x0, 0x7b1, 0xe4, 0x5, 0x4}]}) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x80000000, 0xff, 0x100000000, 0xffffffffffff7fff, 0xffffffff, 0x8000000, 0x7fff, 0x100, 0x100, 0x5}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:04 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x200000, 0x0) 2018/04/02 19:58:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1000005, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x2, [0x80, 0x62]}, &(0x7f0000000280)=0xc) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xd0080, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000f954e4fd79e8773d1b5f000027006300ab140000000c001ff90a2535a1efe0dc89594261be2a8dd37a4d7f90aaeb03f0f290fce13e5a2849a466bbb98db3b0a693124582f6c60921c31d8140e27d40971e12245bfd25ab66c892864dab542a4b87a2705173fdf644f7a19a82ea427ddaa4e6780fc23ef89276b857d250f940fe7d36d79bee7916"], 0x20}, 0x1}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x81, 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000001c0)={0x3, 0x3, 0x4, 0x5f9dc07fa71e043a, 0x8}) setsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000240)="74729e8d2f74886055498f73293424931934e5359b2fbcbbe164eb33a5ce09c1d3a00a6a68a2980e5cb33bdb095121cc28dbcdb0c2ba153d84b5be2f57d3f10b48e6977fb2632c312324cceedc0dc222e14849c5bb30a606d2d06a244ea6d126519a53d1657eb99f7525547c4041288ab2eff4e09767c145e091d728f1dd26b017c9618588f0cedc5ad57481ab5bf9025c54e81449", 0x95) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x4, 0x4) 2018/04/02 19:58:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0xf}, 0x100000000}}, 0x9, 0x5, 0x0, 0xfffffffffffffffe, 0x1e}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2}, &(0x7f0000000140)=0x8) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)=""/255, 0xff) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup3(r0, r0, 0x80000) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x1a, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)={0x9, 0x5, 0x2, 0xc27a}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x5, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8}}, 0x4, 0x6, 0x9, "84e5a9c469d5f46d2db5613157f4bb12f72c97a62dd387bd472db25ce5817f67721f5eb254a6e0ab6d839e176b7905a9605f07a9140f73e2be7ae08a38b13d340b3b91162da63b2e109b5ff82a32f562"}, 0xd8) 2018/04/02 19:58:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) fdatasync(r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:04 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000040)) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x20, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000200)=0x5, 0x4) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="906068d1e9f476f2ad92ba9e3f7d51a70261efad355667ce80c2e63d60b910128ee6322effd1d366835a67e30089bac783bd9de697305a855b91aa39a40705c2c914f1d712479b4e297a27df6480dfe965f81823bbda580854a408f1f08774ab75e248501d268b736fb1801e75831938290ad44a09419c5aa2c20a4050a922d4913f932ee308a1029bfaf02983ac7f6378ddf1a2a7ca5c63f510cb3659700f344f10a53d356c3fe26fad839adea9ea84b1a6bfc0d3") r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40400, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, 0x4) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) fcntl$setown(r1, 0x8, r6) 2018/04/02 19:58:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") sendfile(r0, r0, &(0x7f0000000000), 0x7) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000800)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000900)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000940)={@mcast2={0xff, 0x2, [], 0x1}, 0x72, r2}) 2018/04/02 19:58:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000027006381000000000000000014006723256ddfa6569f0200e0000002d4c47b6fab2bdac8d44aa490fce7e5f0a482fbf411fcc4545e34b53c631a7f76e7"], 0x20}, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x58800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa8, r1, 0x328, 0x70bd2d, 0x25dfdbfb, {0x3}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xc}}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x233dc01e421bc417}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3a0}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f4a}]}]}, 0xa8}, 0x1}, 0x40000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e902ff25", @ANYRES16=r2, @ANYBLOB="080d25bd7000fbdbdf2506000000340003001400060000000000000000000000ffffe000000114000600fe80000000000000000000000000000d080007004e2400000800040006000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000480)=0x6, 0x4) 2018/04/02 19:58:05 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x900000000100, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x7, &(0x7f0000001440)=[{&(0x7f00000000c0)="4c39783bb697273f7364c29f51b2e86d88e4daa9f5bfdc4aeaf5879a8c92c178f0d6344fb3a3f7dd728c8a67cb5bbfa4b72555fce903861a2260bdb4fabad21566dafc1208ec0dbfc79e8f043fa3fd280d444a7320b39cea3ef4572961f1083948fde262ad9b1456de81c9581dc69f1ff0106517c95c41d4e838de51f4c0f35b642731e9e27f1ee32842c654c76ed097d00df3ada2ac", 0x96, 0x1}, {&(0x7f0000000180)="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", 0x1000, 0x20}, {&(0x7f0000001180)="b2b2dd87945474acea715a57c9", 0xd, 0x4}, {&(0x7f00000011c0)="18e9b5b1253b5a25f2f6a307f544368b19d6feab3822990281314ad0b2a5a5fbd7159e60d215493f97aebff0e7ad113e741653e840a91d322e983c11796ea06751e4e899060f7699883dec2289ec436826ddd9d1db1db95b8b083b0b56f4a293f6ef093e9124d36d1a672cc4f428aa69e2fe2120627ce0f9ffb966ff8f77bb24fc7833f3114072b45ba845b088cf3dec66d7e540409d97d6e215aa539d4c7c2fa6cdb0948a00b65a92bc5310e61332e77fada9954bba8a7f7c9b3079a14197", 0xbf, 0x9d}, {&(0x7f0000001280)="75053cde71392c85b61e5cfc894ed5e3879c03c07715145da240cdcc42cc1c35dbf3b2c51104e3d5ee65d5254698de6d942e708b6ac12206dbcfc94593cfa693a7960fe1377e6ef9b4a53ae0fb22af7b3ea7129c3f7643b1c7388d73c531d19c76523b584c323bb360beace13b64594f10b3cde9cf0894a4b6794e4cf2e1678329d150ef807f399dc3db67901aff6a2809f9781b2e58363b24c63fdf0537880dade9ef29b451efeefd6a721bbc941e096197", 0xb2, 0x1ff}, {&(0x7f0000001340)="5131ec9dfa94d3d156f22584cb12f7fb65bb2131e82ec1a0dd7682fc3d4087fd30a049e66ec11e9f44628f6cefc175346bc1715a81fe1d2bd01967974c7ceb13baa44dcd24cee4b851094af3b4e315e804dc241d13", 0x55, 0xfffffffffffffbff}, {&(0x7f00000013c0)="fa02bcd00b9e6385314af6d783c93ba1e8e0fd993de6d19477c90cd9f519a53fd470704f586b2118bb1b82a3c0165fd65d0a45ba12b19f8924919df442cb4c2ecccbb5b873e0b7cda589e93631c82ff09494ad5bd8bcde18127925b59b8836b04432d59448d5de", 0x67, 0x6}], 0x2000000, &(0x7f0000001500)={[{@user_subvol_rm='user_subvol_rm_allowed', 0x2c}, {@compress='compress', 0x2c}]}) [ 687.420824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. [ 687.453536] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/02 19:58:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) flock(r0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:05 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4140, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0xff}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x5}, 0x8) 2018/04/02 19:58:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x8000000000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0584902, &(0x7f0000000080)='`') 2018/04/02 19:58:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) timerfd_gettime(r1, &(0x7f0000000100)) 2018/04/02 19:58:06 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4140, 0x0) 2018/04/02 19:58:06 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20001, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x547e, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x90002, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x10000) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) 2018/04/02 19:58:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x30f) write(r0, &(0x7f0000000080)="5d0da962471feed229eb2f7c96", 0xffffffffffffffce) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) 2018/04/02 19:58:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x2, [0x80, 0x62]}, &(0x7f0000000280)=0xc) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") socket$unix(0x1, 0x5, 0x0) 2018/04/02 19:58:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x200000) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2, 0x7, 0x3, 0x1, r1}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r2, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x2, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:06 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x40000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xef4c, 0x0, 0x0, 0x0, 0x0, 0xff, 0xfffffffffffffffc, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3ac3, 0x0, 0x10, 0x100000000, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x101}, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8000000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4140, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, [0x8001, 0x7, 0x3, 0x7506, 0x8, 0x4, 0x1, 0x4, 0xffffffffffffa5eb, 0x3ff, 0x1, 0x2a, 0x7, 0xfffffffffffffffe, 0x5]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x0, 0x7, 0x7}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x7, 0x5, 0xffffffff, 0x6, 0x8}, 0x14) 2018/04/02 19:58:06 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40000, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") fchdir(r0) 2018/04/02 19:58:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20a00) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r1, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000080)="44d8388598726799b8c6b2014ef9c25792d027406f82a7f4ec1290c72add6c869ea818ecd721992b0c8d0dc3961482beed8f7192a8338498a07dbbfa698590a9bb783fd1b22f46f589263b8d473b0fd471fd5a28b435dc0320d5eb6ce23b452177ccd56f33153c29a205254f73c065955eb7354a3038b8c3e1d9"}, 0x10) 2018/04/02 19:58:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000002d006381040700c381dbdf25140000050000000000000000e000000200"], 0xfffffffffffffea3}, 0x1}, 0x0) 2018/04/02 19:58:06 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x84, 0x80000001, 0x9, 0x5]}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") setsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000000000), 0x4) 2018/04/02 19:58:06 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) prctl$getname(0x10, &(0x7f0000000300)=""/201) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r4 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0xfffffffffffffff8, 0x10000) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f0000000440)=""/27) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0xc000, r1, r3, 0x2, 0x7fff, 0x1040040) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000280)=0x3, 0x4) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000002c0)={0xc31, 0x9, r2, 0x7ad, r1, 0x6, 0x7}) 2018/04/02 19:58:06 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000080)="489bbabeef7d629924ecc853f710c184eb999a6ef8b8913a7c0fa77e54a43a6fa25837b2c9373a9b9dc0beb8e294662ff8a16e7124c67fd32b16622ebc99c2bfe0253d7a5e9010b8f93e966fc692389148ba6a887eb94f1b806d00f20f1b62004d8ea04a7ba76af6d8012adaa78da9a1b830c5fd4a16af001d5ff83bdf1e6012af7ca66eb9fa7b705b18231c0c232575bd1f98fe4a427f2789bd19a1bb27b1cc0b5b39bc29e28cb42149d1f61b0a3d6c4b2c86a4043f27322d8263c8b31e15f1128c613347a4dcd9b02866b9dfee3d70c31f33b08f83b69fea5e35a57cf5c92b53a5cca64299", 0xe6) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x9, 0x3, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000100)={{0xff, @empty, 0x4e20, 0x2, 'ovf\x00', 0x4, 0x1ff, 0x63}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x2000, 0x3, 0x9, 0x8}}, 0x44) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000180)={0x7, 0x0, 0x10001, 0x1000}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000001c0)={0x7, r3}) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:07 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4140, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) r2 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x202b, 0x4e22, 0x8, 0xa, 0x20, 0xa0, 0x3b, r1, r2}, {0x2, 0x2, 0x81, 0xe9, 0x9, 0x1, 0x8, 0x1}, {0xe6, 0x800, 0x0, 0x35d}, 0x9, 0x6e6bb0, 0x2, 0x0, 0x3}, {{@in6, 0x4d4, 0x6f}, 0x2, @in, 0x3501, 0x3, 0x1, 0x81, 0x9, 0x0, 0x7d}}, 0xe8) 2018/04/02 19:58:07 executing program 5: shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x410300, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x7000000000000000, @empty, 0x9}, @in6={0xa, 0x4e20, 0x7, @local={0xfe, 0x80, [], 0xaa}}, @in6={0xa, 0x4e20, 0x10000, @empty, 0xd5e}, @in={0x2, 0x4e22, @rand_addr}], 0x64) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0x2, 0xfffffffffffffffd}, {0x0, 0xeff}, 0x8000, 0x0, 0x4}) 2018/04/02 19:58:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0xfc) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) io_setup(0x80b0, &(0x7f0000000640)=0x0) r4 = dup(r2) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)}]) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') sendmsg$nl_crypto(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e8000000126173652870635b63c54258b72d6165736e692c736861312d67656e65726963290000000000000000000000000000000000000000001b1c0000000000000000000000000000400000720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf0e62d89bb70b3bb046b87bf7ed00000000000000000000000000000000000000000000000000000004000000000000ba87815de2b8ae0000000000000000000000000000000000002000000000000000000000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) accept4$inet(r4, &(0x7f00000002c0)={0x0, 0x0, @local}, &(0x7f0000000300)=0x10, 0x80000) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x1, 0x10800) 2018/04/02 19:58:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:07 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80c00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000004580)=ANY=[@ANYBLOB="3c000000caf33b7807c2d6b4255f73a5fdda27892ea0d50ed69df2692094ec962ad94a1a89d689ab2793bbf43f7fefed0cc3ed2a09bdebe59675495fbb2b8efd6b1df367e138d638f613d06a6448938c1903741e0fbb787d07c02588f689f5f617b11cd7ca97d08684acdbc544e64d0f0b41ad383e6bba988bce25e9e69fa24ba79c68ea1e373c72792d8c1ce457cfe130f646eec06238f537fc5ec4142c0e69d0278d7bffd2335b91cd5c000000000000000000", @ANYRES16=r1, @ANYBLOB="010029bd70000300000002000000080001004e220000080001004e23000008000300ff0000000800030011000000080001004e210000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1}, 0x0) sendmsg$rds(r0, &(0x7f00000044c0)={&(0x7f0000000240)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000380)=""/180, 0xb4}], 0x2, &(0x7f0000004280)=[@cswp={0x58, 0x114, 0x7, {{0x2, 0x3}, &(0x7f0000000480)=0xfffffffeffffffff, &(0x7f00000006c0)=0x7fff, 0x3, 0x9a97, 0x1, 0x4c93a75d, 0x0, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x101}, {&(0x7f0000000700)=""/4096, 0x1000}, &(0x7f0000003940)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/3, 0x3}, {&(0x7f0000002740)=""/126, 0x7e}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/86, 0x56}, {&(0x7f0000003840)=""/200, 0xc8}], 0x6, 0x40, 0x9}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0xad5, 0x3b2}, &(0x7f00000039c0)=0x8001, &(0x7f0000003a00)=0xfff, 0x7fff, 0x7, 0x5, 0x100000000, 0x0, 0x8}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x9}, &(0x7f0000003a40)=0x6, &(0x7f0000003a80)=0x9, 0x6, 0xe6, 0xc00, 0x7, 0x40, 0xd59}}, @cswp={0x58, 0x114, 0x7, {{0x3}, &(0x7f0000003ac0)=0xfffffffffffffffc, &(0x7f0000003b00)=0x6, 0x51, 0x3, 0xffff, 0x40, 0x64, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0x7}, {&(0x7f0000003b40)=""/95, 0x5f}, &(0x7f00000041c0)=[{&(0x7f0000003bc0)=""/101, 0x65}, {&(0x7f0000003c40)=""/69, 0x45}, {&(0x7f0000003cc0)=""/161, 0xa1}, {&(0x7f0000003d80)=""/94, 0x5e}, {&(0x7f0000003e00)=""/26, 0x1a}, {&(0x7f0000003e40)=""/46, 0x2e}, {&(0x7f0000003e80)=""/240, 0xf0}, {&(0x7f0000003f80)=""/158, 0x9e}, {&(0x7f0000004040)=""/111, 0x6f}, {&(0x7f00000040c0)=""/201, 0xc9}], 0xa, 0x1, 0x6}}], 0x208, 0x4}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000004500)={0x40, 0x0, 0x10001, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000004540)={0x7fff, r3}) r4 = gettid() ptrace$getregs(0xc, r4, 0x9, &(0x7f0000004680)=""/133) 2018/04/02 19:58:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x1, [0x62]}, &(0x7f0000000280)=0xa) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x440000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 2018/04/02 19:58:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/142) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0xc01848ff, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x60000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000080)) 2018/04/02 19:58:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x4040) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x101, 0x4, 0x7, 0xd, 0x401}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f00000001c0)='./file0\x00', 0x2, r1, r2, 0x22, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x42, 0x40) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvfrom(r3, &(0x7f0000000400)=""/160, 0xa0, 0x42, &(0x7f0000000200)=@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000100)={{0x3, 0x3}, 'port0\x00', 0x82, 0x110002, 0x2, 0x7, 0x2, 0x0, 0x1, 0x0, 0x4, 0x4}) 2018/04/02 19:58:07 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x20000) write$sndseq(r0, &(0x7f0000000040), 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:07 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x2, [0x80, 0x62]}, &(0x7f0000000280)=0xc) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:07 executing program 4: socketpair(0x1, 0x800, 0x1ff, &(0x7f0000000100)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = creat(&(0x7f0000000200)='./file0\x00', 0x80) write$eventfd(r1, &(0x7f00000000c0)=0x8, 0x8) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x313, 0x400) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700002bf60000005f00002f1140fe20f8bd97000000000005000000000000000800000000000000ff0f00000000000006000000000000008000000000000000de17c06009816753a801a52644baeba73e4746fa01d7c0037fd30928c8518a7f063c1915fb1f5c17a9f1a867b8fcc54f8f2f796e9cf4d8bcaac74ace9fe6949de3235457bc"]) 2018/04/02 19:58:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x8400, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) fcntl$getown(r1, 0x9) 2018/04/02 19:58:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x10000) recvmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/40, 0x28}], 0x2, &(0x7f0000000300)=""/4096, 0x1000, 0x3}, 0x1}, {{&(0x7f0000000240)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000001300)=""/205, 0xcd}, {&(0x7f0000001400)=""/236, 0xec}, {&(0x7f0000001500)=""/138, 0x8a}, {&(0x7f00000015c0)=""/94, 0x5e}, {&(0x7f0000001640)=""/85, 0x55}, {&(0x7f00000016c0)=""/110, 0x6e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/83, 0x53}, {&(0x7f00000027c0)=""/45, 0x2d}], 0x9, 0x0, 0x0, 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000028c0)=""/110, 0x6e}, {&(0x7f0000002940)=""/51, 0x33}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0xfff}, 0x5}, {{&(0x7f00000039c0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003a40)=""/18, 0x12}, {&(0x7f0000003a80)=""/236, 0xec}, {&(0x7f0000003b80)=""/201, 0xc9}, {&(0x7f0000003c80)=""/226, 0xe2}, {&(0x7f0000003d80)=""/231, 0xe7}, {&(0x7f0000003e80)=""/29, 0x1d}, {&(0x7f0000003ec0)=""/205, 0xcd}, {&(0x7f0000003fc0)=""/20, 0x14}, {&(0x7f0000004000)=""/45, 0x2d}], 0x9, &(0x7f0000004100)=""/73, 0x49, 0xffffffff80000001}, 0xfffffffffffffff9}, {{&(0x7f0000004180)=@nfc, 0x80, &(0x7f0000004640)=[{&(0x7f0000004200)=""/248, 0xf8}, {&(0x7f0000004300)=""/59, 0x3b}, {&(0x7f0000004340)=""/210, 0xd2}, {&(0x7f0000004440)=""/102, 0x66}, {&(0x7f00000044c0)=""/163, 0xa3}, {&(0x7f0000004580)=""/157, 0x9d}], 0x6, &(0x7f00000046c0)=""/208, 0xd0, 0x9f33}, 0x1}, {{&(0x7f00000047c0)=@ax25, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/107, 0x6b}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/80, 0x50}], 0x3, 0x0, 0x0, 0x5}, 0x8000}, {{&(0x7f0000004a40), 0x80, &(0x7f0000005d00)=[{&(0x7f0000004ac0)=""/208, 0xd0}, {&(0x7f0000004bc0)=""/177, 0xb1}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/82, 0x52}], 0x4, 0x0, 0x0, 0xb23}, 0xfffffffffffffffc}], 0x7, 0x10000, 0x0) r3 = semget$private(0x0, 0x6, 0x98) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000005f00)={@dev={0xfe, 0x80, [], 0x16}, @empty, @remote={0xfe, 0x80, [], 0xbb}, 0x7fffffff, 0x8, 0x1, 0x400, 0x7, 0x0, r2}) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x420000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6a8, 0x220, 0x380, 0xf0, 0x220, 0xf0, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, &(0x7f0000000080), {[{{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, [0xff0000ff, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffffff], 'syz_tun\x00', 'gre0\x00', {0xff}, {0xff}, 0x2b, 0x4, 0x6, 0x42}, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x656760ca, 0x20}, {0xfffffffffffffffe, 0x81, 0x4}}}}, {{@ipv6={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff], 'bridge0\x00', 'eql\x00', {0xff}, {}, 0x2c, 0x6, 0x4, 0x28}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x7, @ipv6=@ipv4={[], [0xff, 0xff]}, 0x4e21}}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'dummy0\x00', 'eql\x00', {0xff}, {0xff}, 0x89, 0x0, 0x1, 0x20}, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback={0x0, 0x1}, @ipv4, 0x20, 0x9, 0x5}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x48b2}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d3, 0x6, 0x3, 0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv4=@multicast2=0xe0000002, 0x22, 0x5, 0xfa4}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x708) 2018/04/02 19:58:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f00000000c0)="60bc836ead2c9193cf") bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)='cmdline\x00') sched_rr_get_interval(r1, &(0x7f0000000180)) exit(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x4, 0x82c00) 2018/04/02 19:58:07 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) connect(r0, &(0x7f0000000080)=@ipx={0x4, 0x6, 0x101, "00ee9a8349b8", 0x401}, 0x80) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x9) ioctl(r1, 0x4, &(0x7f0000000100)="64bc836ead2c9193cf") 2018/04/02 19:58:07 executing program 4: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl(r0, 0xc0184900, &(0x7f0000000040)="60bc836ead2c9193cf") fsync(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) lseek(r1, 0x0, 0x0) 2018/04/02 19:58:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x1, [0x62]}, &(0x7f0000000280)=0xa) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:09 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/mixer\x00', 0x42, 0x150, &(0x7f00000000c0)={0x5, 0x7fffffff, 0x3174, 0x9, 0x1, 0x8, 0x0, 0x6}) fremovexattr(r0, &(0x7f0000000100)=@known='com.apple.system.Security\x00') sysfs$2(0x2, 0xfffffffffffffff5, &(0x7f0000000000)=""/13) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x100, 0x0) ioctl(r2, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0xa0028001) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 2018/04/02 19:58:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_out(r0, 0x0, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:10 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl(r0, 0xc0184900, &(0x7f0000000040)="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") shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) unshare(0x2000000) 2018/04/02 19:58:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:10 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000340)={0x7, r1, 0x1}) accept$alg(r2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x167d, 0x202000) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) 2018/04/02 19:58:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0x2080) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000040)={{0x78c5, 0x6, 0x4, 0x20, "6b0d371e91566c25a49020e98ae8667ce1e304615a2e2c93e33c47aac5192d7ea9e924e969c3d48df8da1561", 0x8}, 0x1, [0x4, 0x9, 0x0, 0x10001, 0x5, 0x8, 0xfffffffffffffffe, 0x3, 0x2, 0xff, 0x8000, 0x3, 0x8, 0x200, 0x1, 0xfffffffffffffff8, 0x0, 0x221, 0x1, 0x5, 0x9, 0xffffffffffffffc1, 0xb7a, 0x0, 0x1, 0x620, 0x8, 0x10000, 0x2, 0x10001, 0x100000001, 0x3298, 0x1, 0x401, 0x8, 0x0, 0x7, 0x2, 0x9, 0x1000, 0x101, 0x7, 0x7, 0x8, 0x0, 0xfffffffffffffffb, 0x4, 0x0, 0x140000000000000, 0xa, 0x100000000, 0x2, 0x4, 0x9, 0x3, 0x2, 0x80, 0x9, 0x1, 0x3, 0xfffffffffffffff8, 0x0, 0x9, 0x4, 0x6, 0x80000001, 0x0, 0x9, 0xfffffffffffffff9, 0x7, 0x2, 0x6, 0x4, 0x1, 0x2, 0xab, 0x5, 0x8001, 0x9, 0x1, 0x7fffffff, 0x6, 0x9, 0x39b1, 0x6a91, 0x80000000, 0x1, 0xf51, 0x4, 0x2400000000000000, 0xffffffff, 0x2a, 0x0, 0x7, 0x9, 0x81, 0x1, 0x602, 0x7, 0x7, 0x0, 0x5, 0x7fff, 0xd0c, 0x40b1, 0x4, 0x3, 0x3ff, 0x5, 0x2, 0x23, 0x400, 0x7c7c, 0xabad, 0x2, 0x0, 0x100000000, 0x3, 0xe11a, 0xfffffffffffffffc, 0x100000001, 0x80000000, 0x3, 0x3f8000000, 0x1, 0x3, 0x3, 0x3], {0x77359400}}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 2018/04/02 19:58:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x440203, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0x652b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10003, 0x3, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 2018/04/02 19:58:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x440500, 0x0) 2018/04/02 19:58:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'vlan0\x00', 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r1 = memfd_create(&(0x7f00000000c0)='/dev/ion\x00', 0x2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000100)={0x80, 0x107000}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) 2018/04/02 19:58:10 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x1ff}}, 0x6, 0x3000000000}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e20, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x1}}, [0x5, 0x401, 0x0, 0x2, 0x8, 0x1a2, 0x2, 0x1f, 0x8, 0x2de3, 0x6e7a, 0x1, 0x20, 0x7, 0x6]}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r3, 0x200000000000000}, &(0x7f0000000400)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000027006381000000eeffffffff130000000c00070008000200e0000002af3eeefcdd48a2dccbc71d77606f4d99c4dd5f794ee8f0f9352804e2f4adbc83d2a36f1c5ec98ff7aebaa7ee7a00a197d44a63d7a1980fa96f0602ca971f378373ff37351b8ddc"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xffffffff}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000080)={0x1a3f2d02, 0x9}) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)={0x3, 0x0, [{0x80000000, 0x3c00000000000000, 0x0, 0x7f, 0x80000000}, {0x7, 0x10000, 0x9, 0x93d, 0x4}, {0x8000000f, 0x3ff, 0x2, 0x5, 0x3}]}) 2018/04/02 19:58:11 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/61, 0x3d, 0x0) write(0xffffffffffffffff, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0xfffffffffffffffd, 0x2) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000080)={0x1, 0x8, 0x9, 0x1}) 2018/04/02 19:58:11 executing program 6: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x100, 0x480) openat(r0, &(0x7f0000000140)='./file0\x00', 0x80001, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0xffffff63, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2018/04/02 19:58:11 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl(r0, 0xc0184900, &(0x7f0000000040)="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") shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) unshare(0x2000000) 2018/04/02 19:58:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") socket$inet(0x2, 0x5, 0x3fe000000) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000080)={0x0, 0x81, 0x9, &(0x7f0000000040)}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 2018/04/02 19:58:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000001c0)={r2, 0x2, &(0x7f00000000c0)=[0xfffffffffffffc00, 0x9], &(0x7f0000000100)=[0x8000, 0x2], 0x40, 0x1, 0x100000001, &(0x7f0000000140)=[0x7], &(0x7f0000000180)=[0x2, 0x101, 0x3]}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x95ad}, 0x4) 2018/04/02 19:58:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) pipe2(&(0x7f0000000000), 0x4000) ioctl$TCXONC(r0, 0x540a, 0x4) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:11 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3f, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x1}, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r1, 0x540a, 0x1) 2018/04/02 19:58:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000000140)="d9f38703d3aee80ed902acaeb2ec6a9370f107d99fd008e4a442dc8a435d1f227da1916f219c6c0b73c4bcc249a318fe831aae183a87fc1379cb21f44523e6c0b6307bc1672090e0695e643313178855aba0acdfa760fc885b15e1d0d7def9109ceac95766435828f836e72ccae7e2135efd0f68cccc54d3a5d41b737b1dbd11af488327f39eda8a238d39c1c6807727792c20e8243e7de68423bbe9bb66e9c3ad4dad1891966fac6b36965da18e68175a4d5a5fe52cfe8ac23bfd", 0xbb) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002700638100080be586922b779867de985e84b69450ab7536c6d5e506986abb65e94aa909675d54da4db8faf42f3467492b3cee4b3af14d7320f9706423c1df6570c8641523e63f11729b448d3a66260204c62e25b8a5bd3d20b7c55e842bdb6e6575f8c34a19cd08bd56683c2412d82ddc3ba4237651ff1c4f6429711ace31b40f0a43a99aa7a5a1c7c1239d5b3913ce28c233188971ce930a42000000000000000000"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x145200, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)=""/241) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000180)=""/4096) 2018/04/02 19:58:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x8) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000001c0)={r2, &(0x7f0000000100)=""/150}) 2018/04/02 19:58:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") dup2(r0, r0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x129200, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4, r0, 0x1}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x0, 0x3}) 2018/04/02 19:58:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, &(0x7f0000000080)=0xfffffffffffffffe, 0x2d) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[]}, 0x1}, 0x0) 2018/04/02 19:58:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0x0, 0x0, 0xfffffffffffefffc}, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) 2018/04/02 19:58:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="c311152bcc856ac17bbb4ef2df0984072e2a6b115afdea3b105242342eee4fe999000000000000210000000000000000", @ANYRES16=r1, @ANYBLOB="0c0327bd7000fedbdf2508000000080006000900000020000200080006000800000014000100000000000000000000000000000000010800040008000000080004000100000008000500000200000800040009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x8000) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x4e20}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0xc000) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @remote}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={r6, 0x6, 0x1}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000180)={@empty, 0x63, r5}) 2018/04/02 19:58:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000000)=""/4096) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r2) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:12 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl(r0, 0xc0184900, &(0x7f0000000040)="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") shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) unshare(0x2000000) 2018/04/02 19:58:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) unlink(&(0x7f0000000240)='./file0\x00') r1 = accept(r0, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @loopback}, &(0x7f0000000140)=0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'tunl0\x00', r2}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x1, 0xa80) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000200)=0x1) 2018/04/02 19:58:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) write(r0, &(0x7f0000caf000)="9c", 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000080)={r2}) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r3) 2018/04/02 19:58:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 694.928380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/02 19:58:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000002700638100e81b265752064c0000000000140000000c00070062acea7c10bda8c3cfab2ea90e10ed0a98d6b50db88321e10a1dd4765e1dd728f32a55a70d71ee872fd3885bc968d727cee57c09f5669e86440a3ed85fb5131b34e5b6fa142699a0c90b3f6af898ec018c8b709a5ec3ef69e2442a942f00087270bc70a5f074dabbdb201cd421e0f1e6fde0bbf1b5d8b302225490e6996130908464ccc394700f1e17f41d23a282aaab2d5713ae1c01da"], 0x20}, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf2503000000080002000a000000b9f11af18bfc6fd7d2db4947e5b3676346ecdba43dc7d52883ad807402604852bb6c7f7526d6fd369352a54160e1d184dc1a40b4098d239c6796e188bd3a01d4060cc62dcddd4f97a112d4fbff4071a268d26a22856c4264ea0b8de70994946a82f2d434fa3f66b8ae55d480ce42b620b4ccbc80d5da680e759aa24663aa45ab586049ac97ee92e719c7fd9139"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) 2018/04/02 19:58:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x200, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:12 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl(r0, 0xc0184900, &(0x7f0000000040)="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") shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) [ 695.041511] netlink: 'syz-executor6': attribute type 2 has an invalid length. [ 695.057979] QAT: Invalid ioctl 2018/04/02 19:58:12 executing program 5: getgid() r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0x4, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x800, 0x0) accept4$nfc_llcp(r1, &(0x7f0000000340), &(0x7f00000003c0)=0x60, 0x80000) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') creat(&(0x7f0000000040)='./file0\x00', 0x142) [ 695.088795] QAT: Invalid ioctl 2018/04/02 19:58:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x1, 0x0, 0x1, 0x65, 0x9, 0x3f0, 0x8, 0x10001, r2}, &(0x7f0000000300)=0x20) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000270063fba8e9da1224f3ff700c887c5726810000000000010000140000000c00070008000200e000000257c8d34c6f7a7547d892d22fe424e99143806b0b96743cc1c28228facc0b59937f0000001aaa19946afc4a6308b12bb70376b9ac29c4c0ff1a5230d110935f37df22862499f7ebae176d381ede851cef10dbba01eb006fb8f2c8594f70f1936716ed33c93dd8d9f28dfba6dfe81227"], 0x20}, 0x1}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername$inet(r3, &(0x7f0000000080)={0x0, 0x0, @rand_addr}, &(0x7f0000000100)=0x10) 2018/04/02 19:58:12 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl(r0, 0xc0184900, &(0x7f0000000040)="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") shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) 2018/04/02 19:58:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x2003) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KIOCSOUND(r0, 0x4b2f, 0x4f8) ioctl$TCXONC(r0, 0x540a, 0x1) socket$alg(0x26, 0x5, 0x0) 2018/04/02 19:58:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184980, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x1030000000000000, {{0xa, 0x4e22, 0x40, @remote={0xfe, 0x80, [], 0xbb}, 0x55}}}, 0x88) recvfrom$unix(r1, &(0x7f0000000240)=""/163, 0xa3, 0x2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 2018/04/02 19:58:14 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x9573d9cd9c2d10c0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xbb}, 0x5, 0x1, 0x3, 0x4, 0x2, 0x8, 0x5}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184904, &(0x7f0000000040)='T') 2018/04/02 19:58:14 executing program 6: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x402, 0x70bd26, 0x25dfdbfb, {0x3}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0xef}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'nr0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r3}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x3, 0x10, 0x4, {}, {0x77359400}, {0x2, 0x81, 0x10f, 0x5}, 0x1, @canfd={{0x1, 0x8000, 0xfff, 0x400}, 0x3f, 0x2, 0x0, 0x0, "f44fdd06df2b7a0a5f136142cfae43b2a49caf008542f2a0dfd03115c6405d4075f4e49261bd31df24d097e76cd4bc8357d0c3963268bbbb9689611132dcafe0"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x10) 2018/04/02 19:58:14 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl(r0, 0xc0184900, &(0x7f0000000040)="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") 2018/04/02 19:58:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000080)={0x5, 0x8000, 0x4, 0x3, 0xfffffffffffff823}) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000000c0)="6dd0d51855ff500f91df1930e826e8ee779ad343e8c26bd6eed58ef699c3405c122894a1af51ebbecaa9f3f9f067a3b9cc12fe8e7a300a40c803988f848b867598bd38d14cc5682158df524c6d2fcb96be9e59ae5556b0d3f6311619991106922a01531ace7f5bbb454f78008b6379eb5929cc0206d3fb98dba1333c2167f600f2aa937f12157ff4a8") ioctl$TCXONC(r0, 0x540a, 0x1) setitimer(0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 2018/04/02 19:58:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000de51348f70bbfb51704bb2270063810000000000cbd89a6c0261ca000000140000000c00070008000200"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:14 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x10000000000110) connect$ax25(r1, &(0x7f0000000040)={0x3, {"be739d5a4346d8"}, 0xfffffffffffffffa}, 0x10) 2018/04/02 19:58:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2, 0x810) r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x2, 0x101080) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000340)={r0}) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000100)=0xffffffffffffffee) getpeername$ax25(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) 2018/04/02 19:58:14 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)="fc6e6c09b81fc927c7954946bbd08f6cdc965bb4c00cae6fa6cec6f1eacfab993b8696f08a636270c985eec6e35ea8397795728ebf4a62e16e03768936f2e00f90fb535e73552112fe7d420e6d8a6931ec0664ef5dd5d64d372ba58cfad005868bed10b5d3e76fd3c4d184ac0dfda85e292685e7a3f9369cbb046ffb7ca0b637efc7ad314fde667208d7ca953bd2e5dda0ea2cad131a93772e446acd93bf0e7c7d1e1cc4dd9ae6dcf01eaa367e04be2af721986b1b6a69fed978a4f1af547d", 0xbf, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x4, 0x1f, 0x0, 0x3, 0x2}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0xa4, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x7ff, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, @in6={0xa, 0x4e24, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffff7}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @rand_addr=0x5}, @in6={0xa, 0x4e20, 0x7fffffff, @loopback={0x0, 0x1}, 0x8}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in={0x2, 0x4e23}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000003c0)={r3, 0x4, 0x0, 0xfffffffffffffff7, 0xded, 0xffffffff, 0x80, 0x4, {r4, @in6={{0xa, 0x4e21, 0xfffffffffffffb6a, @remote={0xfe, 0x80, [], 0xbb}, 0x100000000}}, 0x1000, 0x1, 0x9, 0xffff, 0x97}}, &(0x7f0000000480)=0xb0) syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x1ff, 0x8, &(0x7f0000001800)=[{&(0x7f00000004c0)="5ec7cb4ddd5a4b2f5b5f62b55c1be6f7338c7a1264bfb3ad8c1e1af4968d", 0x1e, 0x1}, {&(0x7f0000000500)="75706a96d8e747b397177330ea7f5b9b8ff3234d8fbc068d3497e3478a715063d8a60f176a3c8a9eda6c1dc155d5", 0x2e}, {&(0x7f0000000540)="497c9d159adccbff0ad49d00d058566dac76f5d5d539c9ae45e12f861fbba252062e10592f7424f01c9a2f7af1b10ae073064daf1d0449028ed1", 0x3a, 0x8001}, {&(0x7f0000000580)="fd822869022ba178eee063880b864db36e9963ac37141f1bb7b88698453e3374e1fbe07b0a28afaad501e42f7e3d5f2030a88d4911989d477c95043c3fcb1568ed96cc2c1a0c8418a11cb77d321ca2f4f042d42fc9d11911d318baca2da333fcc17fe32243b166931da72ed47ec1c22e825e1178d7919bdce6e812bbf5310b4b7d0debda20a4212bad137d7f291cac6696bfe645e121f24343f143f893e2eaa028a76938d936c8f38316612615a19ac2bf0f52df5850d091763b9b21c527c4a32d73153f748ae5cfde42439f808215a2c5e8ee25e96ee29b526ac261a8ec043e6fd1317c6755673f2c5d6b97b313973778ff18", 0xf3, 0x8}, {&(0x7f0000000680)="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", 0xfb, 0x8}, {&(0x7f0000000780)="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", 0x1000, 0xfffffffffffffff9}, {&(0x7f0000001780)="55ba94f4247c8a8372708edb1549", 0xe, 0x9}, {&(0x7f00000017c0)="ebdf", 0x2}], 0x10800, &(0x7f00000018c0)={'nouuid,', {[{@nouuid='nouuid', 0x2c}, {@noquota='noquota', 0x2c}, {@nobarrier='nobarrier', 0x2c}]}}) ioctl(r0, 0x7d3d, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x40c2, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") [ 696.847527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. [ 696.876343] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/02 19:58:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x20080, 0x0) getdents64(r1, &(0x7f0000000140)=""/4096, 0x1000) r2 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r2}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80, 0x0) fanotify_mark(r1, 0xb, 0x48000000, r0, &(0x7f0000001180)='./file0\x00') ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001140)='/dev/sequencer2\x00', 0x105000, 0x0) 2018/04/02 19:58:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20d43a002700638100f9070008000200e00000020000000000000000000000003ac3d73bdfeac9213f287972179ebc754246322f0a933401924f0f0048dd661d6d46479e73bfe30000000000fe1f6ee9f02f6b5fbe015c7f961a6e20f26711"], 0x20}, 0x1}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x9, 0x20000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x51, "887eb0fc961f2345ce66cdbb5da574f5927bd0b6acbeb7498ea949543a50dbf83870dbc14c6fa697aa70f97e5d23e86176c62272f21540c10e728efaa49f3bf34f159e3b1c7a11fcbfdb7eb7063f4ed676"}, &(0x7f00000002c0)=0x59) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x0) 2018/04/02 19:58:14 executing program 4: socketpair(0x5, 0x803, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept$ipx(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x10) r2 = getpgid(0x0) lstat(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() r5 = userfaultfd(0x80800) r6 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001b40)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000001c40)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001d00)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001d40)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000001e40)=0xe8) stat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) utimes(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={{0x0, 0x2710}, {0x77359400}}) r13 = getpid() r14 = getuid() tgkill(r13, r9, 0x1f) getgroups(0x2, &(0x7f0000001f40)=[0x0, 0x0]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002300)) r16 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/dsp\x00', 0x402, 0x0) r17 = getpgrp(0xffffffffffffffff) lsetxattr(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280)=@known='trusted.syz\x00', &(0x7f00000022c0)="6367726f7570a400", 0x8, 0x2) r18 = getuid() acct(&(0x7f00000021c0)='./file0\x00') lstat(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000040)={0x3ac, 0x41, 0x600, 0x70bd28, 0x25dfdbfc, "", [@nested={0x290, 0x81, [@typed={0x4, 0x2b}, @generic="fc0dcdf20a2355c11db477c787", @generic="fa83dd007642118a011869ae7bc295067890b02d22f5569312eb5acaf12248b9412842f5b9a1879beade224f0aa878f3d19b0f0cb3ff2838142e5dd46a8bad50258c82203eb0d9473bf557f0f5b36120d7a35d6585066ba2906f9f0bad9a4f62e08e3941271ce858eff77529140bf24996f926b9ed42ea86e0997bda8dedb592169a28bdc3f09dd8e53ff193f088fd51468281d7d913204e2bbe442f8b1e9c43d085595f6a9a0056da8a1d3b57a8dda26e8f069b485e314fa1412053c74a391d", @generic="defdafb7ffc996471c8adb88720d96921d4844080eeba213ef711832f1a4f4ce91bb03919febe821738d3be487bf8adb66cff9a205d01c0ccaffc2dbdb8a0984fd0d8ae267387e39cf6ae23dae2899d8eb5f0cc3ab7aab42e3a371fa01cd6a8f8ec0cf66cc3c4d22a9369ceac5983bae0202ac21086e358793bfe229e3330ea427d75e33ebb24777fd23a2c49472c9f314908ec97a0f536af231c21fcaffd7e3ba04860ad3db04464a9d5e2890df53016ca85ab27108e77d2f", @generic="10857b702bd6f05b9970b6bd40af76a02cf288afacbac83a019deee34d494b692f46ae1966645a14e121d8409819e2ebc458f8afdb9852ff81f202cbc9057370f2f5a50c988cae8cb0d5d22a5a48fd43ec8352fb1c570c047294bdbac4a60e4ef801e8abdc4537cc690bed8ef3c333b7fdad116cffaaf786e90847a0e125f9da8a5fb9edef3d5a5fd84fd84819cf73d3313e64b283b6ab89a4db559f358cb17d45cdf2e990be809f5e12e5ff7e029b583cd61bb9050f1a0bbe3c0297a0b62d4fded49279da4badcfcb4f", @typed={0xc, 0x48, @u64=0x2}, @generic="0effb49862be1850ca6a56a118ca927801e6b5c7c8985aaf0505b05b191cbf36ce386de61769b92249ba"]}, @typed={0x4, 0x1f}, @generic="2afe286fc8cd8b27cb5cc6c5b875a9ee5c930f76f7f5ded901ab6b40d2a3139f6dcffda5", @generic="ed326944cb53923ad6f880abef79682be0d5f8bc06ec1b5ff9da76346d4a51acb847fe8f5987ab0fbe0cf4e5e9b28551ab4da45f957a82c085ef6685f827501d1a115f7687820771d799ab4e61732682f789029c481a6655364d6fa9001a702b10630990fa65f743af326dab533a2271291114248bdb5f1032d4c78e8a0026d57197358dfd31a5ad7409a0b9f6a65d7524dc9ab40e68aff848d3eeb3a0e75b6c839bc3697b3076ff0e392d9459cfd9fa78e1f1478b58f03b29761a4d9276d45ca558b0c89602ea3dc5d41728566ae1e005d457abb0a567244b662e3864d1d8bef66a0108"]}, 0x3ac}, {&(0x7f0000000480)={0x41c, 0x18, 0xf2a, 0x70bd29, 0x25dfdbff, "", [@generic="1e55fee231aaf2b4d7f698d8279f0841815c4736e93610a42407925c2ee72a82e13758c9", @generic="82d895d29af6b6d3a64394e924df0447a7d167e837fcfd24cf8032e3092a992d41633ff0886af9f591ee26fee1e4da1f7fd245ca730da6f6144c60149abb37e03f10f5e718375f0c2673873c5569a1309a788e1998a44f323a0e9da4586c9089c23d473f9a1eb62514c8569f36a332c7037830753cf66ff5a8e0e2f9b5b9c3d26fae6e0e862a5f37147d4280f9a91578607875535f40b0ec9fb2bcf04ddfe0d5645901829632243680421e4170f836f9880655b1a6845a27f96fabff068ca3af8906c53e80472c4e09895916e0db96f09f97cb479dd764b8d01a1dba0e733f93621078d0786863c4b247680f0b12274742df0e7e6ffc", @generic="d60981723412a5d972af2f5db9f5ade3f78a26b45d95bded78b66fd44661f6a54a573356f4dda99867b6551aa041c97761ba09db89d588a6aa8f20c58027ffe1ac4e20d95819476ad17ffe12729d007dc05c1e218fa02192c561a034bd97f487a9340c2bbbef9957ea95a82bf81bd7b5417f743e03bbf1fde9c03ec89dbaff3f7a1e8deca54d33e173a340d945876a5aa023922c2365160d9220971f9a4eea12748e7454c038a078864de7eb94cead1d445f31", @generic, @nested={0x23c, 0x25, [@typed={0x14, 0x2e, @ipv6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, @generic="b9393420fd7e63003e20718fb8a7f9c4828cfa29296674f3709f4d9ffabbba58e28f259b96fe44f07da4d01413691a6bb3763a4b8c181b9d05e87005cde503916804d01eed5d183e5ef9edaa2f3c8f81c4a3da6ab4874f60c60bf5bbcc0e5ba86f59ce97b652307338a0759966e7", @generic="3a867b89609d426747648969813ef3840a0f69be6b7263db2dfa9d1fe1b41826a4688523f92798fc97ea903d381b9259ec2f03966bbfd2cda4281cea58e725889ed730fd553cd949a9c1924bed66790072c6c5cd05263e174e803b9bb6bab5bd4e6303a527027939cf7fa7755e9ab0e3ddf5f0d219079fe68b3ac608bcbae9b89d89775b14c30169441456fbfbf6cf720b4826b04f1159aecfbd5f97b6", @generic="73fc078fabed7287687fa9a336e97abd2ca27389a2dcc852b1503a3fad78aba5c16ffaff", @typed={0x8, 0x21, @fd=r1}, @generic="98fe3c900298f4a87fa8f32357bea6263cb3b895a6629f3aca0a4b5296fe9d6fae8be72b16b7e29961fac6ca00eba0043a4cad4fdc6baf62cdbd686e1bb164a79f3c3f", @typed={0xa8, 0x6a, @binary="c19422a780176cdacc833a26739baf976c43f8e036888f4fe94dc9d99bfe2114ed6de5f1934b12f10012735fd7a7e45c9ecad0c174f83c8652598b0e2f9e85245189eb80b85c13d9d64cef84956a89a3adf667742f1e92a6dc9ecc8f48bcafb0cbdea6127b4a3c2f27bb597b7445d501c906fe1396751a83bb18587b0724f25132f35627b937d9cd9648d8131422cc859222b76abc18c45dcf7e6443ec0ff0c3b3e7"}]}]}, 0x41c}, {&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x108}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1014}], 0x4, &(0x7f0000002080)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r5]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r12]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x18, 0x1, 0x1, [r16]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}], 0xe8, 0x20000000}, 0x667c52dba08affed) r20 = openat$ion(0xffffffffffffff9c, &(0x7f0000002200)='/dev/ion\x00', 0x2081ffd, 0x0) ioctl(r20, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x7, 0x400) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:16 executing program 7: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 2018/04/02 19:58:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7da820000000270063810000000000000000141000000c00070009000200e000a30cd7706d89b3bba96bd4000000817db6781aaf1bdfe88086bae70c824fd600771253da2a1b6d66bac025d3738b9cba98b7ea420a713d28e1a2da057252409e3b6ee271ef76934118b054b5a4b1eea40fb351f881471b79a2c05d99cbc3f36d2aba6dadb197e8c230b6a72aa941d1ab6c5c5f315d43a1a8a0e3"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2, 0x810) r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x2, 0x101080) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000340)={r0}) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000100)=0xffffffffffffffee) getpeername$ax25(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) 2018/04/02 19:58:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x280, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000003c0)) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000004c0)) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r2 = syz_open_dev$sndmidi(&(0x7f0000000480)='/dev/snd/midiC#D#\x00', 0xf21, 0x1000220000) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x4, 0x401, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e24, 0x1000, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}, 0x4, 0x4, 0x7, 0xffff}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000300)={r3, 0x9}, &(0x7f0000000340)=0x8) accept$inet6(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000400)={0xb520, 0xf4f, 0x4, 0x7c3a0603, 0x1, 0x0, 0x40, 0x6, 0xedb2, 0x8}) 2018/04/02 19:58:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x120006, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2, 0x810) r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x2, 0x101080) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000340)={r0}) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000100)=0xffffffffffffffee) getpeername$ax25(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) [ 698.468849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/02 19:58:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000300)=""/165, &(0x7f0000000240)=0xa5) r1 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)='\x00', 0xfffffffffffffffb) keyctl$get_security(0x11, r1, &(0x7f0000000180)=""/174, 0xae) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x40000, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:16 executing program 7: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700630036f293f0007f23ff6905cc00000000000000000000000000"], 0x20}, 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x408000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x109000, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x57, 0x401, 0x8, {0x86d6, 0x4}, {0x3ff}, @const={0x1, {0x1, 0x9, 0x1ffe000, 0x9}}}) r3 = syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x100, 0x10003) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000200)=0x2, 0x4) write$rdma_cm(r3, &(0x7f0000000140)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) 2018/04/02 19:58:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000002400)='/dev/snd/midiC#D#\x00', 0x1, 0x290080) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000002440)={0x1, 0x5000, 0xfffffffffffffffd, 0xc3b2c5, 0x7}) clock_gettime(0x0, &(0x7f0000006a40)={0x0, 0x0}) syz_genetlink_get_family_id$fou(&(0x7f0000004d40)='fou\x00') recvmmsg(r0, &(0x7f00000068c0)=[{{&(0x7f0000000100)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000180)=""/89, 0x59}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x4, &(0x7f0000001400)=""/4096, 0x1000, 0x562b}, 0xc24}, {{&(0x7f0000000240)=@sco, 0x80, &(0x7f0000003880), 0x0, &(0x7f0000003900)=""/253, 0xfd, 0x4e}, 0x6}, {{&(0x7f0000003a00)=@ipx, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/118, 0x76}, {&(0x7f0000004b00)=""/227, 0xe3}, {&(0x7f0000004c00)=""/64, 0x40}, {&(0x7f0000004c40)=""/2, 0x2}, {&(0x7f0000004c80)=""/174, 0xae}, {&(0x7f0000004d40)}, {&(0x7f0000004d80)=""/254, 0xfe}, {&(0x7f0000004e80)=""/68, 0x44}, {&(0x7f0000004f00)=""/216, 0xd8}], 0xa, &(0x7f00000050c0)=""/75, 0x4b, 0xfffffffffffffff7}, 0x2}, {{&(0x7f0000005140)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000005340)=[{&(0x7f00000051c0)=""/61, 0x3d}, {&(0x7f0000005200)=""/254, 0xfe}, {&(0x7f0000005300)=""/20, 0x14}], 0x3, &(0x7f0000005380), 0x0, 0x2}, 0x2a0}, {{&(0x7f00000053c0)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000006640)=[{&(0x7f0000005440)=""/220, 0xdc}, {&(0x7f0000005540)=""/50, 0x32}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/183, 0xb7}], 0x4, &(0x7f0000006680)=""/130, 0x82, 0x4f32}, 0x8}, {{&(0x7f0000006740)=@hci, 0x80, &(0x7f00000067c0), 0x0, &(0x7f0000006800)=""/134, 0x86, 0x4}}], 0x6, 0x2060, &(0x7f0000006a80)={r2, r3+10000000}) syz_genetlink_get_family_id$fou(&(0x7f0000005380)='fou\x00') 2018/04/02 19:58:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0xc0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0x5, &(0x7f0000000000)="6cf89d5fed6d4eca5400a39b5ee47c3980a9dcb9b4b9a28f67d5b4f53207e5149ae2335863365f0c271e565e913c5a618e008a3a975140963138f30207a4e6cbfa8838df5f85e5ab1c8474d3915ff2bc3f077f37cbea6e0e461661995f71b2275d884ca98105353fcb4135343e7b4f52c627b594929de42b055bacf435205330eba5c0372ec497bcf03261a8a75ea71b8167d5eef7ebed5f5253ae5a2c415d93f907986a8b12fc8942f66f65a29a7db913bc4d6124e4ad4ef9d69d9ab71fea63d7ece04e21c3c684af207decae471bec97b982aa7c131832082828d63eff40b6b320278941f8ba8ebb73f318c84e73d7c3ba8d2412a5ce981ae243acdead") ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") [ 698.809086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/02 19:58:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x20, 0x800) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x20, 0x80000001}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) 2018/04/02 19:58:17 executing program 7: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000000000)="05000000bd0cd751bccd5c1019cc614fd6adac9193cf") 2018/04/02 19:58:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700639fd9001d000000000014a600000c00070008000200e0000002"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6f, 0x800) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x2) 2018/04/02 19:58:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2, 0x810) r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x2, 0x101080) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000340)={r0}) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000100)=0xffffffffffffffee) getpeername$ax25(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) 2018/04/02 19:58:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) inotify_init1(0x80000) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:17 executing program 7: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) [ 699.684865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/02 19:58:17 executing program 7: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x6) syz_emit_ethernet(0x37, &(0x7f0000000080)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@x25={0x805, {0x2, 0x4, 0xf7, "1dd6e255053a41209e47cf4be6f6a2f2bbf894ed8f400547ba9c19670b207fbb3e0019e5523f"}}}}, &(0x7f0000000100)={0x0, 0x1, [0x339, 0x37f, 0xd7d, 0x561]}) r1 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x3, r1}) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffd2e, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYPTR], 0x1}, 0x1}, 0xfffffffffffffffc) r2 = shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x6000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)={r5, 0xf, "38505b11f9f89dc7f6341c858e6d79"}, &(0x7f00000003c0)=0x17) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000280)=0x20000001, 0xfffffffffffffe19) shmdt(r2) r6 = socket(0xf, 0x80002, 0x7) getsockopt$inet6_tcp_int(r6, 0x6, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x10f, 0x56240) 2018/04/02 19:58:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2, 0x810) r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x2, 0x101080) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000340)={r0}) accept$ax25(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000100)=0xffffffffffffffee) 2018/04/02 19:58:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/252, 0xfc}, {&(0x7f0000000500)=""/89, 0x59}], 0x6, 0x0, 0x0, 0xfffffffffffffff8}, 0x100) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000640)) r2 = accept(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x1e) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") socket$l2tp(0x18, 0x1, 0x1) r3 = syz_open_dev$dmmidi(&(0x7f0000000680)='/dev/dmmidi#\x00', 0x1, 0x200001) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f00000006c0)=""/162) 2018/04/02 19:58:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80080, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x1, 0x100000000}) [ 699.891912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/02 19:58:17 executing program 6: r0 = socket$inet(0x2, 0x80005, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000002004e23000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002004e22e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020066f50000000000000000000000000000000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e0000001000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000"], 0x310) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) ioctl$int_in(r1, 0x5473, &(0x7f0000000080)=0x80000001) 2018/04/02 19:58:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x7ff, 0x6, r1}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x7fff, 0x0, 0x100}) 2018/04/02 19:58:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2, 0x810) r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x2, 0x101080) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000340)={r0}) 2018/04/02 19:58:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '/dev/ion\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r2 = fcntl$getown(r0, 0x9) kcmp(0x0, r2, 0x0, r0, r0) waitid(0x2, r2, &(0x7f0000000100), 0x2, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0x3000, 0x1000}) 2018/04/02 19:58:18 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x80000000, 0x14142) setsockopt$inet6_buf(r1, 0x29, 0x3b, &(0x7f0000000080)="a1b129f1855f6587fa46e8a6ffbe4e944562d6b4256ed9af11401535c565277e910e0a22888c85fdc14c104e64a5816999908f51cbf726f7d809ec780e3e06070c016f3e9929540c0a1266", 0x4b) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) r4 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000140)={r1, r2, 0x20}) fcntl$getflags(r2, 0x0) 2018/04/02 19:58:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000100)={0x0, 0xba2}) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) ioctl$KDDISABIO(r0, 0x4b37) 2018/04/02 19:58:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x4, 0x7, 0x5}) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="42000000270063810000000000000000140000000c00070008000200e0000002"], 0x20}, 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x65, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000100)) 2018/04/02 19:58:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2, 0x810) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x2, 0x101080) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 701.424192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/02 19:58:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) [ 701.569096] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/02 19:58:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2, 0x810) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x2, 0x101080) [ 701.659735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/02 19:58:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000270063910000000000000000140000000c00070008000200e0000002"], 0x20}, 0x1}, 0x0) fgetxattr(r0, &(0x7f0000000080)=@random={'system.', '-mime_typevmnet1\x00'}, &(0x7f0000000100)=""/155, 0x9b) 2018/04/02 19:58:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0x3ff, &(0x7f0000000000)="00000200000000000020005e56ce82d3d02558e32378e1cdbfcd86aa1eb4be1bcae1fd0e29637c23ec762ea049002a8c544fe942ca371d20c078acc083a8c627cf0f84") r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x6c4150f82803be52) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/04/02 19:58:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2, 0x810) 2018/04/02 19:58:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x200040, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002a00)={@mcast2={0xff, 0x2, [], 0x1}, 0x7, 0x1, 0xff, 0x0, 0x7, 0xad9f, 0x7}, &(0x7f0000002a40)=0x20) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x0, 0x0) r3 = getpgrp(0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000002b00)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00000028c0)={0x8001, 0x2, 'client0\x00', 0x2, "6399a142ee9135fd", "dd9c5585fe5c7b2b8f8153dd7c95ea2cb1c7cb16bf0fcaf73a0b4c2c49821699", 0x8f, 0x101}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002640)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000002740)=0xe8) stat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000002880)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="3d9833c39af41acb31b4cb8cb897ca0e0f3dbb8109cb4af00f790804cc9335b8fccf3597efd3df8b13de5a35dc513d32619b6ceba523a196dddd7755af963e9f8da60d44ebc0e3f79515c3b68339f134931ad04207b7650fcb9ce65eb919190933d6868b921f5ec0891346c4ddc20b83a11a1a20f44c11dbbde5b3644a4e597891000d3940afcd4de258b4d0d8f207c579288a51f22fcdf6630d21a99bba60271673986d39e5ba18748811734f09f76062db7cf748", 0xb5}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="5c9064bbac4669eea5783639966fa9e0080a1fcd2a4be4d2fc5b1e907060e4b434689042bc41c54799038c1ce807802ca6add1a7cc78088d3c92bc88c7eed06ee81a21340d472347d929195d8f3b197217475986", 0x54}, {&(0x7f0000002440)="4cd6c127cb64e56604c37312486d77fc7386be4e0c855196e76c6a194608cc717c303451c90f06ea603d8ee9b28cb4ba595d1d7f502b328fd553076c20e6c049f71286d42b738535ac6857857bbb2a52f963e2c3735c7c3664cec10c3e98f6313cf397da621ec95850dc06ca0de119c13d6e3c23443ee072c585c4283058412dcf7f7ca2bd42784a12102ecb8a8676a7f35f0015d90c744f16d3325e368870ab784569ea4207d218fba00935", 0xac}, {&(0x7f0000002500)="e97c456a016a9e3955d1e99b0296387a210935a136aebc04a1943cec69", 0x1d}, {&(0x7f0000002540)="b0ff55d0a34e5eb4538e06abccd85f41cb6b3462f1c0fbb65bd5c848bc476720b61b843813f9f50a8d30146b50f29c64d53b50f54b35dee3729c33ddcb09a25a4e424c38335464f7e47a7c5842c9f7b26cbd1c2c126dd7114558e5edfed3c997c3479925c3c2cc6e6f82be1a4589147e7202f023b9a67eeda824", 0x7a}], 0x7, &(0x7f0000002840)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x20, 0x8001}, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000002a80)=""/95) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x1, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e28, @dev={0xac, 0x14, 0x14, 0xc}}, 0x2, 0x1000, 0x1ff, 0x2, 0xfffffffffffffffa, &(0x7f0000000180)='ipddp0\x00', 0x24b, 0x2, 0xffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000002980)=0x1) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x25, 0x800) setsockopt$inet_buf(r6, 0x0, 0x2f, &(0x7f0000000080)="a383a581752c0ab48257b47d148241174a2a59e4487c32fd7c6d736e8a143eacfa0b905fc9860f929265ce2c231b06b7df77692f1d29be86deecdea2e7e5af23a2cc2085f2e5d9fcbfdac336bbf819765bdeb4bb19855de8d4c386f2681672c7bf4a86234f9c91897980e3189ce9f7dc0fb38497c1fbee3eee3ff1e1c5ba05d4d74ab18c5653ff83a4b0b0d78f8c262e8a6ee227add3b98f69a5789e73a9c2bcf016d492a9069306cf8ceb09f883f03f2fc45e756f6cfa4602fa7146a15dbe13713a4dfff57e4a421e2986fae926eb4e25046d1364c8a9694f16b1f876cc7dca5a", 0xfff8) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:20 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x101000, 0x0) memfd_create(&(0x7f0000000000)='/dev/ion\x00', 0x1) 2018/04/02 19:58:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x8) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x323, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x8000) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x1, 0x1, {0xa, 0x4e24, 0x40, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, 0x32) 2018/04/02 19:58:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x800001) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0xe300) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) 2018/04/02 19:58:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) [ 703.210689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/02 19:58:20 executing program 6: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000480)={'dummy0\x00', {0x2, 0x4e20, @rand_addr=0x6}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) [ 703.293394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/02 19:58:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:20 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) 2018/04/02 19:58:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0xfffbfffffffffffc, 0x0) socketpair(0xa, 0xe, 0xfff, &(0x7f0000000200)={0xffffffffffffffff}) symlinkat(&(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00') ioctl(r0, 0xc0184900, &(0x7f00000002c0)="60050000000076c58ac491413ec9c552f2373776469bf29aeb666cd23674e5efe7c44e0101cb10aad8c26a16c8b77b23a8a67b0449058b55a1225cfd0106f9e442f6911c5a4f8577479480359dcd053dfeb32392945d49b23a40bd5f196364225d01709e4ce2bf4c695f2f0017747bb35453b262dad457c49d81f6ef8bf6b902a12ccddd1da6af03453ab1a652b085639193d2c50c36207339660f9e3ccb1a438f631c6e8935116a8c2fb6dc8f954f50f83e0fd968ca9e2aad1533047b9d03a7c103200d21703ce10e912cac1761399142009be8b969ae18c1761ce9488f9add558e78055554eb8a58505128cd716be4") r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000040)=""/223) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc100, 0x1) io_setup(0x9, &(0x7f0000000280)=0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000540)={r2}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000004c0)=0x2a) io_cancel(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xa, 0x3, r4, &(0x7f0000000400)="c0ed77fa06f6065ca9251c62c2e6788e262605ac33d141eeac4acc1b4f65021493452fd7a5feb35a700d1a19ec45b4cd33bad4651a832fec48", 0x39, 0x7, 0x0, 0x1, r0}, &(0x7f0000000480)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 2018/04/02 19:58:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) [ 703.553789] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/02 19:58:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x40) 2018/04/02 19:58:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x70bd28, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0xa4040) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x769}, 0x8) 2018/04/02 19:58:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e20, 0xffffffffffffe7c0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x9}, {0xa, 0x4e22, 0x7f, @remote={0xfe, 0x80, [], 0xbb}, 0x8000}, 0x9, [0x5, 0xdae, 0x4, 0x5, 0xb32e, 0x1000, 0x9, 0xbb03]}, 0x5c) r2 = dup3(r0, r0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000100)={0x1ff, 0x80}) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$getown(r0, 0x9) ioctl$TIOCGPTPEER(r2, 0x5441, 0x83) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) io_setup(0xf2e6281, &(0x7f00000003c0)) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f00000000c0)={r5, r3, 0xfb5b}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00', r6}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000240)={[{0x2d, 'memory', 0x20}, {0x2b, 'io', 0x20}, {0x2b, 'pids', 0x20}, {0x2b, 'pids', 0x20}, {0x2b, 'io', 0x20}, {0x2d, 'rdma', 0x20}]}, 0x22) 2018/04/02 19:58:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x20100) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0xf000, 0x0, 0x1, 0x8}) 2018/04/02 19:58:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) accept4$ax25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, r1, 0x32, 0x70bd26, 0x25dfdbfb, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3c31}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x14}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback=0x7f000001}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x68d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x801}, 0x40004) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[]}, 0x1}, 0x0) 2018/04/02 19:58:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040)={0x1}, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, 0x8) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:22 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0xfffffffffffffffe, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="12114c7a751882f5ebc6fe83bfd6b40a241e0e6eafb72e890425e2d3c188e005a6387fb6fe6796b5dcba6a5f9bed05f4eb2f44f4f87375099aa8d748254b790c65f84bacfa61b24f8a2b", 0x4a, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000200)=[{&(0x7f0000000100)="e62815d8b0c59d6ca19ecebda75b7f8141003e4cc7639547fbe74fd676c487d5d29410ed5a483704daf16f25524946f53185f2aa8b510b569cf7f79441d09a79e702019697ddf1aa04dfe5c94454126141c12cafc6d2e26e19f8b79c7fc3efc34e44b8", 0x63}, {&(0x7f0000000180)="4c5b4370867c5163ead4be4b7ef6ebeff847e7ee8c343aa0185e25345712f075b53c8ae27f6f669f0e24ee26fbeadb01804d6b019f76dc5e3518b68d2fa39988615d60", 0x43}], 0x2, r2) 2018/04/02 19:58:22 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') io_setup(0x8, &(0x7f0000000280)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x80000000, r0, &(0x7f00000000c0)="1087213f1d955e8aa0b2ab9ee52cdd8e5b32749bd23c1e4e70da5a19789825fe7d5defb6e2cb186f397f6a546c2b6a79c8065c93fd543e67ecfd3ccd7b90bdbee29dded520d4768f212db0a6c441430c02b91418ac110d8dde09b093f9854afe21c15df4b56899561560ccb3", 0x6c, 0x100000001, 0x0, 0x1, r0}, &(0x7f0000000180)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r2, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") flistxattr(r0, &(0x7f00000001c0)=""/131, 0x83) 2018/04/02 19:58:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000270063810000000000ff0000140000000c00070008000200e0000002"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r1) ioctl$TCXONC(r0, 0x540a, 0x1) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xb19, 0x100) accept4$bt_l2cap(r2, 0x0, &(0x7f0000000100), 0x0) 2018/04/02 19:58:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[]}, 0x1}, 0x0) 2018/04/02 19:58:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000270063810000000400000000140008000c00830008000200e0000002311dd09b0900776d665fa71b89392c2a5207003f26e1f5fd2577cdfc9e6513c034296aec6a2bf1e88fe84c70e4b2c13dbac44b00a53df51b"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2083, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x100000000}, &(0x7f00000000c0)=0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@local={0xfe, 0x80, [], 0xaa}, 0x2, 0x0, 0x2, 0x2, 0x800, 0x10001, 0x9}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1000, 0x7, 0x2}, 0x10) ioctl$TCXONC(r0, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'wlan0'}], 0xa, "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"}, 0x10d) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f00000003c0)) ioctl$TCXONC(r0, 0x540a, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r1}, 0x10) r4 = getuid() ioprio_set$uid(0x3, r4, 0x2) 2018/04/02 19:58:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, 'md5sum'}], 0xa, "952011d22cc134f360caab82ad17cbe74d7ffaff5750a21ffbc2eaa93feb6739d2e826b8eeb4c9c80c6489929d36f4ba5ee177685ef35536955451cc4c4fb5e847e3afb8ce535b448dc16ea23a1ff17952f0ef3ddcad5c8e713569f500a6756330d931619d4dc2936a169cd336bf421339a01e4e12eb0e2f98253537db2d4425d431ca174fceddba04f4772813c74229cad22551a52b555a2a833cac92c82ff510622eeff38ba5d853fda164ef23d59563b09dc08154ce8203fbb2cd1907b2df4b47e6be5ea006e542e3b05fd07b5339f61b5dec62d3aa413560b0a13bc85a2b482d442628861e0292d17f8dd13fcdbbce5d2674686389ee346d1295b5"}, 0x137) 2018/04/02 19:58:23 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000000040)="60310962b6a2c1d40b578fc7ec4c4a06eb9f53f9a69d03d63fa621fc9ac2a120156c0a10fbdf3d54b5361e017784a22ad56230ecd508f0b4165c7e8a398d1741dcaefd2c68e9735356b7a7cb74a6bb9c4a8f710ff9973b0621a22a622ca30ebdbd793c58536f03bec558808533393dafebdeac5284be82cd7c783441869b4f8ee0b4908476f5d69c291c4b37d9f44014bec3a7df61dd52a5c831cdd06edee594813affe7972a1227b07682e8c94c37d273d3cf328912f2c47a8db3c3b9be3d267ef0f1ce5f18fea67c744d41aecb9be36bafb5e87465facdb920ec5c5c40466335ffbe3e51a310f9c0e531d709f42b") r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @dev}, &(0x7f00000001c0)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) 2018/04/02 19:58:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[]}, 0x1}, 0x0) 2018/04/02 19:58:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:23 executing program 6: r0 = open(&(0x7f0000000100)='./file0\x00', 0x840, 0x14) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='bcsf0\x00', 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000270063810000000000000000140000000c00070012e6800cb2127fe73f6bfff3c89eb570db1318e58b17d467d590e563a5fb9b7b09af7e58"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:23 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x5, 0x8}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x14800, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0xffffffffffffffff, 0x8) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") [ 705.913287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/02 19:58:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:23 executing program 6: r0 = gettid() ioprio_get$pid(0x2, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140021baf1cf697edbeddc3024a36b9b287484bbaba4550aac8604010000000027f73bff3e5fd54ac314fd7b0c00e5ac6bf46c188c8c3dc36c426502c9eda815213b98bfc826dad6e1bb6d9831401c2ce810ad06bc94b66b7531b61bc96c8d14bc1c829b3e72ff276a9625ee3b001e9d3d5860a3ad23333885b9c5a938196dcc5a79e955757a79e2ecb413b2b72ea79edc3bf5b628"], 0x14}, 0x1}, 0x4) pipe(&(0x7f0000000080)) 2018/04/02 19:58:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) r1 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000000040), 0x963d9b3c7384a559) fcntl$addseals(r0, 0x409, 0x2) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000080)) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x1, 0x8, 0xea2, "3b19cb4978d607739d7bd41798d947879afa2da0b4b6ebbf8026cb38ea643c1a13fc4bbc612bc96e6e6a488db500bcc15dfa0e1fdecbd468ac57cea6fe8498", 0x25}, 0x60) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xd0b, 0x4000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408a0040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x0, r2, 0x800, 0x70bd2b, 0x25dfdbff, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20048000) 2018/04/02 19:58:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x240000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x81) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20001000270063810000000000000000140000000c0007f707000200e0000002525a39dd4001006badfaa2024bae5f24ebac58adbc4f7bace8b69044fd9feefba0d88c7fd153394cae255cc632c04a82f5db080f123364624a3f9ae3ad"], 0x20}, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@local={0xfe, 0x80, [], 0xaa}, 0x7, 0x0, 0x0, 0x2, 0x1, 0x80000000, 0xa1}, 0x20) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000240)={0xffffffff, 0x5, 0x8, 0x0, 0x401, 0x81}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x9, 0x5fa35345, 0x1, 0x6, 0x3963}, 0x14) 2018/04/02 19:58:24 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000000040)='`') r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0x43) ioctl$KDADDIO(r1, 0x4b34, 0x100000000) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200)=0x4, 0x4) kexec_load(0xc00000000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)="6f9294b749ae4e32f041a9303b4d2d10929e611434615385ad44ebd3bccfb637259a43b41f15f968082dcafee59eda39ddad0a24c44388ee22108f94df9ddc56efe12908e1434ba574e722b67f070d65fa1bd5daac614fd6723db0e1cbd023b693b48a158e8feca2ddf3cf1b2efb3b7c9b257ea7687ab0add4c55fd4964dc62ae1f50dad3179c2391a52644d8c4dc4ce1e4e455ba56db24bc7ad040a3558c9a34d9e4e36739722de7055701a4ed67dbf1bb0e7ece82e5b1efd6ce515cf459dfcb9cb06e8177b1855b20618595493c052357bbdeb59ba67602de3e62e7bd2e374472f04db71193d94d6dcb2c6f97a", 0xee, 0x1601, 0x4}, {&(0x7f0000000200), 0x0, 0x1, 0x8}], 0x3e0001) 2018/04/02 19:58:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:24 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x500, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xa4, "c06fdbfbab34e7102f48017366d52bec3d1fb412e3288e59c7750093d8de4ccf89f09e094b05b98cd6726aaee7a838ac07a5eeac89d2bfcbe2a3ade1882717037a8e1c46c3073e3dfe9fdcd791780c6a2732fd065e5f4342f2eb8aef0bad7a424f4eb2e04a307daf1fdeaeb076a875fd72499d8a93e4ac89ca8b728d57547c71d12fbf4a05328b64ea99f7513baffeacadb1a797b3b0d883b7edf405b1c6cf8b8bcba1fc"}, &(0x7f0000000100)=0xac) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x1ff, 0x3}, &(0x7f0000000180)=0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) write(r2, &(0x7f0000000200)="9caea988431ab7057d6573e4dce17599754f260d68423ccdf807b311d2ae2bccb6d54ab3fe49354b2a9e8d162d96c9f0f655274812fd8029011debe6324a9da93de7aed34e209a531121b73a7ae02e40a500000000ace8cfccc4157f7cce", 0x43c) ioctl$TCXONC(r2, 0x540a, 0x1) 2018/04/02 19:58:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000270063810005000000000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000270063810005000000000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="21000061cd97ad01ab63b6452b94c033ae63ff0dff000000cc"], 0x20}, 0x1}, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f0000000100), 0x4) 2018/04/02 19:58:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000270063810005000000000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x1, 0x0) ioctl(r0, 0xd390, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="205f43a8623464381c00000000000000140000000c00070008000200e0000002"], 0x20}, 0x1}, 0x0) socketpair(0x15, 0x1, 0x3ff, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000200)) 2018/04/02 19:58:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:24 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8a00}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x7, 0x18, "abf0ae22400df50bcb13ea9ad12b5901650d95b3f1122cd3423ab4ce2102341272cfec3c30fb7d88766131226a51a83061aab03706e56712b34220c369993542", "52e3941c2a22384465556c74f6225c8e5a4ea93868929e65e49db2585f0fc707", [0xe6e, 0x7fffffff]}) semget$private(0x0, 0x4, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x2000) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040)=0x3, 0x4) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:26 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x9, 0xa30, 0x400, 0x81, 0x1ff, 0x1], 0x6, 0x0, 0x7, 0x9, 0x8674, 0x8, {0x6d, 0x100, 0x3, 0x7, 0x6, 0x8, 0x1, 0x3, 0x100, 0x9, 0x61, 0x2, 0xff, 0x6, "c2bdbe9c4cc08592851a00b9d2aedb0e037ff63537f25eccdd5adb844dfa5c6e"}}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)={0x9, 0x401, 0x1b9d, 0x0, 0x100000000, 0xfb, 0x6, 0xffffffff00000000, 0x4, 0x8, 0x3, 0x3, 0x0, 0xdbe4, 0x401, 0x100000000, 0x5, 0xb4, 0x3}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000003c0)={r1, 0x4, &(0x7f00000002c0)=[0x2, 0xdb2, 0x0, 0x0], &(0x7f0000000300)=[0xfac, 0x3, 0xff, 0x8, 0x1], 0x76, 0x3, 0x5, &(0x7f0000000340)=[0x5, 0xbbc3, 0x1], &(0x7f0000000380)=[0x3559, 0x9, 0x8]}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r3, 0x3}, &(0x7f0000000140)=0xfffffffffffffe90) ioctl(r2, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000027006381000000000000000062e12598fcf3e0308bf742e7c9e8b0141a3b4595a682407865e14fcfd45298f3fa3436747d851a789682a24c0dbd1815d2e33fb4ec9198f0d88019a46a59b8614aa2d612ca68d42a4bf682cd686acd29fc77a97f33b0fe1e24994362b4d2cbd0ad050bdac2738968f64af06409ec586b7110dbe982c805587bb697464ba1c489747496afa6cb369bd54c3c42794248b6805d88ac3e8b2fea849975cdab3da6c5a1ecc7bdb3f431c79acbc56db0272eedf69e922634e4df4ed10d97b80e42106297e07d"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:26 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x11a, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x80) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x54) socket$alg(0x26, 0x5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x40007d, 0x0) 2018/04/02 19:58:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") getrusage(0xffffffffffffffff, &(0x7f0000000000)) 2018/04/02 19:58:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x2, 0x3, 0x8000, 0x0, "2a41f896c4bb5ca29be4c2c8ca8e8081ddd132e27a9b26004974d01d562b269b06ef8cc2a1869ecfed860ef2", 0x2f7edc19}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x108, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@multicast2=0xe0000002, @multicast2=0xe0000002, 0xffffffff, 0xff000000, 'ip6gre0\x00', 'bridge0\x00', {}, {}, 0x0, 0x2, 0x10}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xf, 0x1, 0x4, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, 'rose0\x00', 0x8aa2}}}, {{@ip={@remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffffff, 0x0, 'ip6gretap0\x00', 'erspan0\x00', {0xff}, {}, 0x2, 0x0, 0x11}, 0x0, 0xe8, 0x108, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xf}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x308) 2018/04/02 19:58:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/87) 2018/04/02 19:58:26 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x11a, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x80) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x54) socket$alg(0x26, 0x5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x40007d, 0x0) 2018/04/02 19:58:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0xfffffffffffffffd, 0x0, {0x14}}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:26 executing program 6: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000100)="fda21bd8854fe42093b525349d5e9dd589049c28bf69b714a69477308605107e16143b8d4fc085232b5cf9c479a56cd30e40e2d2ebacb2faebfcc35b6a3e3669c918999ca14503227cc8c3f4ea26f5c30552d149e23de36bfb1b7645fc30370aa1d1a3745f1019a73561d3244100941b6afd913e43764d46f0d8ce976a741ca29ef38b573aed1a2464dd18989c42b6414b9fbe07b2e529d5552b") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001500)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)={0x130, r1, 0x200, 0x70bd28, 0x25dfdbfb, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x79ba}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffff800}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xa}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x840}, 0x40001) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7ff) finit_module(r0, &(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x2) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f0000001580)={&(0x7f0000002980)={0x110, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffff8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd72}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000001}, 0x44000) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000300)=""/4096) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="181300002400010329bd7000fcdbdf250e0000001c128400b430b822fec85b478541e44fd6fd8d41221c7d1a5ec2fcb6937a5a3661c5ecd7f3c1c1db9342b251894fd658dc01d95883379fabf1f521d7cad3d0f6964bcc99527d0515fbde0f895168d4c6aad64bc24ba5249955b4f2310f55f87ef4ecbfaedbe151935b5a6938b9701301cfa69a1f2ac702b9f01ab645af5ddbdd1366cbfdf05d97309dc7cbb0a54e392518eeee7b63e809c0f63cb7c2c4ec73060ed82f1bc208a4d2f3dc2ea77f3a9f5c4ade7254f7e4a7f76e41ee8139bbe9ee529e9910d866e816d55adcfe216c4f9873c5178e8eda11e1ca622581bb4c94f9bcf9a18f4d51a941273c2a4ebb36c7a605034dcb2d66cbe150d6215f07006bcecbd219876c7f4d7df5b4a099fe9a0b188b710c68d6e1085866aa82a8d82813a64fd46db3477d6e75e770dfe6cfdeac0f1af7ad929843abb4d4417fdc6154b0efc97817b0ab9a59bdac994d3c3a2bfb9efbf3543a1f52db643c3bde9073023b55660a7e4711e42bd0814ddc98731cb32dc31e7be6e3d98623ed43bca24ad9895465ed3c55ba276a1d9276699b6643120111b0c468d27a6134585c3183c44be2b1559ef4fff97afd444d45fc3ce5ef496ccb877d9cefd04887a4df88e1a26b3762b7b51da8bdc0fd41930f86f2a4b584ace33cc48ed4ddb8b960b897bf6a1d87c6dd70f54f9830abb4552a723f29f1ae671efef935abb74e3b7f6bb27895ac0f953e70786a6ecc5957388bc33b846cdd84666714d0c8b71e0b84a89ac96f54c619afbc773a3b2c7d7ff94ef10291953e46a6f25b01aa9473e3056b66a8fd4eb5c2664792ed2996b5330426b1c739ec0f207170668eecfb898ceb6ab4acb6ef34cacd09cc096bd875d92c988263d258511152f34ba1638fff89927e036f12cd5314f2b0f56fa7a4b519659f9445f2213165563e46bf8c59d35b13b34d346e3739a94cde4916e5d88f5d1267e583eb99118d88a1613fa51e1352f940770c92de6e3e598a36597d4164a3e20d184251b56c060952d44770bf7aee5b4955365080929712ae3ab5eb6b0d56812c693c0da4429fb4cceb5937a1f0a1f10cec362b9cf8bc3f4d1abb3d508a4217ae1232b234095974b0c56f4f15c3c898270dfcf76d5a30220078ec36b1cdf46661a7bc35bfec39dfc74a05144c0e48e11fd0ad4f258efb3f4781a85354d69b202fba22dec4f5bac5b313bf53f57706092585b8c7a5bbdaf28bf7d20e3a797f418b04b347c207c03bda71a3ea7430dc84af415a8ce5fea1e6c0a7921ed104e6f97265d34ebfdd6e0ba0428eb35359895be47cf59aa311fbde6deff15ae6177ff560f0885f6ad6359ca1196969c13ccc98f0f8598527ee779707e87223d0ef95a0d5d8ea28450b315cd4711933046452e79fb0631cdb0ad1f345a78f6fdadd0c64c5e4bb796381a448d7170c2f4da066b2b2af2d88f056983ea8cce5d435e63ee7ee49d2267509c344bdea0a8c86d72e22a08fb59dea97c10e915983304c5757d81f19b2b27b193e6de78e4dcaef6a2eadfe2012d9bc85caa9d416e336bf016472545ef99ffd8cacf9397d2c60a1905606d3a74fcfed5a332b3d1e818bad4cb091cd610a24a5292242065bc0892c46fe28dc5574070ddbb77db214accf68f42a2a76b1d2f0ca2ca49341c1522791b50a52601a6221038143b69d8e6b2468865eaf0cabb6e2a9c4826c44fcdcece37303eaaa0ca7789434a33f69aa8541de9b69651a54cab1d738416be2a84c01235a8213a445ebb87c59fee2524419bee81ec9f17be4a3854d406010390534e94336f0c0b2f953f3b30cce8391edfce4bfaab2ce98369bc6997dde3a9fe87104e788e07f5efadbb194b3624e7a16674bf02aba3c3ae3e16a09f1a013e3d9ca43aa3bb3a02d55693244132ceda79d7ab9d845ec5a163a2eb61c5c3a97952e4e852761f3715f8a8a9597baccfa14f4bb7ceae4a80419055a83d846cee4f0ad6d974f75e4d79fc958777fd54c22bbf392715721ac5fcf988a33f447ba7ec8b828f9deb0d549fa2301f77ec66cec15ea15a6fe2dd6390c82f82716be47f7c95de2609c6e8f8435c5735b9e84b60d63170a176662b58eee5d54697f546f7db00c95f972ba1f18a675e0b0af781f021275c71e060954f4797793ab96ea659f24e1f76c187179ae6e717f4796491ece002b5f1a01c32b50b13a58bdc9e9a96f9dfb56be218c43a3c7f1bbc2b51114e623110c42f37d29b558492321bdc61037bf934a6cb0421159ed9effbc74dbe5e6bb7349a420b69f7885e9cfccb4e95b0304b3cdc8593ef89f0a44c21e0db49ae3637b02846c6549e1ba32b1ff9f5bfe8ae41e80415419064993cea3441a9955603d73ddbaeea64d03f1517cd391bd4234b108bd81dc85cfaa80e27247b8bff08f95abeee8fa422329a7f4c3fe842abfa56a414bb6375433a9e05b51e5814ae985154be98fad4c005ce53fe91885c0c6bd6924a1375d648b91e36265614537d122915ddcfded9de596ca7965abdd540c60c4649d59d3105cb40edb99962dd9a0032d900560f37621865a2454290b19b563cadd17428e04add65d59b2edf26d28121a223c35598af15df791a393fbf77cf78f6f132f9d7591cdfa43029f7abba8637cd851328a7a348d3e90234dfdd5ec1febef5c8ddb10775272d9dc82d9836cecf101988c730b0d90d5a60b5c9cebef3acbd57fea0c4ce4a8dc96e446b302a978a04c6a716c0e56412c7439ad36bbad393a08b787f5a2477b585a84e6beaae9d12cc195c7c8e0e5e5af998ea3f35686bee3311549eeb383b4318a5ab85025d49a25be369bdf584daf3bdf292c502eda3283e238049123a0263db768edd2e381b0fb95f9580ac35a2a6e965aa900b599daba56baaec3e7e0bacb70e4714941214bd90b9b86a94968360702b05474d06a600ff1a1ce82fb564bcd82f2adc126197ad4f47da543939c33b1c3324162ead91faf1caff079a398d3d842530c1af98f6c568d1939f1690a458def988ae05bcd44734569a40328a2ffbed7ba961ba3ec4a4a0a5e500760288dca96a66c82f209e847bfba19b6aed4829169c06db0d2124cd717726835023cf1ffb7a10cc43a680cebb81ab37d6843e02c31ad891ba168ac84acd73e951acd65282738aa41c1af9d9ef51ad4bf68ea2aa8cea6433ed6b902c1689d7b92cf6eb6653129b5b6da09f21a67124fa128ec1c5380fac382b16c4e103dd1df529514f1a3114826300695896e7d717f28b5443c9cb54f199a904b45c8a251fdd2ed8ed47dc9f50e31efab63968f42efba532ac488ec84fa3efae6b5499e9eedcfdfe19535e505b2737f8f3d1b0b52e230d476fe9913086913847c36fcad0a4dd60f6d1138831fa7187bbdf409af612a95a577e5de231c722be3885e49d438e0c58a83c753e7e2d34c7f6dca628d9862feddbd813fb8891395950d2c247d18450a14a666262464b8eaa761815f06b4e8f903fc80f49f325db527b6415e1d4294e80ba7d403792e83753a8c58091188e7b5e78ca641ab00bb172eb2b1352b6826e1503d9035056a923279a18f81ab74e9603bab059aabe52b5f2f7b565c8cd321a6e354615500b6b570bbeb740597337326cdee6f7664f806d119d7c14a04443a5f0e9bf3d62a59426f204e2f77deec3fb055a2c05fd88245340589d022cc2b2248070265a3b219d429182d699882a330116f061f4d9dd3d796f5308bd215645ca58bfee595f3bc091fad5e378db75bce34b6c938811cf569e83ac69600a5350b74fddc7ee88f7891429644984feba2bbdc1cd650474594a4fa65fa42bee033dbf59a106e4472f9ebfe6eb5bc49d46e92e8a2e87ea879307fb17a14b70f793fa65103488a6f8d2a13b8836c2a87c8c246bd8a0a65acbe104a266284d76267618f47dd75573de81782ae2116fa70ef441fd4b6d3cef9f6731b6444c579a7f413aaeb9d2cabbd3bb8a965c83c660e7740518ae9c381920289d156d9676f21dcd6c98ef4321696af0e3ac880b676b665d803a3493843c17c6d98182923109714597f0f1f0b08f2888e39203ef8a438351ccc4a342355e69d759b8595663da76a61f6c52661a93096c303dd2b7e9e0844948c12eac89a9be40c56996bf326d9dfb42dbcc28b4702772b2758939e5d264295f05e9ec2656b6d89b68b294c8e36eed9729abdb20b364cf708248aa2164e10c264b06c99aa824ddc0d6f7aa4b169542144a155b32002c82049fb6f6e1e6770a4d54cc9e927ae8cff56f741e1b5febfa987d140525d4c8f915dc9942ce765fbc95f6c055fb40fc6fbac18bb4d3b7789344f347a1cf9f35eae5dc3c5c625805cdd0daee81d214af0986ed11c0a9a84510b285d31bec7fac085ff0be3317180a9c48bb11b9a74c1966a25687b31eca21f8bba54e0da6d492c0e9f11bab8a5bb0cfeb9baba24a5b3d7b4ed689c9455300c57c2af9f9679569c53e65771096cd5dade88c3b396d70d289d941db5edc9a24c7ff39aaddd9ec5f4267b77e89a6a04c61e65835e83ea2084bd602de264c02a5164ddf8610466178541b2ceb992e510da1eebe2a1dcffa80a248efe5415752bb26d68f0af512e9d3e57fcbaceb23268c52255fb6b8e353df7320984c1066ec39c7c18d32848d2b6261d42ec3bd930a1a17a85a3a79199a2e1348bc2c3d7eac798d7bffa7d74a42709b2f91acd789710e61b1df11cf9c57223de60d7d77dd59fc0022e10f6728dae750351f13d4691634698c8b367966a850b0bac6190bb94d8e2380c692672d75dd81919467f75a2dce63e607027afd464bc4772e3d7345f99cfb7ea56e766e1e16c801ab5a503a3cc705ee1ac7320287bdf6da9c0bfe02a48aba36c7cf6c92d861c636515d42ca42f7a50223dd3f19f1a328d3fa59af8317e5e452e848f667673aebddd9e26869cf6461eaf121bb7ea038d21c74835f6394f72d0e311434a0d956c0e02b97df21dbabf3f7f52b84aed12a995f167aef58c111cf2de1886b39003691f8b9c221f2cb1598ddab7958db43f40dca86b39c9101f7a13154255b2c8e69aea581565d925fb8afd872c9327f6f203172274bf7ee1eb322abd73a53dfb8d926cd9cf46f6e44643954ef8fa1e2119aecbfa92d2f344500cce6a0905c5e2fa1668d4408d77208fa242a511c8db829e588532d594bbed2c113572da8c20a23312190a38aafcb4bb76dd65d27408b0d17ada5136bf3f88f5d798bb126b3a1be901de798df13061d40d365587176b8bc3f142cbe047c0cec3ba35a40317413acb29d29efa5e3fb43d7d1700e9a8341a4d279b267a327bb6a94d09ce4ea8940d875774783851a1cc132dfb9497a81b583632012bb7a747956a39b2da2c30570fe138250dda0118fa523082763c9c71d31569c94d6d01e3497e1637853cbcfba53981f2ab61fd1edaea3d65f6b71f555bd20a28e8ad2adb04d868f2ed377ec1c53549ffd2f026f1e7a70d87252801db7af3c09cf09bd5b4b981c25c687741ccd44736f0b8366c0394e6cb9172119b9e68c42ea12b9818773eb966613c22856d028c50529fff4e2ccbd3482e278ed35192c61172f1e1b57f9c75bea5ee5c4502b725d5cbcc8f7d51a2cf8da04b23a9d5bf26f4ae4009488508440c19a07bfaeec863dd0b894b55e99cb5021aa5cbb3eca5f6129bb6762ebdd984f5676ee74f8a1686ce4251cb7ed54727072eb6416fd110edf4003437197cea77b79a788b61d5a275999717ffe44b7610bb5cf0ad1dcf72426e78cba7d2329658985e0605a312e481d2476873f49ed9909dc549a1f3a7ff325b483be158376e4dbb080089000000010045a6816bd46fca3a6680e5b303039aeca0acdb9288e4124b3913ba0265130e9d13fe05f50b1424df5cf1ff7c220ff9e1d4c7c3638502ae86b790713d73c8b6ee8dcf4a7c5f06a372c75f7e2f17fdfe05a2cccbcfdf2532ea4237d79ac5e00a0c9ee87a661b65f1cf5e9f82c2a1af9df8aa51e88cd0d68fc9efcd806914ab86b12a68567d8c21e910e11d064316aeea75f532ec551fb8101cd46072e37950615a3ae3ef005c90612078110b06cb1fc0c341217c8abb12cc6d8e25677b50f7ae0d228ff6ec9994b765785ec0b20f31455f6008ee589a9b140d7229e7877014709847af3abd600c1d180088002f6465762f736e642f70636d4323442363000000a6d3818c82244b9b484fb81f555a621cc90cc489ac35b3cf77f21375fd914c0c94d7146898df05338510293d1eaea8f2ae5fb93af704817c4a93d9d0f9aa2f8d07cf415a0fda676074f098f41c1e368f2b9633e26b76a4250b910fb1a8067563ee5165d72585242e7f59b990e50072175a64a3a846c2a0c1238617ec911b873c7384dfb44fae5256a906caa216a86d410f0945f05050fe78ba610745bf227b0cc3d4b0d55909dd74880f2f4ad1165edc1204c9837f1b302b02fe8adf0f5837f650b680e5a625315c2eaff662aed559c00ce6eaf73cb1afc00c77d6ab70c05d104e881c7ebf50779f40b0ce485d67114ceb2b13f4934ead37ca83a0e7c10c667bde7f963950442e4e6fc5407036d24f5550ad84c447ed2257db0a9b040074000ca8d522456e2b679f314470d3bb85607fe79b2f389d928c16cc4f03307a3916d3add9d0941e419435cc77f9dc8ad643b099917d272281eb2a9a2007e7179c0efcd32b013a2ec3004aa61226d00a36302bd4ecfa37401a52a52a25507189d4c064d232b29a0647c525a24e15d7cca97553ff852f4bd345b888d9699a931e2c355fad4f3be88e5f61cf15637edfd09863a44e1b6d39d624a5ef6244943831e7010c1701bbcd31b8045d72516b5dcf76c7124079b0d9f73fc01b46b7df990ae13987815eb6115e0b5286411d1868144b5fca0b2a000000000000"], 0x1318}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 2018/04/02 19:58:26 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x11a, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x80) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x54) socket$alg(0x26, 0x5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x40007d, 0x0) 2018/04/02 19:58:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x8, 0x2) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000140)=0x8) r2 = dup3(r0, r0, 0x80000) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}) perf_event_open$cgroup(&(0x7f00000001c0)={0x7, 0x70, 0xaae, 0x4, 0xa58, 0x401, 0x0, 0x2, 0x40, 0x4, 0x100, 0x92, 0x0, 0x8001, 0x1, 0x80, 0x2, 0xfffffffffffff001, 0x5, 0x7, 0xff, 0xffffffffffff8000, 0x5, 0x6, 0x7, 0x101, 0x2219, 0x7f, 0x1000, 0xc9f, 0x3ff, 0x7, 0x3, 0x4b2, 0x1, 0x84, 0x6, 0x2, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000180), 0xa}, 0x8, 0xffff, 0x0, 0x3, 0x6, 0x200, 0xb1}, r1, 0x0, r1, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000000c0)=0xfffffffffffffc01) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000027006381000000000000000014000000ebff070008000200e0000002"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:28 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) 2018/04/02 19:58:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f04900000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:28 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x10001, 0x3, [0xfffffffffffeffff, 0x80, 0x62]}, &(0x7f0000000280)=0xe) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:28 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x2000) recvmsg$netrom(r0, &(0x7f0000000640)={&(0x7f0000000040)=@ax25={0x3, {"b865505f3e19a4"}, 0x6}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="7d6df408a940d26f529d4e4b63807f136ba2b22a7bd89017e05e696499a5cc6353199209f6208314500733912ff9317a1cb6a68ae30be3425f810f44e79fe02cf859ea36e05732e3506cd2b7e2346c0903c27f59133161126297d441ab5740a0b49439cc6c8e1ec2f9b262ed61b9a34901bf86965a48d1c6ee4ae492a2752c4ce482dc07d3fdb35350bb8d2223b2393c5c534027b329444c155cf338986dbfebfb61ca2f295d", 0xa6}], 0x1, &(0x7f0000000180)=[{0x100, 0x1, 0x2, "40d9a4a99ec2c34a8df8445c94d104cb5c9b724432dd8ff341716cafaac2572d6c22f6bca13076c078ec1059d3336cceed8d06169da4b7d687baeea02998566d51530057526bbb709efcc925c2cfe8588a60192b05250aa3fd3ecb289518352bb551ad4932db39aa5004acfc738b0212bf56ab4ae9fbf535fc1b25ba4a5afe0e20a0c8e2be116658c85947f51d9b85e6b17d162af264bdce496f3986df35a4e754fc851aa320fd71d0eeaf891417e6a42ac3c9cde34eb83d8932da313819e226536426527a81c6b248ef7094ecc9ad75495343c7bc5c23588311a4c31ef7dec11df0ea9c2cba3b797fd3371c9f5fa7"}, {0x30, 0x118, 0x96, "b082e7e6a4261b20a7a654a34ab119c3c147565cbaa7fa0f56d573c6e7"}, {0x30, 0x0, 0x9, "fd3d7ee546d8f774bbb6e8f6427ed27e9d19ced495d2af878377e47f1e"}, {0x110, 0x88, 0x98, "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"}, {0x60, 0x0, 0x1a2110ad, "90afec05f5dcdf1e9a3654f2c0a4a60e5bddc99bc6c70e87c3f072d94ceff22a8139cbf2b3017c641031dd34e0a780ac3f69eeb6934d3551baa104f281dbce68b8fd2b514828c831c269dcc658e531"}, {0x58, 0x104, 0x5, "f8a018b942d29b74ae07dbdee8c7ef67b2676389a6d8a226bdc39f6c18c5bb0b3b42df039f289d53302a33cda816dafcaa8e9c813e18593de89a282ccf3c054b4e97"}, {0x60, 0x119, 0x100000000000000, "d97948314534326d7563cc80db96fabfcb826f4e8d2d876b8bc1e4cb727344650121a5afee9d863a07b88bc9e5ec849b10449815a7cc715826fbca9238433f3cb8e0a513e790e4a03d35d312a886"}, {0x10, 0x6, 0x5}, {0x108, 0x100, 0x0, "37e330d8ae6796c7f3db6006c8b723367a54de4f0216791ad54393af933961136de10d6f16cad4390378ae86a89cf7bee2e2af7a4daf7c167feff1712d78cd5412e796c53b732357a4a4fd6e1e59020f967350dcc4c97f4b3898f98c3761e7aadc1ef3754f115cedaa4bb643d3962cc377b725632c6d989a07e0cdfa9f1cf24efbc0fe10faaa18e67c67e16a523bf6bb854f018f6802a0aeb140af14339afe29db1b03edaeaea86835bd06dfc5467881602b5a0da2d9f85a88d66640f8e82ac8f405f9a6e26b29c986f0fc73603fc3629d8ea1684af7cd10978a59afc00aee61772afc317b03c00426b76ffa013d83e002d0ddbf3a6226"}, {0x10, 0x6, 0x9c}], 0x4b0, 0x40000}, 0x40000121) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000caf000)='\x00', 0x1) ioctl$TCXONC(r1, 0x540a, 0x1) 2018/04/02 19:58:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000010000000c0007000838564fdd421bd15d4fbd83e2f261eaca0c74588c5fda0a3305a6f0a8831d5b8d054be0"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f04900000000"], 0x1}, 0x1}, 0x0) [ 710.776430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/02 19:58:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x3e, 0x1ff307543bf68163, 0x70bd2a, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2018/04/02 19:58:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f04900000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:28 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x80, 0x0) getsockopt(r0, 0x2, 0x7fffffff, &(0x7f0000000300)=""/4096, &(0x7f0000000200)=0x1000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x103100, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)={0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000080)=0x1) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000027000000000100000009000400480087da7b427941ae200200000000"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x10001, 0x3, [0xfffffffffffeffff, 0x80, 0x62]}, &(0x7f0000000280)=0xe) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x80000000, "0be47daea147", 0x40}}) rt_sigqueueinfo(r1, 0x18, &(0x7f00000000c0)={0x2a, 0x364f, 0x0, 0xffff}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) uselib(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/04/02 19:58:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x5) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x2, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000340)) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000080)='%\x00', 0x2) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000100)={[], 0xb5, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, [], 0x1}) 2018/04/02 19:58:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x3, 0x42, 0xfffffffffffffe01) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') getgid() 2018/04/02 19:58:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x800, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/39) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r1, 0x540a, 0x1) 2018/04/02 19:58:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:29 executing program 7 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:29 executing program 5 (fault-call:3 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:58:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002c89604261f30794c4c3d7a042877c42270063810000000000000000140000000c00070008000200e0000002"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a2"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0x3af, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x27, 0x1ff307543bf68163, 0x3, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a2"], 0x1}, 0x1}, 0x0) [ 712.599593] FAULT_INJECTION: forcing a failure. [ 712.599593] name failslab, interval 1, probability 0, space 0, times 0 [ 712.611467] CPU: 0 PID: 13107 Comm: syz-executor7 Not tainted 4.16.0+ #376 [ 712.618479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.627831] Call Trace: [ 712.630419] dump_stack+0x1a7/0x27d [ 712.634054] ? arch_local_irq_restore+0x53/0x53 [ 712.638738] should_fail+0x914/0xae0 [ 712.642457] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 712.647567] ? perf_tp_event+0xae0/0xae0 [ 712.651634] ? find_held_lock+0x35/0x1d0 [ 712.655695] ? __lock_is_held+0xb6/0x140 [ 712.659771] ? check_same_owner+0x320/0x320 [ 712.664087] ? memset+0x31/0x40 [ 712.667362] ? rcu_note_context_switch+0x710/0x710 [ 712.672295] should_failslab+0xec/0x120 [ 712.676265] kmem_cache_alloc_node_trace+0x5a/0x760 [ 712.681367] ? lock_acquire+0x1d5/0x580 [ 712.685332] ? lock_acquire+0x1d5/0x580 [ 712.689308] __kmalloc_node+0x33/0x70 [ 712.693118] kvmalloc_node+0x99/0xd0 [ 712.696830] newseg+0x1f7/0xcb0 [ 712.700112] ? shm_mmap+0x220/0x220 [ 712.703735] ? down_write+0x87/0x120 [ 712.707442] ? ipcget+0x8be/0xfd0 [ 712.710893] ? down_read+0x1b0/0x1b0 [ 712.714606] ? __f_unlock_pos+0x19/0x20 [ 712.718583] ipcget+0x8f0/0xfd0 [ 712.721865] ? proc_fail_nth_write+0x9b/0x1e0 [ 712.726363] ? map_files_get_link+0x3b0/0x3b0 [ 712.730859] ? handle_mm_fault+0x35b/0xb20 [ 712.735101] ? find_held_lock+0x35/0x1d0 [ 712.739164] ? ipc_obtain_object_check+0xf0/0xf0 [ 712.743918] ? __mutex_unlock_slowpath+0x181/0x7e0 [ 712.748844] ? wait_for_completion+0x770/0x770 [ 712.753467] ? __sb_end_write+0xa0/0xd0 [ 712.757446] ? kasan_check_write+0x14/0x20 [ 712.761693] SyS_shmget+0x158/0x230 [ 712.765325] ? is_file_shm_hugepages+0x40/0x40 [ 712.769903] ? do_syscall_64+0xb7/0x940 [ 712.773881] ? is_file_shm_hugepages+0x40/0x40 [ 712.778460] do_syscall_64+0x281/0x940 [ 712.782339] ? vmalloc_sync_all+0x30/0x30 [ 712.786480] ? _raw_spin_unlock_irq+0x27/0x70 [ 712.790971] ? finish_task_switch+0x1c1/0x810 [ 712.795465] ? syscall_return_slowpath+0x550/0x550 [ 712.800390] ? syscall_return_slowpath+0x2ac/0x550 [ 712.805321] ? prepare_exit_to_usermode+0x350/0x350 [ 712.810332] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 712.815703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 712.820561] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 712.825750] RIP: 0033:0x4552d9 [ 712.828936] RSP: 002b:00007ff349630c68 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 712.836644] RAX: ffffffffffffffda RBX: 00007ff3496316d4 RCX: 00000000004552d9 [ 712.843903] RDX: 0000000054000a10 RSI: 0000000000004000 RDI: 0000000000000000 2018/04/02 19:58:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b1feffff270000140012000c00070008000200e0000002000000000000000000"], 0x20}, 0x1}, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0xfffffffffffffffb, 0x200000) syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x1000, 0x400000) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x20000d00) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000300)="dc92ec3e91350e6ce9a5d701f557801d1a341696da20005e06c02ff74b028e5327e94ae6306a7fee910bb67de2c2ca7f69874cdb5061d08be6877275ec2b29814fe381b52ef904efe5093915652f9e5bf959920d1b8299f0de4c47e5db1a2f6c678c0c5b8344c043317f95f7984ee9c6aab6a14a02f85afc486dd7a973c486bc629139e55f1ec834bfa0973d3647e29f51c8985e989cbaea5b5a0a652dd7e85845598f41aca2f2da5f4479bb00b12c91032c2b22411ee037ba0e405f3bc3a0e3", 0x71) 2018/04/02 19:58:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x2013, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, r3}, @register_looper={0x630b}, @reply_sg={0x40486312, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@flat={0x776a2a85, 0xa, r4, 0x1}], &(0x7f00000001c0)=[0x38, 0x20, 0x40]}, 0x40}}, @exit_looper={0x630d}], 0x81, 0x0, &(0x7f0000000280)="4981f9b3a2703b315edd157344da1c43586d588934277b8271189002708ffd14305cfcae97f29f33997a6a637b27f4fa29e84dfb955f9dfa810821c22028b15761c047db97709a6661cfe6d8e22e7b1ace49322b04e7999f145db33a94edb266d9ae54c145e5adfd0420370986e03c1e04c7a9c0889decb25d6f62ffed84c1de4f"}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') [ 712.851168] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 712.858431] R10: 0000000020ffb000 R11: 0000000000000246 R12: 0000000000000014 [ 712.865695] R13: 0000000000000601 R14: 00000000006fc0b8 R15: 0000000000000000 2018/04/02 19:58:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r1 = socket(0x19, 0x805, 0x100000001) getsockname$packet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'teql0\x00', 0x6}) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) [ 713.308964] FAULT_INJECTION: forcing a failure. [ 713.308964] name failslab, interval 1, probability 0, space 0, times 0 [ 713.320479] CPU: 1 PID: 13139 Comm: syz-executor5 Not tainted 4.16.0+ #376 [ 713.327477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.336896] Call Trace: [ 713.339463] dump_stack+0x1a7/0x27d [ 713.343066] ? arch_local_irq_restore+0x53/0x53 [ 713.347706] ? __unwind_start+0x169/0x330 [ 713.351834] ? __kernel_text_address+0xd/0x40 [ 713.356310] should_fail+0x914/0xae0 [ 713.359996] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 713.365078] ? save_stack+0xa3/0xd0 [ 713.368675] ? save_stack+0x43/0xd0 [ 713.372274] ? __kasan_slab_free+0x11a/0x170 [ 713.376655] ? kasan_slab_free+0xe/0x10 [ 713.380598] ? kfree+0xd9/0x260 [ 713.383851] ? __vunmap+0x2b9/0x380 [ 713.387447] ? vfree+0x50/0xe0 [ 713.390665] ? snd_seq_pool_done+0x239/0x380 [ 713.395057] ? find_held_lock+0x35/0x1d0 [ 713.399092] ? __lock_is_held+0xb6/0x140 [ 713.403128] ? check_same_owner+0x320/0x320 [ 713.407430] ? print_irqtrace_events+0x270/0x270 [ 713.412159] ? rcu_note_context_switch+0x710/0x710 [ 713.417069] should_failslab+0xec/0x120 [ 713.421025] kmem_cache_alloc_node_trace+0x5a/0x760 [ 713.426023] ? lock_release+0xa40/0xa40 [ 713.429987] __get_vm_area_node+0xae/0x340 [ 713.434197] __vmalloc_node_range+0xa3/0x650 [ 713.438578] ? snd_seq_pool_init+0x5d/0x2f0 [ 713.442884] ? snd_seq_pool_mark_closing+0xa0/0xa0 [ 713.447788] vmalloc+0x45/0x50 [ 713.450953] ? snd_seq_pool_init+0x5d/0x2f0 [ 713.455245] snd_seq_pool_init+0x5d/0x2f0 [ 713.459366] snd_seq_ioctl_set_client_pool+0x37e/0x7c0 [ 713.464615] ? snd_seq_ioctl_get_client_pool+0x800/0x800 [ 713.470055] snd_seq_ioctl+0x215/0x3d0 [ 713.473916] ? snd_seq_open+0x580/0x580 [ 713.477871] ? wait_for_completion+0x770/0x770 [ 713.482425] ? snd_seq_open+0x580/0x580 [ 713.486374] do_vfs_ioctl+0x1b1/0x1520 [ 713.490236] ? ioctl_preallocate+0x2b0/0x2b0 [ 713.494616] ? fget_raw+0x20/0x20 [ 713.498060] ? __sb_end_write+0xa0/0xd0 [ 713.502026] ? kasan_check_write+0x14/0x20 [ 713.506241] ? fput+0xe0/0x150 [ 713.509423] ? SyS_write+0x184/0x220 [ 713.513111] ? security_file_ioctl+0x89/0xb0 [ 713.517493] SyS_ioctl+0x8f/0xc0 [ 713.520831] ? do_vfs_ioctl+0x1520/0x1520 [ 713.524955] do_syscall_64+0x281/0x940 [ 713.528821] ? vmalloc_sync_all+0x30/0x30 [ 713.532943] ? _raw_spin_unlock_irq+0x27/0x70 [ 713.537411] ? finish_task_switch+0x1c1/0x810 [ 713.541888] ? syscall_return_slowpath+0x550/0x550 [ 713.546788] ? syscall_return_slowpath+0x2ac/0x550 [ 713.552218] ? prepare_exit_to_usermode+0x350/0x350 [ 713.557211] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 713.562550] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 713.567366] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 713.572528] RIP: 0033:0x4552d9 [ 713.575690] RSP: 002b:00007ff93f72fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 713.583468] RAX: ffffffffffffffda RBX: 00007ff93f7306d4 RCX: 00000000004552d9 [ 713.590708] RDX: 000000002023efa8 RSI: 000000004058534c RDI: 0000000000000013 [ 713.597955] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 713.605195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 713.612435] R13: 00000000000002da R14: 00000000006f7510 R15: 0000000000000000 [ 713.620147] syz-executor5: vmalloc: allocation failure: 6048 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 713.630412] syz-executor5 cpuset=syz5 mems_allowed=0 [ 713.635951] CPU: 1 PID: 13139 Comm: syz-executor5 Not tainted 4.16.0+ #376 [ 713.642946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.652270] Call Trace: [ 713.654836] dump_stack+0x1a7/0x27d [ 713.658440] ? arch_local_irq_restore+0x53/0x53 [ 713.663079] ? idr_get_free+0xfd0/0xfd0 [ 713.667032] ? __lock_is_held+0xb6/0x140 [ 713.671072] warn_alloc+0x19a/0x2b0 [ 713.674674] ? zone_watermark_ok_safe+0x3e0/0x3e0 [ 713.679488] ? kmem_cache_alloc_node_trace+0x36f/0x760 [ 713.684742] ? __get_vm_area_node+0x234/0x340 [ 713.689212] __vmalloc_node_range+0x4f0/0x650 [ 713.693688] ? snd_seq_pool_mark_closing+0xa0/0xa0 [ 713.698597] vmalloc+0x45/0x50 [ 713.701760] ? snd_seq_pool_init+0x5d/0x2f0 [ 713.706052] snd_seq_pool_init+0x5d/0x2f0 [ 713.710171] snd_seq_ioctl_set_client_pool+0x37e/0x7c0 [ 713.715421] ? snd_seq_ioctl_get_client_pool+0x800/0x800 [ 713.720855] snd_seq_ioctl+0x215/0x3d0 [ 713.724715] ? snd_seq_open+0x580/0x580 [ 713.728671] ? wait_for_completion+0x770/0x770 [ 713.733224] ? snd_seq_open+0x580/0x580 [ 713.737171] do_vfs_ioctl+0x1b1/0x1520 [ 713.741035] ? ioctl_preallocate+0x2b0/0x2b0 [ 713.745432] ? fget_raw+0x20/0x20 [ 713.748858] ? __sb_end_write+0xa0/0xd0 [ 713.752806] ? kasan_check_write+0x14/0x20 [ 713.757016] ? fput+0xe0/0x150 [ 713.760185] ? SyS_write+0x184/0x220 [ 713.763874] ? security_file_ioctl+0x89/0xb0 [ 713.768254] SyS_ioctl+0x8f/0xc0 [ 713.771595] ? do_vfs_ioctl+0x1520/0x1520 [ 713.775717] do_syscall_64+0x281/0x940 [ 713.779576] ? vmalloc_sync_all+0x30/0x30 [ 713.783696] ? _raw_spin_unlock_irq+0x27/0x70 [ 713.788164] ? finish_task_switch+0x1c1/0x810 [ 713.792631] ? syscall_return_slowpath+0x550/0x550 [ 713.797533] ? syscall_return_slowpath+0x2ac/0x550 [ 713.802434] ? prepare_exit_to_usermode+0x350/0x350 [ 713.807421] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 713.812759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 713.817575] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 713.822742] RIP: 0033:0x4552d9 [ 713.825902] RSP: 002b:00007ff93f72fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 713.833581] RAX: ffffffffffffffda RBX: 00007ff93f7306d4 RCX: 00000000004552d9 [ 713.840835] RDX: 000000002023efa8 RSI: 000000004058534c RDI: 0000000000000013 [ 713.848075] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 713.855315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 713.862559] R13: 00000000000002da R14: 00000000006f7510 R15: 0000000000000000 [ 713.870235] Mem-Info: [ 713.872702] active_anon:63487 inactive_anon:75 isolated_anon:0 [ 713.872702] active_file:4201 inactive_file:8876 isolated_file:0 [ 713.872702] unevictable:0 dirty:99 writeback:0 unstable:0 [ 713.872702] slab_reclaimable:9625 slab_unreclaimable:99069 [ 713.872702] mapped:73928 shmem:85 pagetables:987 bounce:0 [ 713.872702] free:1350014 free_pcp:498 free_cma:0 [ 713.905910] Node 0 active_anon:253948kB inactive_anon:300kB active_file:16804kB inactive_file:35504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295712kB dirty:396kB writeback:0kB shmem:340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 196608kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 713.934056] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 713.960211] lowmem_reserve[]: 0 2839 6346 6346 [ 713.964838] Node 0 DMA32 free:2909812kB min:30164kB low:37704kB high:45244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2910608kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:796kB local_pcp:136kB free_cma:0kB [ 713.992539] lowmem_reserve[]: 0 0 3506 3506 [ 713.996893] Node 0 Normal free:2474336kB min:37248kB low:46560kB high:55872kB active_anon:253948kB inactive_anon:300kB active_file:16804kB inactive_file:35504kB unevictable:0kB writepending:396kB present:4718592kB managed:3590636kB mlocked:0kB kernel_stack:5376kB pagetables:3948kB bounce:0kB free_pcp:1188kB local_pcp:488kB free_cma:0kB [ 714.026795] lowmem_reserve[]: 0 0 0 0 [ 714.030648] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 714.044284] Node 0 DMA32: 3*4kB (UM) 5*8kB (UM) 2*16kB (M) 5*32kB (UM) 0*64kB 1*128kB (M) 5*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 707*4096kB (M) = 2909812kB [ 714.059720] Node 0 Normal: 5586*4kB (UME) 2036*8kB (UME) 1768*16kB (UME) 1481*32kB (UME) 908*64kB (UME) 254*128kB (UM) 51*256kB (UM) 53*512kB (UME) 13*1024kB (UM) 14*2048kB (ME) 534*4096kB (UM) = 2474376kB [ 714.078238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 714.086836] 13167 total pagecache pages [ 714.090837] 0 pages in swap cache [ 714.094301] Swap cache stats: add 0, delete 0, find 0/0 [ 714.099677] Free swap = 0kB [ 714.102704] Total swap = 0kB [ 714.105725] 1965969 pages RAM [ 714.108835] 0 pages HighMem/MovableOnly [ 714.112817] 336681 pages reserved 2018/04/02 19:58:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:58:32 executing program 6: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x40) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000001027006381000c00070008000200e0000002"], 0x20}, 0x1}, 0x0) 2018/04/02 19:58:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a2"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:32 executing program 7 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) ioctl(r0, 0xc0184900, &(0x7f0000000080)="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") 2018/04/02 19:58:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000500)=@full, &(0x7f0000000580)=0x48) accept(r1, &(0x7f0000000240)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, &(0x7f00000005c0)=0x80) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') accept$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000042}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="000225bd7000fcdbdf25060000005000010008000500000000000800020084000000080005000400000008c25a004e210000080009002a000000140003000000000000000000000000000000000108000b007369700008569d5e471c3eea8910274d802582dc08000900650000001c000200080020001f000000"], 0x80}, 0x1, 0x0, 0x0, 0x11}, 0x4) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:32 executing program 4: 2018/04/02 19:58:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x80000000, 0x80) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x99}, 0x8) 2018/04/02 19:58:32 executing program 4: [ 714.683614] FAULT_INJECTION: forcing a failure. [ 714.683614] name failslab, interval 1, probability 0, space 0, times 0 [ 714.694963] CPU: 0 PID: 13156 Comm: syz-executor7 Not tainted 4.16.0+ #376 [ 714.701976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.711327] Call Trace: [ 714.713913] dump_stack+0x1a7/0x27d [ 714.717547] ? arch_local_irq_restore+0x53/0x53 [ 714.722237] should_fail+0x914/0xae0 [ 714.725953] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 714.731068] ? find_held_lock+0x35/0x1d0 [ 714.735135] ? find_held_lock+0x35/0x1d0 [ 714.739201] ? __lock_is_held+0xb6/0x140 [ 714.743281] ? check_same_owner+0x320/0x320 [ 714.747600] ? rcu_note_context_switch+0x710/0x710 [ 714.752527] ? is_bpf_text_address+0xa4/0x120 [ 714.757028] should_failslab+0xec/0x120 [ 714.761005] kmem_cache_alloc+0x47/0x760 [ 714.765079] __d_alloc+0xc1/0xbd0 [ 714.768535] ? shrink_dcache_for_umount+0x290/0x290 [ 714.773546] ? number+0x7e0/0xa50 [ 714.776991] ? __kmalloc_node+0x47/0x70 [ 714.780961] ? kvmalloc_node+0x99/0xd0 [ 714.784847] ? newseg+0x1f7/0xcb0 [ 714.788307] ? put_dec+0xd0/0xd0 [ 714.791672] ? format_decode+0x10a/0x830 [ 714.795732] ? map_id_range_down+0x182/0x400 [ 714.800133] ? cap_capable+0x1b5/0x230 [ 714.804021] ? security_capable+0x8e/0xc0 [ 714.808172] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 714.813103] d_alloc_pseudo+0x1d/0x30 [ 714.816983] hugetlb_file_setup+0x27b/0x9f0 [ 714.821314] ? hugetlbfs_fallocate+0x1260/0x1260 [ 714.826067] ? scnprintf+0x110/0x110 [ 714.829793] ? __kmalloc_node+0x47/0x70 [ 714.833763] ? newseg+0x2f7/0xcb0 [ 714.837216] newseg+0x427/0xcb0 [ 714.840503] ? shm_mmap+0x220/0x220 [ 714.844128] ? down_write+0x87/0x120 [ 714.847835] ? ipcget+0x8be/0xfd0 [ 714.851287] ? down_read+0x1b0/0x1b0 [ 714.855001] ? __f_unlock_pos+0x19/0x20 [ 714.858976] ipcget+0x8f0/0xfd0 [ 714.862246] ? proc_fail_nth_write+0x9b/0x1e0 [ 714.866738] ? map_files_get_link+0x3b0/0x3b0 [ 714.871228] ? handle_mm_fault+0x35b/0xb20 [ 714.875463] ? find_held_lock+0x35/0x1d0 [ 714.879525] ? ipc_obtain_object_check+0xf0/0xf0 [ 714.884281] ? __mutex_unlock_slowpath+0x181/0x7e0 [ 714.889225] ? wait_for_completion+0x770/0x770 [ 714.893846] ? __sb_end_write+0xa0/0xd0 [ 714.897830] ? kasan_check_write+0x14/0x20 [ 714.902076] SyS_shmget+0x158/0x230 [ 714.905703] ? is_file_shm_hugepages+0x40/0x40 [ 714.910279] ? do_syscall_64+0xb7/0x940 [ 714.914251] ? is_file_shm_hugepages+0x40/0x40 [ 714.918827] do_syscall_64+0x281/0x940 [ 714.922708] ? vmalloc_sync_all+0x30/0x30 [ 714.926850] ? _raw_spin_unlock_irq+0x27/0x70 [ 714.931342] ? finish_task_switch+0x1c1/0x810 [ 714.935833] ? syscall_return_slowpath+0x550/0x550 [ 714.940757] ? syscall_return_slowpath+0x2ac/0x550 [ 714.945687] ? prepare_exit_to_usermode+0x350/0x350 [ 714.950701] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 714.956068] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 714.960916] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 714.966184] RIP: 0033:0x4552d9 [ 714.969365] RSP: 002b:00007ff349630c68 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 714.977078] RAX: ffffffffffffffda RBX: 00007ff3496316d4 RCX: 00000000004552d9 2018/04/02 19:58:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x200, 0x400000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/205) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:32 executing program 1: remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x10002) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') [ 714.984343] RDX: 0000000054000a10 RSI: 0000000000004000 RDI: 0000000000000000 [ 714.991607] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 714.998870] R10: 0000000020ffb000 R11: 0000000000000246 R12: 0000000000000014 [ 715.006133] R13: 0000000000000601 R14: 00000000006fc0b8 R15: 0000000000000001 2018/04/02 19:58:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x4, 0x14, 0x0, 'queue0\x00', 0x101}) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)={0x2b, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@generic="a6d7194400bf305eed5c77a80cd658805a43b2ee9801004172982be20e9d34c727353993143d6a9d1faf8323206089a931ce385069672174f96d751190b600df8d0377251d1a0bd80df796031c1b1ab146d7c7637f977a382d0b93c504f726fc5750ca3dcd7fb0909692b0b988d5dc9b67e2ad90e0ff7841a00f3ad893ac9a6f23167fae5e83817b26c414a47bc4e8d80560f73ecdceda99f8a6bac246d0eadbd5b5fda31901ca9d53d6a093806cc6f4088abf3b8d94073b2fdc00a4fea6e74c168896167d1e4c8643b70e7f10ab7ea8ae899bcc06"]}, 0xec}, 0x1}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000040)=0x68) 2018/04/02 19:58:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000080)=""/88, 0x58) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), 0x4) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:32 executing program 4: [ 715.095151] netlink: 23 bytes leftover after parsing attributes in process `syz-executor6'. [ 715.130163] netlink: 23 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/02 19:58:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x99d3) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='affs\x00', 0x8020, &(0x7f0000000180)="d1d4ef82f1c5632e04d9b7e999140ddcbf64a457f9b5f5e13ea2a7d89a7938950c02993609942dffabc9d60d704a86653ac3e33e4bc7abd0025dd66267e0ec1c51ca19d3ddb0f00ee3be7320fe3a9625fa22e1de057d4a9156570d1e90360e166e1874961d284ce1ee41464bde6952b69734a1889b54867070ca42ac73f601c238") clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={{r1, r2/1000+30000}, {0x0, 0x7530}}) 2018/04/02 19:58:33 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x4000) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7, 0x4) write$vnet(r1, &(0x7f00000001c0)={0x1, {&(0x7f00000000c0)=""/168, 0xa8, &(0x7f0000000180)=""/22, 0x2, 0x1}}, 0x68) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'lo\x00', {0x2, 0x7451, @multicast1=0xe0000001}}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 2018/04/02 19:58:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x9135, 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) getsockname$llc(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) 2018/04/02 19:58:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffb, 0x2900) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x200) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x3, @tick=0x4ad, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x7e, 0x8000, 0x2}) 2018/04/02 19:58:33 executing program 7 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x2, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 715.893392] FAULT_INJECTION: forcing a failure. [ 715.893392] name failslab, interval 1, probability 0, space 0, times 0 [ 715.904792] CPU: 0 PID: 13210 Comm: syz-executor7 Not tainted 4.16.0+ #376 [ 715.911801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.921145] Call Trace: [ 715.923734] dump_stack+0x1a7/0x27d [ 715.927363] ? arch_local_irq_restore+0x53/0x53 [ 715.932043] should_fail+0x914/0xae0 [ 715.935761] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 715.940862] ? d_alloc_pseudo+0x1d/0x30 [ 715.944832] ? newseg+0x427/0xcb0 [ 715.948280] ? ipcget+0x8f0/0xfd0 [ 715.951727] ? SyS_shmget+0x158/0x230 [ 715.955524] ? do_syscall_64+0x281/0x940 [ 715.959579] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 715.964963] ? percpu_ref_put_many+0x11a/0x230 [ 715.969542] ? lock_downgrade+0x980/0x980 [ 715.973692] ? find_held_lock+0x35/0x1d0 [ 715.977756] ? __lock_is_held+0xb6/0x140 [ 715.981835] ? check_same_owner+0x320/0x320 [ 715.986159] ? rcu_note_context_switch+0x710/0x710 [ 715.991084] ? mark_held_locks+0xaf/0x100 [ 715.995240] should_failslab+0xec/0x120 [ 715.999212] kmem_cache_alloc_trace+0x4b/0x740 [ 716.003789] ? __lockdep_init_map+0xe4/0x650 [ 716.008198] ? d_set_d_op+0x30b/0x400 [ 716.012004] resv_map_alloc+0xc3/0x510 [ 716.016034] ? vma_mmu_pagesize+0x60/0x60 [ 716.020183] ? kvmalloc_node+0x99/0xd0 [ 716.024073] ? newseg+0x1f7/0xcb0 [ 716.027543] ? put_dec+0xd0/0xd0 [ 716.030932] ? format_decode+0x10a/0x830 [ 716.034999] ? map_id_range_down+0x182/0x400 [ 716.039440] hugetlbfs_get_inode+0x28/0x430 [ 716.043788] hugetlb_file_setup+0x329/0x9f0 [ 716.048129] ? hugetlbfs_fallocate+0x1260/0x1260 [ 716.052891] ? scnprintf+0x110/0x110 [ 716.056623] ? __kmalloc_node+0x47/0x70 [ 716.060606] ? newseg+0x2f7/0xcb0 [ 716.064063] newseg+0x427/0xcb0 [ 716.067350] ? shm_mmap+0x220/0x220 [ 716.070982] ? down_write+0x87/0x120 [ 716.074699] ? ipcget+0x8be/0xfd0 [ 716.078147] ? down_read+0x1b0/0x1b0 [ 716.081862] ? __f_unlock_pos+0x19/0x20 [ 716.085842] ipcget+0x8f0/0xfd0 [ 716.089117] ? proc_fail_nth_write+0x9b/0x1e0 [ 716.093608] ? map_files_get_link+0x3b0/0x3b0 [ 716.098098] ? handle_mm_fault+0x35b/0xb20 [ 716.102340] ? find_held_lock+0x35/0x1d0 [ 716.106401] ? ipc_obtain_object_check+0xf0/0xf0 [ 716.111151] ? __mutex_unlock_slowpath+0x181/0x7e0 [ 716.116080] ? wait_for_completion+0x770/0x770 [ 716.120692] ? __sb_end_write+0xa0/0xd0 [ 716.124666] ? kasan_check_write+0x14/0x20 [ 716.128901] SyS_shmget+0x158/0x230 [ 716.132529] ? is_file_shm_hugepages+0x40/0x40 [ 716.137109] ? do_syscall_64+0xb7/0x940 [ 716.141086] ? is_file_shm_hugepages+0x40/0x40 [ 716.145672] do_syscall_64+0x281/0x940 [ 716.149559] ? vmalloc_sync_all+0x30/0x30 [ 716.153715] ? _raw_spin_unlock_irq+0x27/0x70 [ 716.158210] ? finish_task_switch+0x1c1/0x810 [ 716.162707] ? syscall_return_slowpath+0x550/0x550 [ 716.167638] ? syscall_return_slowpath+0x2ac/0x550 [ 716.172571] ? prepare_exit_to_usermode+0x350/0x350 [ 716.177590] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 716.182958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 716.187802] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/02 19:58:33 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') [ 716.192982] RIP: 0033:0x4552d9 [ 716.196163] RSP: 002b:00007ff349630c68 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 716.203872] RAX: ffffffffffffffda RBX: 00007ff3496316d4 RCX: 00000000004552d9 [ 716.211138] RDX: 0000000054000a10 RSI: 0000000000004000 RDI: 0000000000000000 [ 716.218401] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 716.225671] R10: 0000000020ffb000 R11: 0000000000000246 R12: 0000000000000014 [ 716.232930] R13: 0000000000000601 R14: 00000000006fc0b8 R15: 0000000000000002 2018/04/02 19:58:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)=0xfe59, 0x4) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040)=0x7, 0x4) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'user.', '/dev/ion\x00'}, &(0x7f0000000080)=""/137, 0x89) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x40, 0x0) accept4$bt_l2cap(r2, 0x0, &(0x7f0000000380), 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x1, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x400}}, [0x40, 0x34c0, 0x8001, 0x9, 0xfffffffffffffffa, 0x0, 0xffff, 0x7, 0xffff, 0x1, 0x100000001, 0xf59, 0x20, 0x7, 0x3]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0x77, "e5a3df7cb3e6b8f169b269aa245cc692d2417e8059e4df4ad9ac3b9fc418b9ab54ee511ddce334a4a9b404078b368612a754901b9866a0bdc3323e6a43e66b48aa70da9874573290137434d84321282cca7c341c39dc0a6819d965fd807af4de4e1f6d66aea4765eda515b07f2a18414cbcc32835e8ca9"}, &(0x7f00000003c0)=0x7f) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9) 2018/04/02 19:58:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x30c, 0x200000) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) r1 = shmget(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) dup2(r0, r0) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000100)=""/241) 2018/04/02 19:58:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000000140)="40238417d672b3756e7242efff2a25802943172cc895dfa8cf1d8fa65564456ecb6337d1a13b273baa321230a3958c75a9f4fa2613056247f30705cfbd21664dfed58c44fd22d2885c3633785d13a69e34a422d30b7957834a401ec321c3d9d83556866899f35c8dc91431154a36e3e4f7c2c7088bebd0a0efac930493fb5edc56045171225954814096938e52a651f41f69000000000000000000000000") r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x80) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000080)={0x2, 0x16bff496, 0x4, 0x0, 0x8, 0x800}) 2018/04/02 19:58:34 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x80, 0x0) connect$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0x7fffffff, "ed2e2de0ab733515f98b85859e108e63986719130dd5c854655089ba1009971e53c51655250533a785a4c17036c34626ed0bbf4344ee13eea984f33abfdf3a", 0x24}, 0x60) 2018/04/02 19:58:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20008000270063810000000000000000140000000c00070008000200e0000002"], 0x20}, 0x1}, 0x0) socketpair(0x3, 0x800, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000140)={r2, 0x8}) 2018/04/02 19:58:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x5, &(0x7f0000000200)={0x0, 0x1, 0x2, 0x2, r1}) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x13) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x42000) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000000c0)={{0xd5, 0x4, 0x6, 0x400, "b0350a6b1a4e23132ce252275631b3b30b6df0bcda940f14d30278a43bc62277897a51e2c1ba3cbc4f23d68b", 0xffffffff}, 0x0, 0x0, 0x80, r3, 0x2, 0x0, "e08bd57554c7664233c2fc27455dfbafa1ff604ef91daf239c1a2459f0256d655bdd1598fbe8a7da85eab0fd74c041103bf38f62d5eca18662d8dade3a4f4135", &(0x7f0000000080)='\x00', 0x1, [], [0x4, 0x8, 0x7, 0xe1]}) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) r1 = getpgrp(0x0) ptrace$setsig(0x4203, r1, 0x9, &(0x7f0000000000)={0x2c, 0x81, 0x0, 0x4}) r2 = memfd_create(&(0x7f0000000040)="fb747275737465647070703173797374656d6c6f2873797374656d2300", 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x2c) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r3, 0x6a4a}, 0x8) 2018/04/02 19:58:34 executing program 7 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xffff, &(0x7f0000000040)=0x0) r3 = eventfd(0x3900000000000000) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x80, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000280)={0x17, 0x18, &(0x7f0000000240)="26243c5e7521076b3ec86dac81be44f51e48fc3cdd0d6c06"}) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x9, 0x4, r1, &(0x7f0000000080)="9929a0301ccd78161c990288606fe48a85d4f2fea44518d39d079f5a886204f4c39986c9c886135988a8b2314e0b121d6d5b5faf5da29826bb696188adb5dced3f218bc68882961e8565285a8750f3202edfe4ddd9f73869f705f2e39ce1013683adeec764c1549ac662bd03e3d825e26bc11b86c37475aec17d55830a99d0f0cb26cda05ad65d36516c3200bce05aab9ad8ff8ff0e2b07543d587ea8f5e805edc364d4456c339ae5a425184e5bb3706d4a6e7c95bb4eb9df012f5a96f8588a9e4040a5a0bf60c29093da61d631f5303511434d34c7b31acca6fbb2bdf10695c34b8f703e466ce4e4b8084d2e422f252a867745c37ab", 0xf6, 0x5, 0x0, 0x1, r3}]) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/02 19:58:34 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) socketpair(0xa, 0x2, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x9, 0x3, 0x1}, 0x1, 0x4, 'id0\x00', 'timer0\x00', 0x0, 0x81, 0x8, 0x8, 0x59f}) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000002c0)={r3, 0x4, 0x5, [0xfffffffffffffff9, 0x7, 0x0, 0x5, 0x93bd]}, 0x12) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000200)=0x5, 0x8) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/02 19:58:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x80000001, 0x6, 0x0, 0x0, @tick=0x2, {}, {0x1}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:58:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 717.318718] FAULT_INJECTION: forcing a failure. [ 717.318718] name failslab, interval 1, probability 0, space 0, times 0 [ 717.330070] CPU: 0 PID: 13286 Comm: syz-executor7 Not tainted 4.16.0+ #376 [ 717.337081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.346431] Call Trace: [ 717.349021] dump_stack+0x1a7/0x27d [ 717.352649] ? arch_local_irq_restore+0x53/0x53 [ 717.357337] should_fail+0x914/0xae0 [ 717.361054] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 717.366152] ? kasan_kmalloc+0xad/0xe0 [ 717.370032] ? kmem_cache_alloc_trace+0x136/0x740 [ 717.374870] ? resv_map_alloc+0xc3/0x510 [ 717.378927] ? hugetlbfs_get_inode+0x28/0x430 [ 717.383418] ? hugetlb_file_setup+0x329/0x9f0 [ 717.387916] ? do_syscall_64+0x281/0x940 [ 717.391972] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 717.397343] ? lock_downgrade+0x980/0x980 [ 717.401494] ? find_held_lock+0x35/0x1d0 [ 717.405561] ? __lock_is_held+0xb6/0x140 [ 717.409636] ? check_same_owner+0x320/0x320 [ 717.413955] ? rcu_note_context_switch+0x710/0x710 [ 717.418891] should_failslab+0xec/0x120 [ 717.422863] kmem_cache_alloc_trace+0x4b/0x740 [ 717.427441] ? __lockdep_init_map+0xe4/0x650 [ 717.431848] ? d_set_d_op+0x30b/0x400 [ 717.435657] resv_map_alloc+0xfe/0x510 [ 717.439543] ? vma_mmu_pagesize+0x60/0x60 [ 717.443684] ? kvmalloc_node+0x99/0xd0 [ 717.447566] ? newseg+0x1f7/0xcb0 [ 717.451032] ? put_dec+0xd0/0xd0 [ 717.454396] ? format_decode+0x10a/0x830 [ 717.458450] ? map_id_range_down+0x182/0x400 [ 717.462877] hugetlbfs_get_inode+0x28/0x430 [ 717.467203] hugetlb_file_setup+0x329/0x9f0 [ 717.471534] ? hugetlbfs_fallocate+0x1260/0x1260 [ 717.476282] ? scnprintf+0x110/0x110 [ 717.480004] ? __kmalloc_node+0x47/0x70 [ 717.483988] ? newseg+0x2f7/0xcb0 [ 717.487468] newseg+0x427/0xcb0 [ 717.490763] ? shm_mmap+0x220/0x220 [ 717.494398] ? down_write+0x87/0x120 [ 717.498118] ? ipcget+0x8be/0xfd0 [ 717.501578] ? down_read+0x1b0/0x1b0 [ 717.505300] ? __f_unlock_pos+0x19/0x20 [ 717.509283] ipcget+0x8f0/0xfd0 [ 717.512567] ? proc_fail_nth_write+0x9b/0x1e0 [ 717.517067] ? map_files_get_link+0x3b0/0x3b0 [ 717.521560] ? handle_mm_fault+0x35b/0xb20 [ 717.525799] ? find_held_lock+0x35/0x1d0 [ 717.529862] ? ipc_obtain_object_check+0xf0/0xf0 [ 717.534611] ? __mutex_unlock_slowpath+0x181/0x7e0 [ 717.539538] ? wait_for_completion+0x770/0x770 [ 717.544174] ? ipv6_confirm+0x370/0x5c0 [ 717.548168] ? __sb_end_write+0xa0/0xd0 [ 717.552153] ? kasan_check_write+0x14/0x20 [ 717.556390] SyS_shmget+0x158/0x230 [ 717.560013] ? is_file_shm_hugepages+0x40/0x40 [ 717.564592] ? do_syscall_64+0xb7/0x940 [ 717.568562] ? is_file_shm_hugepages+0x40/0x40 [ 717.573140] do_syscall_64+0x281/0x940 [ 717.577021] ? vmalloc_sync_all+0x30/0x30 [ 717.581163] ? _raw_spin_unlock_irq+0x27/0x70 [ 717.585655] ? finish_task_switch+0x1c1/0x810 [ 717.590145] ? syscall_return_slowpath+0x550/0x550 [ 717.595072] ? syscall_return_slowpath+0x2ac/0x550 [ 717.599997] ? prepare_exit_to_usermode+0x350/0x350 [ 717.605006] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 717.610373] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/04/02 19:58:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000027006381000000000000000014000097ee6d20c49dbafa00e0000002"], 0x20}, 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe4c, 0x0, 0xa, 0x0, 0x10, "837d1bb60448c48a28752508bbb5a4a5cc13cc8952806b3d301fa0640b8ac5beb79f23a9656bd3130413bc98af47dc25a86e1940f0f05f7fcca49dbc9e406de5", "8c698fa25ab46d16f7531a65eac39af5b0817849f10741f4742cf73d06759d882b7c952b268782ef367a921b750fcfc948b56bd1ceda5b77ed6b4a78d79c4608", "f78ab12f6af2ecdff08ef6fb09f0d678824d9354244024001a07e8ab54c90205", [0x1, 0xffffffff]}) clock_nanosleep(0x6, 0x1, &(0x7f0000000080), 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x2100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000140)={0x7fff, 0x3, 0xfffffffffffffffe, {}, 0x5, 0x8000}) [ 717.615218] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 717.620401] RIP: 0033:0x4552d9 [ 717.623582] RSP: 002b:00007ff349630c68 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 717.631286] RAX: ffffffffffffffda RBX: 00007ff3496316d4 RCX: 00000000004552d9 [ 717.638546] RDX: 0000000054000a10 RSI: 0000000000004000 RDI: 0000000000000000 [ 717.645809] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 717.653158] R10: 0000000020ffb000 R11: 0000000000000246 R12: 0000000000000014 [ 717.660420] R13: 0000000000000601 R14: 00000000006fc0b8 R15: 0000000000000003 2018/04/02 19:58:35 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) [ 717.718321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/02 19:58:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xffffffff00000000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xd13}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x8}, 0x8) [ 717.775504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/02 19:58:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x4c, 0x20000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x7fff) openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$setregs(0xd, r2, 0x5, &(0x7f0000000140)="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") ioctl(r1, 0x81cb3ccbb, &(0x7f0000000040)="e0705d88da57f257fe9e2bb3017592da733f3d791363a5ebb89c2153cabbe5cbda3d21ddeceba79f0b66c801803309aa3fb31b98b3d29200106b413d7a685916d0813db88ade8b23b3e455038a1ca442e1605b5c5ebee694f6ff80aef2b4f9a7dd89628a08658d03247e9fa52d2053dcbe36d5c6048b50b96edff000000000") 2018/04/02 19:58:35 executing program 7 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) [ 718.126242] FAULT_INJECTION: forcing a failure. [ 718.126242] name failslab, interval 1, probability 0, space 0, times 0 [ 718.137577] CPU: 0 PID: 13306 Comm: syz-executor7 Not tainted 4.16.0+ #376 [ 718.144583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.153931] Call Trace: [ 718.156525] dump_stack+0x1a7/0x27d [ 718.160155] ? arch_local_irq_restore+0x53/0x53 [ 718.164836] should_fail+0x914/0xae0 [ 718.168549] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 718.173821] ? lock_downgrade+0x980/0x980 [ 718.177971] ? find_held_lock+0x35/0x1d0 [ 718.182028] ? print_irqtrace_events+0x270/0x270 [ 718.186785] ? find_held_lock+0x35/0x1d0 [ 718.190851] ? __lock_is_held+0xb6/0x140 [ 718.194927] ? check_same_owner+0x320/0x320 [ 718.199242] ? __raw_spin_lock_init+0x1c/0x100 [ 718.203818] ? rcu_note_context_switch+0x710/0x710 [ 718.208741] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 718.213762] should_failslab+0xec/0x120 [ 718.217733] kmem_cache_alloc+0x47/0x760 [ 718.221789] ? resv_map_alloc+0x3bd/0x510 [ 718.225934] ? vma_mmu_pagesize+0x60/0x60 [ 718.230072] ? kvmalloc_node+0x99/0xd0 [ 718.233958] hugetlbfs_alloc_inode+0xc7/0x1a0 [ 718.238447] ? init_once+0x20/0x20 [ 718.241986] alloc_inode+0x65/0x180 [ 718.245606] new_inode_pseudo+0x69/0x190 [ 718.249663] ? prune_icache_sb+0x1a0/0x1a0 [ 718.253890] ? map_id_range_down+0x182/0x400 [ 718.258306] new_inode+0x1c/0x40 [ 718.261669] hugetlbfs_get_inode+0x41/0x430 [ 718.265994] hugetlb_file_setup+0x329/0x9f0 [ 718.270321] ? hugetlbfs_fallocate+0x1260/0x1260 [ 718.275069] ? scnprintf+0x110/0x110 [ 718.278787] ? __kmalloc_node+0x47/0x70 [ 718.282757] ? newseg+0x2f7/0xcb0 [ 718.286212] newseg+0x427/0xcb0 [ 718.289498] ? shm_mmap+0x220/0x220 [ 718.293124] ? down_write+0x87/0x120 [ 718.296837] ? ipcget+0x8be/0xfd0 [ 718.300303] ? down_read+0x1b0/0x1b0 [ 718.304024] ? __f_unlock_pos+0x19/0x20 [ 718.308011] ipcget+0x8f0/0xfd0 [ 718.311292] ? proc_fail_nth_write+0x9b/0x1e0 [ 718.315790] ? map_files_get_link+0x3b0/0x3b0 [ 718.320286] ? handle_mm_fault+0x35b/0xb20 [ 718.324523] ? find_held_lock+0x35/0x1d0 [ 718.328581] ? ipc_obtain_object_check+0xf0/0xf0 [ 718.333331] ? __mutex_unlock_slowpath+0x181/0x7e0 [ 718.338262] ? wait_for_completion+0x770/0x770 [ 718.342876] ? __sb_end_write+0xa0/0xd0 [ 718.346846] ? kasan_check_write+0x14/0x20 [ 718.351079] SyS_shmget+0x158/0x230 [ 718.354704] ? is_file_shm_hugepages+0x40/0x40 [ 718.359283] ? do_syscall_64+0xb7/0x940 [ 718.363254] ? is_file_shm_hugepages+0x40/0x40 [ 718.367830] do_syscall_64+0x281/0x940 [ 718.371709] ? vmalloc_sync_all+0x30/0x30 [ 718.375852] ? _raw_spin_unlock_irq+0x27/0x70 [ 718.380341] ? finish_task_switch+0x1c1/0x810 [ 718.384834] ? syscall_return_slowpath+0x550/0x550 [ 718.389761] ? syscall_return_slowpath+0x2ac/0x550 [ 718.394686] ? prepare_exit_to_usermode+0x350/0x350 [ 718.399699] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 718.405063] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 718.409911] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 718.415090] RIP: 0033:0x4552d9 [ 718.418270] RSP: 002b:00007ff349630c68 EFLAGS: 00000246 ORIG_RAX: 000000000000001d 2018/04/02 19:58:36 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x1, 0x4) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) [ 718.425974] RAX: ffffffffffffffda RBX: 00007ff3496316d4 RCX: 00000000004552d9 [ 718.433233] RDX: 0000000054000a10 RSI: 0000000000004000 RDI: 0000000000000000 [ 718.440493] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 718.447752] R10: 0000000020ffb000 R11: 0000000000000246 R12: 0000000000000014 [ 718.455013] R13: 0000000000000601 R14: 00000000006fc0b8 R15: 0000000000000004 2018/04/02 19:58:36 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r1 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x40, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffff}], 0x1c) 2018/04/02 19:58:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {}]}) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000270063810000000000000000140000000c00070008000200e0000002"], 0x1}, 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='nr0\x00', 0x10) 2018/04/02 19:58:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:58:36 executing program 7 (fault-call:1 fault-nth:5): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:36 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:36 executing program 6: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/02 19:58:37 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000270063810000000000000000140000000c000700080002faca1551e4c65d9de2"], 0x20}, 0x1}, 0x0) poll(&(0x7f0000000100)=[{r0, 0x1000}, {r0, 0x201}], 0x2, 0x100) 2018/04/02 19:58:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000300)={0x14e8, 0x27, 0x1ff307543bf68163, 0x0, 0x25dfdbfe, {0x14}, [@typed={0x8, 0x47, @pid=r1}, @nested={0x1c0, 0x1e, [@typed={0x8, 0x7f, @u32=0x7}, @generic="d1d63a7a3fdd3a46a0d95a2616de5fada633d27342ff9d4caa68914bb5b03c675bf8b647cbacc6a2d5f7dd1b59bff770daf1c29f3638723b0174723af4d900e14a18d017c11775f37a4fc05b4a680189d8f09f09541a", @typed={0x8, 0x4b, @pid=r1}, @generic="c51784bfd22eec85d0ea71bb2d1709c3381774a3afc58eb33704864edad39fcadcdbf52f62c2bef09d06877c8ab872292a4a88247375138c42edce951638d7a6ad8016d71d52e9788a7b0f43c2feff4c4e7c8ee146b1f54e777a0b8531f1485e79a247b6a4ee1d7112faa02f2bf43e560a623b66a490efcac230ca6cf54d33a2981c7c997b7615f9ecc3d3f7d0bce94a01470426d1c88ce6223ba88ed9d5b4301afb483d0f83d3471f5928601b5cfeaf9f4898efeb46a56df39f30e019e364f214a60b28126820306f5e15a73b6efcc903635c0d7efa9f4b3499afe7cf5abe673cf2d7b3a8", @typed={0x4, 0x7b}, @generic="8f5964135b50faea79d2c9f7e0fdc9472115492fc4df2a8b323ba994d1d4fb9216da473ebc4e19a0dc8cfcf1653a2683be1b8661d5bb528da0456484cf35cfc8d420f0b9baf98edd00fed84bc74d6a6f883f7a5dbfe10bf0d3a30a2e6e06d4b4b00a6e089e4aa365d6e3"]}, @nested={0x11c, 0x51, [@generic="d7d115a7d33b244db6d1dd460471f784f3e02d", @generic="0109a0c0e49d0ba48e0c3331b0b7bf93182b1646afcc5bdb578aa592f0649bd3bb6aee41c66079737f7d48409f8284db0bfcc3385c2028074fd76a7251fd2a688d75006c6d36ade7c0c558ffed04c9c0a9b1c0670dec8638264a7dc460abd3be800c97698c2e6a21e0f9fdad2d2e39cae5a366890272ea3d4d47d81466be1f0d1b68ff0b69b38b2939b0a890ada43d3ae09b16f18aa695e4741b91e62af1f05f7e9a9d670db762977b45897bce4f9b279ead6185328ec156afbc33d8b8167c46e6aac24224e14b0322fa18b5f09de1a0e17743b34266d15bcd7d1b73e0f3f0f3858a9387dff7f3d989bc5e93ededf1fba317714dd480007561a261b1", @typed={0x8, 0x56, @ipv4=@multicast2=0xe0000002}]}, @generic="007d99a0138a478a2e1435f82a4e915ca24969885d6d132f0234999845e55767ce6890f0b0ea4f4a4b35f3bbaef1ee8a037a31e8e0fe7e52b2682779923b02f0069667905434cbc9dba5fc5d0170178a324e4d20a762dc264b3cde22e573fbf9414d8149f5d4068432693219148c5d8887d782e25e53c52ee1750cd5ba0a", @typed={0x8, 0x4b, @fd=r0}, @generic="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", @nested={0x48, 0x2, [@typed={0x44, 0x1f, @str="757365727d6c6f706f7369785f61636c5f6163636573737365637572697479263a6264657627277070703124d87d2373656c666d643573756d2b242b00"}]}, @typed={0x8, 0x8a, @pid=r1}, @nested={0x118, 0x89, [@generic="c55ad35b812c8383176089141e25d257fcbb7f9d046f3f9d3578dd0881f8508ad74887cfa5b2478d2403312b7acb629ce9839c67b720cd9fc6b4b82cfaad659255f3e3827c894963e0ff17c12a33cbb53aa6f75b81a4b08bd0798321d9103c614b6b53a968d77a33a57d12fdc387891b933516d1a12f73be5fd00830ab2033e69fc2770fdd31a8a150121d7d9197083e34c57947b61b7bda2045eb9390d1bfdc8a77f97b86bf43e7fed9a487cd17c3e521206da9aabe4cec7cc3", @generic="1091b9f755257a96f7bf074e2d3649816dc2410cff56dfba64f4447faa494e0596437bf9b321ef186961b6d3bfd4ea5f", @generic="400392b3da618c097a406d0645d0f69496685caf718cbb88b81d35bfca94ea0e76c1", @typed={0x8, 0x23, @pid=r1}]}]}, 0x14e8}, 0x1}, 0x0) [ 719.526365] netlink: 4592 bytes leftover after parsing attributes in process `syz-executor6'. [ 719.545644] netlink: 4592 bytes leftover after parsing attributes in process `syz-executor6'. [ 719.585348] FAULT_INJECTION: forcing a failure. [ 719.585348] name failslab, interval 1, probability 0, space 0, times 0 [ 719.596650] CPU: 0 PID: 13343 Comm: syz-executor7 Not tainted 4.16.0+ #376 [ 719.603654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.612999] Call Trace: [ 719.615586] dump_stack+0x1a7/0x27d [ 719.619212] ? arch_local_irq_restore+0x53/0x53 [ 719.623900] should_fail+0x914/0xae0 [ 719.627618] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 719.632723] ? perf_trace_lock+0x4d6/0x900 [ 719.636953] ? perf_trace_lock+0x4d6/0x900 [ 719.641194] ? find_held_lock+0x35/0x1d0 [ 719.645256] ? __lock_is_held+0xb6/0x140 [ 719.649331] ? check_same_owner+0x320/0x320 [ 719.653646] ? region_chg+0x3f7/0xa80 [ 719.657446] ? rcu_note_context_switch+0x710/0x710 [ 719.662383] should_failslab+0xec/0x120 [ 719.666354] kmem_cache_alloc_trace+0x4b/0x740 [ 719.670959] ? kasan_check_write+0x14/0x20 [ 719.675189] ? do_raw_spin_lock+0xc1/0x230 [ 719.679864] region_chg+0x429/0xa80 [ 719.683501] ? is_hugetlb_entry_hwpoisoned+0xc0/0xc0 [ 719.688604] ? trace_hardirqs_on+0xd/0x10 [ 719.692744] ? current_kernel_time64+0x1d4/0x2f0 [ 719.697498] ? ktime_get_raw+0x380/0x380 [ 719.701559] ? evict_inodes+0x590/0x590 [ 719.705528] ? map_id_range_down+0x182/0x400 [ 719.709931] ? timespec_trunc+0x79/0xe0 [ 719.713910] hugetlb_reserve_pages+0x17b/0x5b0 [ 719.719208] ? hugetlbfs_get_inode+0x256/0x430 [ 719.723799] hugetlb_file_setup+0x40c/0x9f0 [ 719.728125] ? hugetlbfs_fallocate+0x1260/0x1260 [ 719.732876] ? scnprintf+0x110/0x110 [ 719.736592] ? __kmalloc_node+0x47/0x70 [ 719.740559] ? newseg+0x2f7/0xcb0 [ 719.744013] newseg+0x427/0xcb0 [ 719.747306] ? shm_mmap+0x220/0x220 [ 719.750929] ? down_write+0x87/0x120 [ 719.754631] ? ipcget+0x8be/0xfd0 [ 719.758076] ? down_read+0x1b0/0x1b0 [ 719.761789] ? __f_unlock_pos+0x19/0x20 [ 719.765761] ipcget+0x8f0/0xfd0 [ 719.769031] ? proc_fail_nth_write+0x9b/0x1e0 [ 719.773532] ? map_files_get_link+0x3b0/0x3b0 [ 719.778036] ? handle_mm_fault+0x35b/0xb20 [ 719.782285] ? find_held_lock+0x35/0x1d0 [ 719.786349] ? ipc_obtain_object_check+0xf0/0xf0 [ 719.791100] ? __mutex_unlock_slowpath+0x181/0x7e0 [ 719.796027] ? wait_for_completion+0x770/0x770 [ 719.800642] ? __sb_end_write+0xa0/0xd0 [ 719.804613] ? kasan_check_write+0x14/0x20 [ 719.808847] SyS_shmget+0x158/0x230 [ 719.812470] ? is_file_shm_hugepages+0x40/0x40 [ 719.817051] ? do_syscall_64+0xb7/0x940 [ 719.821021] ? is_file_shm_hugepages+0x40/0x40 [ 719.825600] do_syscall_64+0x281/0x940 [ 719.829478] ? vmalloc_sync_all+0x30/0x30 [ 719.833622] ? _raw_spin_unlock_irq+0x27/0x70 [ 719.838112] ? finish_task_switch+0x1c1/0x810 [ 719.842605] ? syscall_return_slowpath+0x550/0x550 [ 719.847531] ? syscall_return_slowpath+0x2ac/0x550 [ 719.852455] ? prepare_exit_to_usermode+0x350/0x350 [ 719.857465] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 719.862831] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 719.867679] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 719.872862] RIP: 0033:0x4552d9 [ 719.876044] RSP: 002b:00007ff349630c68 EFLAGS: 00000246 ORIG_RAX: 000000000000001d 2018/04/02 19:58:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) 2018/04/02 19:58:37 executing program 6: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000271000)={0x2, 0x421, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000609000)='./file0\x00', &(0x7f0000712000)='./file0\x00', &(0x7f0000df4000)='ext3\x00', 0x40002000, &(0x7f0000d2847b)) [ 719.883747] RAX: ffffffffffffffda RBX: 00007ff3496316d4 RCX: 00000000004552d9 [ 719.891009] RDX: 0000000054000a10 RSI: 0000000000004000 RDI: 0000000000000000 [ 719.898272] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 719.905555] R10: 0000000020ffb000 R11: 0000000000000246 R12: 0000000000000014 [ 719.912814] R13: 0000000000000601 R14: 00000000006fc0b8 R15: 0000000000000005 2018/04/02 19:58:37 executing program 7 (fault-call:1 fault-nth:6): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:37 executing program 4: syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:38 executing program 6: syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/02 19:58:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r1, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = fcntl$getown(r0, 0x9) fcntl$setown(r0, 0x8, r2) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x9, 0x8001, 0x8, 0x7fff}) 2018/04/02 19:58:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008008}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r2, 0x408, 0x70bd2c, 0x25dfdbfe, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2b1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffff83e}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc550}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x94}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000890}, 0x4005) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:38 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:58:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:38 executing program 6: mq_open(&(0x7f0000af5000)='-$\x00', 0x7f, 0x0, &(0x7f00004d2fc0)) 2018/04/02 19:58:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001680)=0x14) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000016c0)={'lo\x00', 0x6}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r2 = syz_open_dev$usbmon(&(0x7f0000001580)='/dev/usbmon#\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000015c0), &(0x7f0000001600)=0x4) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000040)=""/138, 0x8a}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000300)=""/196, 0xc4}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/100, 0x64}, {&(0x7f0000001480)=""/65, 0x41}], 0x8, 0x0) 2018/04/02 19:58:38 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x3, 0x1000, 0x218, &(0x7f0000ffe000/0x1000)=nil) 2018/04/02 19:58:38 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) 2018/04/02 19:58:38 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x99d3) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') r1 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setpgid(r1, r2) 2018/04/02 19:58:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x3, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:39 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'ip6gretap0\x00', {0x2, 0x4e24, @broadcast=0xffffffff}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r1, 0x540a, 0x5) ioctl$TCXONC(r1, 0x540a, 0x1) 2018/04/02 19:58:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e, 0x200000, 0x0, 0x3}) 2018/04/02 19:58:39 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:39 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x4000) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:39 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:39 executing program 6 (fault-call:2 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") [ 722.461178] FAULT_INJECTION: forcing a failure. [ 722.461178] name failslab, interval 1, probability 0, space 0, times 0 [ 722.472492] CPU: 0 PID: 13470 Comm: syz-executor1 Not tainted 4.16.0+ #376 [ 722.479493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.488834] Call Trace: [ 722.491418] dump_stack+0x1a7/0x27d [ 722.495040] ? arch_local_irq_restore+0x53/0x53 [ 722.499706] should_fail+0x914/0xae0 [ 722.503414] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 722.508507] ? __task_pid_nr_ns+0x29b/0x540 [ 722.512827] ? find_held_lock+0x35/0x1d0 [ 722.516878] ? find_held_lock+0x35/0x1d0 [ 722.520947] ? check_same_owner+0x320/0x320 [ 722.525263] ? rcu_note_context_switch+0x710/0x710 [ 722.530188] should_failslab+0xec/0x120 [ 722.534154] kmem_cache_alloc_node+0x56/0x760 [ 722.538644] ? netlink_getsockopt+0x680/0x680 [ 722.543132] __alloc_skb+0xf4/0x760 [ 722.546748] ? skb_scrub_packet+0x510/0x510 [ 722.551058] ? kasan_check_write+0x14/0x20 [ 722.555285] ? _copy_from_user+0x99/0x110 [ 722.559423] ? rw_copy_check_uvector+0x1be/0x280 [ 722.564175] ? import_iovec+0x238/0x430 [ 722.568142] ? security_socket_getpeersec_dgram+0x91/0xc0 [ 722.573669] netlink_sendmsg+0xa9a/0xe80 [ 722.577727] ? netlink_unicast+0x6b0/0x6b0 [ 722.581956] ? security_socket_sendmsg+0x89/0xb0 [ 722.586702] ? netlink_unicast+0x6b0/0x6b0 [ 722.590929] sock_sendmsg+0xca/0x110 [ 722.594642] ___sys_sendmsg+0x767/0x8b0 [ 722.598618] ? copy_msghdr_from_user+0x590/0x590 [ 722.603386] ? __f_unlock_pos+0x19/0x20 [ 722.607353] ? lock_downgrade+0x980/0x980 [ 722.611494] ? __fget_light+0x2bc/0x400 [ 722.615461] ? fget_raw+0x20/0x20 [ 722.618907] ? find_held_lock+0x35/0x1d0 [ 722.622967] ? kasan_check_write+0x14/0x20 [ 722.627191] ? __mutex_unlock_slowpath+0x181/0x7e0 [ 722.632115] ? wait_for_completion+0x770/0x770 [ 722.636694] __sys_sendmsg+0xe5/0x210 [ 722.640503] ? __sys_sendmsg+0xe5/0x210 [ 722.644466] ? SyS_shutdown+0x290/0x290 [ 722.648524] ? __sb_end_write+0xa0/0xd0 [ 722.652493] ? kasan_check_write+0x14/0x20 [ 722.656719] ? SyS_read+0x220/0x220 [ 722.660337] SyS_sendmsg+0x2d/0x50 [ 722.663867] ? __sys_sendmsg+0x210/0x210 [ 722.667915] do_syscall_64+0x281/0x940 [ 722.671793] ? vmalloc_sync_all+0x30/0x30 [ 722.675931] ? _raw_spin_unlock_irq+0x27/0x70 [ 722.680418] ? finish_task_switch+0x1c1/0x810 [ 722.684903] ? syscall_return_slowpath+0x550/0x550 [ 722.689819] ? syscall_return_slowpath+0x2ac/0x550 [ 722.694735] ? prepare_exit_to_usermode+0x350/0x350 [ 722.699739] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 722.705102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 722.709935] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 722.715110] RIP: 0033:0x4552d9 [ 722.718286] RSP: 002b:00007fb9a2164c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.725982] RAX: ffffffffffffffda RBX: 00007fb9a21656d4 RCX: 00000000004552d9 [ 722.733239] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000013 [ 722.740492] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 722.747749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 722.755003] R13: 00000000000004ea R14: 00000000006fa690 R15: 0000000000000000 2018/04/02 19:58:40 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) [ 722.817625] FAULT_INJECTION: forcing a failure. [ 722.817625] name failslab, interval 1, probability 0, space 0, times 0 [ 722.818905] FAULT_INJECTION: forcing a failure. [ 722.818905] name failslab, interval 1, probability 0, space 0, times 0 [ 722.828938] CPU: 0 PID: 13468 Comm: syz-executor6 Not tainted 4.16.0+ #376 [ 722.847114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.856457] Call Trace: [ 722.859041] dump_stack+0x1a7/0x27d [ 722.862694] ? arch_local_irq_restore+0x53/0x53 [ 722.867372] should_fail+0x914/0xae0 [ 722.871079] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 722.876171] ? perf_trace_run_bpf_submit+0x206/0x330 [ 722.881265] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 722.886360] ? memset+0x31/0x40 [ 722.889641] ? find_held_lock+0x35/0x1d0 [ 722.893694] ? __lock_is_held+0xb6/0x140 [ 722.897758] ? check_same_owner+0x320/0x320 [ 722.902073] ? rcu_note_context_switch+0x710/0x710 [ 722.907003] should_failslab+0xec/0x120 [ 722.910977] kmem_cache_alloc_trace+0x4b/0x740 [ 722.915566] ion_alloc+0x23e/0x9e0 [ 722.919104] ? ion_dma_buf_release+0x50/0x50 [ 722.923505] ? __might_sleep+0x95/0x190 [ 722.927474] ? kasan_check_write+0x14/0x20 [ 722.931698] ? _copy_from_user+0x99/0x110 [ 722.935834] ion_ioctl+0x279/0x370 [ 722.939362] ? ion_query_heaps+0x490/0x490 [ 722.943589] ? wait_for_completion+0x770/0x770 [ 722.948163] ? ion_query_heaps+0x490/0x490 [ 722.952387] do_vfs_ioctl+0x1b1/0x1520 [ 722.956270] ? ioctl_preallocate+0x2b0/0x2b0 [ 722.960667] ? fget_raw+0x20/0x20 [ 722.964113] ? __sb_end_write+0xa0/0xd0 [ 722.968079] ? kasan_check_write+0x14/0x20 [ 722.972301] ? fput+0xe0/0x150 [ 722.975483] ? SyS_write+0x184/0x220 [ 722.979186] ? security_file_ioctl+0x89/0xb0 [ 722.983587] SyS_ioctl+0x8f/0xc0 [ 722.986942] ? do_vfs_ioctl+0x1520/0x1520 [ 722.991082] do_syscall_64+0x281/0x940 [ 722.994954] ? vmalloc_sync_all+0x30/0x30 [ 722.999091] ? _raw_spin_unlock_irq+0x27/0x70 [ 723.003571] ? finish_task_switch+0x1c1/0x810 [ 723.008057] ? syscall_return_slowpath+0x550/0x550 [ 723.012975] ? syscall_return_slowpath+0x2ac/0x550 [ 723.017895] ? prepare_exit_to_usermode+0x350/0x350 [ 723.022900] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 723.028260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 723.033099] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 723.038274] RIP: 0033:0x4552d9 [ 723.041452] RSP: 002b:00007f75d98ebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.049152] RAX: ffffffffffffffda RBX: 00007f75d98ec6d4 RCX: 00000000004552d9 [ 723.056406] RDX: 0000000020d68f5d RSI: 00000000c0184900 RDI: 0000000000000013 2018/04/02 19:58:40 executing program 4 (fault-call:2 fault-nth:0): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) [ 723.063662] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 723.070916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 723.078186] R13: 000000000000018e R14: 00000000006f55f0 R15: 0000000000000000 [ 723.085467] CPU: 1 PID: 13478 Comm: syz-executor1 Not tainted 4.16.0+ #376 [ 723.092485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.101829] Call Trace: [ 723.104417] dump_stack+0x1a7/0x27d [ 723.108046] ? arch_local_irq_restore+0x53/0x53 [ 723.112707] ? is_bpf_text_address+0xa4/0x120 2018/04/02 19:58:40 executing program 6 (fault-call:2 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") [ 723.117207] should_fail+0x914/0xae0 [ 723.120922] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 723.126025] ? save_stack+0xa3/0xd0 [ 723.129649] ? save_stack+0x43/0xd0 [ 723.133268] ? kasan_kmalloc+0xad/0xe0 [ 723.137150] ? kasan_slab_alloc+0x12/0x20 [ 723.141299] ? find_held_lock+0x35/0x1d0 [ 723.145376] ? check_same_owner+0x320/0x320 [ 723.149699] ? rcu_note_context_switch+0x710/0x710 [ 723.154632] should_failslab+0xec/0x120 [ 723.158606] kmem_cache_alloc_node_trace+0x5a/0x760 [ 723.163627] __kmalloc_node_track_caller+0x33/0x70 [ 723.168550] __kmalloc_reserve.isra.39+0x41/0xd0 [ 723.173301] __alloc_skb+0x12a/0x760 [ 723.177014] ? skb_scrub_packet+0x510/0x510 [ 723.181321] ? _copy_from_user+0x99/0x110 [ 723.185451] ? rw_copy_check_uvector+0x1be/0x280 [ 723.190193] ? import_iovec+0x238/0x430 [ 723.194153] ? security_socket_getpeersec_dgram+0x91/0xc0 [ 723.199673] netlink_sendmsg+0xa9a/0xe80 [ 723.203716] ? netlink_unicast+0x6b0/0x6b0 [ 723.207934] ? security_socket_sendmsg+0x89/0xb0 [ 723.212667] ? netlink_unicast+0x6b0/0x6b0 [ 723.216879] sock_sendmsg+0xca/0x110 [ 723.220573] ___sys_sendmsg+0x767/0x8b0 [ 723.224527] ? copy_msghdr_from_user+0x590/0x590 [ 723.229270] ? __f_unlock_pos+0x19/0x20 [ 723.233228] ? lock_downgrade+0x980/0x980 [ 723.237358] ? __fget_light+0x2bc/0x400 [ 723.241312] ? fget_raw+0x20/0x20 [ 723.244748] ? find_held_lock+0x35/0x1d0 [ 723.248789] ? kasan_check_write+0x14/0x20 [ 723.253003] ? __mutex_unlock_slowpath+0x181/0x7e0 [ 723.257925] ? wait_for_completion+0x770/0x770 [ 723.262493] __sys_sendmsg+0xe5/0x210 [ 723.266268] ? __sys_sendmsg+0xe5/0x210 [ 723.270218] ? SyS_shutdown+0x290/0x290 [ 723.274175] ? __sb_end_write+0xa0/0xd0 [ 723.278127] ? kasan_check_write+0x14/0x20 [ 723.282347] ? SyS_read+0x220/0x220 [ 723.285955] SyS_sendmsg+0x2d/0x50 [ 723.289475] ? __sys_sendmsg+0x210/0x210 [ 723.293515] do_syscall_64+0x281/0x940 [ 723.297379] ? vmalloc_sync_all+0x30/0x30 [ 723.301505] ? _raw_spin_unlock_irq+0x27/0x70 [ 723.305977] ? finish_task_switch+0x1c1/0x810 [ 723.310450] ? syscall_return_slowpath+0x550/0x550 [ 723.315360] ? syscall_return_slowpath+0x2ac/0x550 [ 723.320266] ? prepare_exit_to_usermode+0x350/0x350 [ 723.325260] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 723.330604] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 723.335430] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 723.340597] RIP: 0033:0x4552d9 [ 723.343766] RSP: 002b:00007fb9a2164c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.351452] RAX: ffffffffffffffda RBX: 00007fb9a21656d4 RCX: 00000000004552d9 [ 723.358701] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000013 2018/04/02 19:58:40 executing program 1 (fault-call:1 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) [ 723.365949] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 723.373194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 723.380439] R13: 00000000000004ea R14: 00000000006fa690 R15: 0000000000000001 2018/04/02 19:58:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x80040, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$TCXONC(r0, 0x540a, 0x1) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) write(r0, &(0x7f0000000080)='\x00', 0x1) write(r0, &(0x7f0000000240)="239429faacbbcba8eecca8bc8b4f9cbd28deb8c3a8e6caa937da9fb403a9f74f450aa843cc0930decddd16d4899d370fe1d66d47453b2d4d082ed0beab47b4da1c5d7ddfde4104f076e6c22c988ee599378440d7fb5c4238e1526e90cd7ca15e9bc9ff7a6e08e55600d2e533c95b85510e0b6cb64884b980220b49ae368d06e87396b184c70cce857355ef5edf0e7f39eb69eed50b8e5a2ee61f80a8a893e48314f460a2a71404abfc608ceecb1fb8f2e2c2ab4889abb0823dc9efa28a589b9f035d7da278186e7d94cb54f2fabd59d1f3c8124af9ec9223f460a4be434987c4f1576e0794acc84c87a379f41f", 0xed) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x35) socketpair(0x8, 0x4, 0x101, &(0x7f0000000040)) 2018/04/02 19:58:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x20000) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000100)="099e0a2a3ef6d3d3cbdf094aa13cfbf2a3a2da2c4e6e7e2e7ec9f2ba4eadbe0247c16808307661fc964939f7ad2c2ccf9e7554a3c8f37c4aa072b4612c3bc0ea173768a7d9fe29c4a97af410f911b162532617b1f7da70e1b2a1207019d5db075a7afad797916d1e6964a2cc8a27ee819f9cd4dedf5e7f5379") sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c300700a20004000000000000000000"], 0x1}, 0x1}, 0x0) [ 723.596634] FAULT_INJECTION: forcing a failure. [ 723.596634] name failslab, interval 1, probability 0, space 0, times 0 [ 723.607893] CPU: 0 PID: 13481 Comm: syz-executor6 Not tainted 4.16.0+ #376 [ 723.614898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.624239] Call Trace: [ 723.626828] dump_stack+0x1a7/0x27d [ 723.630457] ? arch_local_irq_restore+0x53/0x53 [ 723.635136] should_fail+0x914/0xae0 [ 723.638853] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 723.643975] ? save_stack+0x43/0xd0 [ 723.647597] ? __kasan_slab_free+0x11a/0x170 [ 723.651998] ? kasan_slab_free+0xe/0x10 [ 723.655961] ? kfree+0xd9/0x260 [ 723.659231] ? ion_alloc+0x31d/0x9e0 [ 723.662953] ? find_held_lock+0x35/0x1d0 [ 723.667019] ? __lock_is_held+0xb6/0x140 [ 723.671099] ? check_same_owner+0x320/0x320 [ 723.675420] ? rcu_note_context_switch+0x710/0x710 [ 723.680356] should_failslab+0xec/0x120 [ 723.684330] kmem_cache_alloc_trace+0x4b/0x740 [ 723.688907] ? ion_alloc+0x31d/0x9e0 [ 723.692619] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 723.697629] ? trace_hardirqs_on+0xd/0x10 [ 723.701774] ion_alloc+0x23e/0x9e0 [ 723.705318] ? ion_dma_buf_release+0x50/0x50 [ 723.709726] ? __might_sleep+0x95/0x190 [ 723.713703] ? kasan_check_write+0x14/0x20 [ 723.718595] ? _copy_from_user+0x99/0x110 [ 723.722743] ion_ioctl+0x279/0x370 [ 723.726276] ? ion_query_heaps+0x490/0x490 [ 723.730512] ? wait_for_completion+0x770/0x770 [ 723.735090] ? ion_query_heaps+0x490/0x490 [ 723.739322] do_vfs_ioctl+0x1b1/0x1520 [ 723.743214] ? ioctl_preallocate+0x2b0/0x2b0 [ 723.747618] ? fget_raw+0x20/0x20 [ 723.751070] ? __sb_end_write+0xa0/0xd0 [ 723.755042] ? kasan_check_write+0x14/0x20 [ 723.759268] ? fput+0xe0/0x150 [ 723.762456] ? SyS_write+0x184/0x220 [ 723.766169] ? security_file_ioctl+0x89/0xb0 [ 723.770574] SyS_ioctl+0x8f/0xc0 [ 723.773943] ? do_vfs_ioctl+0x1520/0x1520 [ 723.778086] do_syscall_64+0x281/0x940 [ 723.781968] ? vmalloc_sync_all+0x30/0x30 [ 723.786108] ? _raw_spin_unlock_irq+0x27/0x70 [ 723.790597] ? finish_task_switch+0x1c1/0x810 [ 723.795089] ? syscall_return_slowpath+0x550/0x550 [ 723.800025] ? syscall_return_slowpath+0x2ac/0x550 [ 723.804958] ? prepare_exit_to_usermode+0x350/0x350 [ 723.809970] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 723.815333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 723.820177] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 723.825358] RIP: 0033:0x4552d9 [ 723.828538] RSP: 002b:00007f75d98ebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.836245] RAX: ffffffffffffffda RBX: 00007f75d98ec6d4 RCX: 00000000004552d9 [ 723.843507] RDX: 0000000020d68f5d RSI: 00000000c0184900 RDI: 0000000000000013 [ 723.850768] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 723.858026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 723.865291] R13: 000000000000018e R14: 00000000006f55f0 R15: 0000000000000001 [ 723.880610] FAULT_INJECTION: forcing a failure. [ 723.880610] name failslab, interval 1, probability 0, space 0, times 0 [ 723.891888] CPU: 0 PID: 13485 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 723.898888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.908228] Call Trace: [ 723.910805] dump_stack+0x1a7/0x27d [ 723.914426] ? arch_local_irq_restore+0x53/0x53 [ 723.919093] should_fail+0x914/0xae0 [ 723.922802] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 723.927893] ? __f_unlock_pos+0x19/0x20 [ 723.931861] ? lock_downgrade+0x980/0x980 [ 723.935999] ? proc_fail_nth_write+0x9b/0x1e0 [ 723.940484] ? map_files_get_link+0x3b0/0x3b0 [ 723.944973] ? find_held_lock+0x35/0x1d0 [ 723.949044] ? check_same_owner+0x320/0x320 [ 723.953357] ? rcu_note_context_switch+0x710/0x710 [ 723.958281] should_failslab+0xec/0x120 [ 723.962248] __kmalloc_track_caller+0x5f/0x760 [ 723.966822] ? strncpy_from_user+0x430/0x430 [ 723.971216] ? strndup_user+0x62/0xb0 [ 723.975006] memdup_user+0x2c/0x90 [ 723.978538] strndup_user+0x62/0xb0 [ 723.982225] SyS_mount+0x3c/0x120 [ 723.985669] ? copy_mnt_ns+0xb40/0xb40 [ 723.989550] do_syscall_64+0x281/0x940 [ 723.993423] ? vmalloc_sync_all+0x30/0x30 [ 723.997560] ? kasan_check_write+0x14/0x20 [ 724.001784] ? syscall_return_slowpath+0x550/0x550 [ 724.006703] ? syscall_return_slowpath+0x2ac/0x550 [ 724.011630] ? prepare_exit_to_usermode+0x350/0x350 [ 724.016651] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 724.022021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 724.026866] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 724.032040] RIP: 0033:0x4552d9 [ 724.035210] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 724.042902] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 724.050152] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 724.057404] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 724.064653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 724.071920] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000000 2018/04/02 19:58:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) ioctl$TCXONC(r0, 0x540a, 0xc5f9) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000200)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x4100) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000100)=""/221) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000000c0)={0x6, 0x6, 0xce82, 0x8, 0xe64, 0x3}) 2018/04/02 19:58:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = semget(0x1, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x40000) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000100)=""/169) 2018/04/02 19:58:42 executing program 7: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:42 executing program 6 (fault-call:2 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:58:42 executing program 4 (fault-call:2 fault-nth:1): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) r1 = semget$private(0x0, 0x3, 0x41c) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000001000)=""/4096) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000100)="ce69d5ba532c8b91b994549d898cb5828d34e4a0732ff6c6e2b13615271d138aacbed485ed0db6ba72cc4841c3c507b6cea0fdc1c374b1510296acc7c2dc08f7170b7ed43ad18ae273d01fc08bffe6bc088436947fdc577c4acc5bcf460515adfc209bd23871131756a469e6deca28406d400ce21b219f79b3b0ff50d1a738d5737107f61af1cec6de00843dcfe162dba25fbadfecc7a2b45e2caac674c2f1f61fbae7ef0c33127d50221d4091dbae49e53fb73a299815ab460c7328c6e14c605ba0c6478d64e9243d9e7a64e8f24e0cff13c7cbe38e040696e674dee351c09dbd1aa61c01875497c0d3431f7c7044ef73656a00470d3c426de0dd249f84", &(0x7f0000000200)=""/106}, 0x18) [ 725.108992] FAULT_INJECTION: forcing a failure. [ 725.108992] name failslab, interval 1, probability 0, space 0, times 0 [ 725.120292] CPU: 0 PID: 13524 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 725.127295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 725.136632] Call Trace: [ 725.139214] dump_stack+0x1a7/0x27d [ 725.142841] ? arch_local_irq_restore+0x53/0x53 [ 725.147497] ? __save_stack_trace+0x7e/0xd0 [ 725.151818] should_fail+0x914/0xae0 [ 725.155520] ? trace_event_raw_event_lock+0x340/0x340 [ 725.160705] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 725.165795] ? kasan_kmalloc+0xad/0xe0 [ 725.169673] ? __kmalloc_track_caller+0x15e/0x760 [ 725.174504] ? memdup_user+0x2c/0x90 [ 725.178200] ? strndup_user+0x62/0xb0 [ 725.181988] ? SyS_mount+0x3c/0x120 [ 725.185603] ? proc_fail_nth_write+0x9b/0x1e0 [ 725.190086] ? map_files_get_link+0x3b0/0x3b0 [ 725.194572] ? find_held_lock+0x35/0x1d0 [ 725.198638] ? check_same_owner+0x320/0x320 [ 725.202952] ? rcu_note_context_switch+0x710/0x710 [ 725.207872] ? __check_object_size+0x8b/0x530 [ 725.212360] should_failslab+0xec/0x120 [ 725.216324] __kmalloc_track_caller+0x5f/0x760 [ 725.220896] ? strncpy_from_user+0x430/0x430 [ 725.225293] ? strndup_user+0x62/0xb0 [ 725.229085] ? _copy_from_user+0x99/0x110 [ 725.233223] memdup_user+0x2c/0x90 [ 725.236753] strndup_user+0x62/0xb0 [ 725.240371] SyS_mount+0x6b/0x120 [ 725.243815] ? copy_mnt_ns+0xb40/0xb40 [ 725.247694] do_syscall_64+0x281/0x940 [ 725.251567] ? vmalloc_sync_all+0x30/0x30 [ 725.255703] ? _raw_spin_unlock_irq+0x27/0x70 [ 725.260184] ? finish_task_switch+0x1c1/0x810 [ 725.264670] ? syscall_return_slowpath+0x550/0x550 [ 725.269590] ? syscall_return_slowpath+0x2ac/0x550 [ 725.274505] ? prepare_exit_to_usermode+0x350/0x350 [ 725.279507] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 725.284862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 725.289699] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 725.294873] RIP: 0033:0x4552d9 [ 725.298050] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2018/04/02 19:58:42 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:42 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x400) getsockopt(r1, 0x40000000000, 0x85, &(0x7f0000000080)=""/15, &(0x7f00000000c0)=0xf) 2018/04/02 19:58:42 executing program 7: shmget(0x1, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) [ 725.305751] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 725.313015] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 725.320277] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 725.327542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 725.334808] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000001 2018/04/02 19:58:42 executing program 1: socketpair(0xa, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000180)={0xb4d, 0x2, 0x1, 0xffffffffffffffff}) ppoll(&(0x7f00000001c0)=[{r0, 0x200}, {r1, 0x4001}, {r2, 0x4}, {r3, 0x8608}], 0x4, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) 2018/04/02 19:58:42 executing program 4 (fault-call:2 fault-nth:2): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:43 executing program 7: r0 = syz_open_pts(0xffffffffffffff9c, 0x117980) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001340)=ANY=[@ANYBLOB="020000000000000004000000000000009000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000004000000000000000010000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000011de849f59bfd86976efcfdfa19a88808b7d0e4eb7b5a815f056c9ded355599aa771dd8f35a09369658e6ec09b7214295a5450a795f6e8cc627a28dd09db527a0c9f81e61545eb49984d7fe81cb1d852b7882a17bb7650429a56983eb9fafe8cf6238a2b3e406e2143fe0dca9e7dca000000000000000000007c9b700000ee36a026603b01f29a0012a88afe5de1e1f30a5611dc29c0c29b39a50fff368e523deea26f88fe46bd9fc4e2499ab258764dfe084423afb23245250035c2c73a265a00f60c634980eeb3c0b69fcb4f2aae80d96919f4174b3ea1c0fdd9f032a52a8c9f843ab390a556ad41804501d481702b03184cb4584b097d27ade5e2330c83673ac5f2f10247e8ea6842ee1ec5e791c4e96721ad7977f061a3ccf6d5df6d6f98cc4ea7fa083362b4d4b9e3dbe673c3ede5bdbb4a881c987326d100f2b518f816b780947170bb647ad7f27a1b"]) setsockopt$inet6_udp_int(r2, 0x11, 0x64, &(0x7f0000001180)=0xa0e, 0x4) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001240)={0x0, 0x74, &(0x7f00000011c0)=[@in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e20, @rand_addr=0xfffffffffffffffa}, @in6={0xa, 0x4e21, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0xbd5}, @in6={0xa, 0x4e24, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in6={0xa, 0x4e22, 0x15cc7051, @mcast1={0xff, 0x1, [], 0x1}, 0x2}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000012c0)={r3, 0x100000000}, &(0x7f0000001300)=0x8) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:43 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") socket$bt_rfcomm(0x1f, 0x1, 0x3) [ 725.635556] FAULT_INJECTION: forcing a failure. [ 725.635556] name failslab, interval 1, probability 0, space 0, times 0 [ 725.646859] CPU: 0 PID: 13552 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 725.653867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 725.663202] Call Trace: [ 725.665787] dump_stack+0x1a7/0x27d [ 725.669403] ? arch_local_irq_restore+0x53/0x53 [ 725.674067] should_fail+0x914/0xae0 [ 725.677777] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 725.682866] ? __kmalloc_track_caller+0x15e/0x760 [ 725.687694] ? strndup_user+0x62/0xb0 [ 725.691478] ? SyS_mount+0x6b/0x120 [ 725.695097] ? trace_hardirqs_off+0x10/0x10 [ 725.699405] ? proc_fail_nth_write+0x9b/0x1e0 [ 725.703885] ? map_files_get_link+0x3b0/0x3b0 [ 725.708371] ? find_held_lock+0x35/0x1d0 [ 725.712432] ? check_same_owner+0x320/0x320 [ 725.717508] ? lock_release+0xa40/0xa40 [ 725.721471] ? check_same_owner+0x320/0x320 [ 725.725786] ? rcu_note_context_switch+0x710/0x710 [ 725.730710] should_failslab+0xec/0x120 [ 725.734671] kmem_cache_alloc_trace+0x4b/0x740 [ 725.739244] ? kasan_check_write+0x14/0x20 [ 725.743470] ? _copy_from_user+0x99/0x110 [ 725.747608] copy_mount_options+0x5f/0x2e0 [ 725.751834] SyS_mount+0x87/0x120 [ 725.755271] ? copy_mnt_ns+0xb40/0xb40 [ 725.759146] do_syscall_64+0x281/0x940 [ 725.763016] ? vmalloc_sync_all+0x30/0x30 [ 725.767163] ? _raw_spin_unlock_irq+0x27/0x70 [ 725.771661] ? finish_task_switch+0x1c1/0x810 [ 725.776155] ? syscall_return_slowpath+0x550/0x550 [ 725.781083] ? syscall_return_slowpath+0x2ac/0x550 [ 725.786014] ? prepare_exit_to_usermode+0x350/0x350 [ 725.791029] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 725.796395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 725.801246] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 725.806423] RIP: 0033:0x4552d9 [ 725.809600] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 725.817296] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 725.824550] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 725.831804] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 725.839060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 725.846312] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000002 2018/04/02 19:58:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x6) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@ipv4, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000180)=0xe8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x50, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)=r1, 0x4) setuid(r0) 2018/04/02 19:58:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x59, "a8d5f9675d98c2de1706390933fb380d7dee277751fea4c3c0e001a16f8ca8cc88a430b636483818df1974dd7512d881109f0ccf3639a444998751f60847147388f21e56876e98f89fbeab7d9545e597ddd17803e3ff383b24"}, &(0x7f00000000c0)=0x61) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r3, 0x20}, &(0x7f0000000140)=0x8) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:44 executing program 4 (fault-call:2 fault-nth:3): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:44 executing program 6: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in=@rand_addr, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) r1 = getuid() setreuid(r0, r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x20000, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x200000, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000000080)=[{r0, 0x1}], 0x2000010c, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7fff, 0x802) getsockopt(r1, 0x7ff, 0x7, &(0x7f0000000140)=""/25, &(0x7f0000000180)=0x19) 2018/04/02 19:58:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="bf170800"], &(0x7f0000000280)=0x8) sysfs$3(0x3) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) unlink(&(0x7f00000001c0)='./file0\x00') ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) socketpair$inet(0x2, 0x1, 0xa6ab, &(0x7f0000000180)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) socketpair(0x1, 0x7, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0xdf, 0x7, 0x4, 0xfff000, 0x227}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x6, 0x200, 0x3, 0x7, r2}, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) 2018/04/02 19:58:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x100) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) 2018/04/02 19:58:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, 0x23, 0x0, 0x70bd29, 0x25dfdbff, {0x2}, [@generic="ed8e59fa04d7bf7d377212c52f04572ba3dcb8eb3d649b17d5d9b7b6693b67c26cb86db868981986f478884663ffbeb4c6460dc64643b7e6a0a409ef4d22d91edbbb281599d147cc589974ce8db9409a77e6c8c2629fd4a0ee00f6eed74d4ba880cf3e26cf1ac563d69db2e08c7bd0aff145c914960de83fa2cd281949900eea4948766e3df1c9cb7af75eb5c61b8180d3315bb511e95b", @generic="503cdc84ac4106c126d0784f3e325fcacedf388fbf07050672e93bff3aa60edde6f5301cb3e7f3d63e5a221023475af1873e28bbeff9a01ffa4157c70d521041bb231ca51d41af0a8632f1b0d8fdb03ae4bfe8497a19290574f3", @typed={0xc, 0x1, @u64=0x101}]}, 0x114}, 0x1, 0x0, 0x0, 0x844}, 0x45) 2018/04/02 19:58:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = msgget(0x1, 0x80) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000300)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0xff, r2, r3, r4, r5, 0x100, 0x8}, 0x9, 0x1, 0x45, 0x7, 0x9, 0x8, r6, r7}) 2018/04/02 19:58:44 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x9, 0x4000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x9}}, 0x6, 0x8000, 0x6, 0xbb9, 0x101}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={r1, 0x0, 0x4, [0x6, 0x9dc5, 0x8, 0x3]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)=@pic={0x80000001, 0x1, 0xbb, 0xe259, 0x5, 0x1, 0x2, 0x0, 0x4ab69e70, 0x2, 0x4, 0x0, 0x2, 0x1ff, 0x1ff, 0xffffffffffffff7f}) 2018/04/02 19:58:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000400f049000000000000a200624a3cef01ce1d707c2b38a18eda09ae95c26182904cb961"], 0x1}, 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$inet(r1, &(0x7f0000000100)={0x0, 0x0, @rand_addr}, &(0x7f0000000140)=0x10) [ 726.884184] FAULT_INJECTION: forcing a failure. [ 726.884184] name failslab, interval 1, probability 0, space 0, times 0 [ 726.895472] CPU: 0 PID: 13590 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 726.902475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 726.911811] Call Trace: [ 726.914397] dump_stack+0x1a7/0x27d [ 726.918020] ? arch_local_irq_restore+0x53/0x53 [ 726.922681] ? finish_task_switch+0x29f/0x810 [ 726.927174] should_fail+0x914/0xae0 [ 726.930878] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 726.935982] ? __sched_text_start+0x8/0x8 [ 726.940119] ? find_held_lock+0x35/0x1d0 [ 726.944190] ? check_same_owner+0x320/0x320 [ 726.948513] should_failslab+0xec/0x120 [ 726.952476] kmem_cache_alloc+0x47/0x760 [ 726.956529] ? map_files_get_link+0x3b0/0x3b0 [ 726.961020] getname_flags+0xcb/0x580 [ 726.964812] user_path_at_empty+0x2d/0x50 [ 726.968951] do_mount+0x15f/0x2bb0 [ 726.972488] ? copy_mount_string+0x40/0x40 [ 726.976721] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 726.981730] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 726.986479] ? retint_kernel+0x10/0x10 [ 726.990362] ? copy_mount_options+0x18b/0x2e0 [ 726.994849] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 726.999679] ? copy_mount_options+0x1f7/0x2e0 [ 727.004162] SyS_mount+0xab/0x120 [ 727.007603] ? copy_mnt_ns+0xb40/0xb40 [ 727.011483] do_syscall_64+0x281/0x940 [ 727.015359] ? vmalloc_sync_all+0x30/0x30 [ 727.019497] ? kasan_check_write+0x14/0x20 [ 727.023723] ? syscall_return_slowpath+0x550/0x550 [ 727.028640] ? syscall_return_slowpath+0x2ac/0x550 [ 727.033565] ? prepare_exit_to_usermode+0x350/0x350 [ 727.038569] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 727.043927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 727.048766] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 727.053943] RIP: 0033:0x4552d9 [ 727.057118] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 727.064814] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 727.072074] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 2018/04/02 19:58:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) socket$inet(0x2, 0x5, 0x1) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) [ 727.079330] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 727.086593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 727.093854] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000003 2018/04/02 19:58:44 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0xdbc, 0x4) 2018/04/02 19:58:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000270063810005000000000000000000a2000000000000000000000000"], 0x1}, 0x1}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x40000000000001, 0x204080) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x1, 0x2}, 0x20}, 0x59) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @loopback=0x7f000001}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r2}, 0x8) bind$rds(r1, &(0x7f0000000300)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000280)) 2018/04/02 19:58:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x9, 0x3, 0x1a}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) 2018/04/02 19:58:46 executing program 4 (fault-call:2 fault-nth:4): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:46 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3f, 0x200) setsockopt$inet_int(r1, 0x0, 0x9eb9bfc4f0a9bb0a, &(0x7f0000000100)=0x7, 0x4) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f00000000c0)=0xd8) 2018/04/02 19:58:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x220000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000100)="80e4c729a5eb38fa8380dc3b9c444c525ef2b9881181464fd936af4948502c78218f9e4c142c332a0a06686daf34b44f21c36597200878d7d58230f6f7e4a66b9e4e33110631b7943e363b72370d00ba02d2b197961da47e74e3e2f02b6377", 0x5f) 2018/04/02 19:58:46 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x3, 0x4, 0x200, 0x2, 0x400, 0x74, 0x3, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x100000000, 0x1, 0xff, 0x8, 0xbab}}, &(0x7f0000000100)=0xb0) prctl$seccomp(0x16, 0x1, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r1, 0xcc, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0xfffffffffffffffb}, @in6={0xa, 0x4e22, 0x9, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x1dd4}, @in6={0xa, 0x4e20, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x8}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e24, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0xa9}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x800, @local={0xfe, 0x80, [], 0xaa}, 0xba}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @rand_addr=0x101}]}, &(0x7f0000000280)=0x10) 2018/04/02 19:58:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x9) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) fcntl$dupfd(r0, 0x0, r0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x280000, 0x0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x801, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) sched_yield() r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xe4, 0x100) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000140)=""/4096, &(0x7f0000000080)=0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e, 0x0, 0x2}) 2018/04/02 19:58:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e24, 0x64dc, @mcast2={0xff, 0x2, [], 0x1}, 0xfa8}, @in6={0xa, 0x4e23, 0x80, @loopback={0x0, 0x1}, 0x5}, @in6={0xa, 0x4e24, 0x300000000000000, @local={0xfe, 0x80, [], 0xaa}, 0x1f}, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [0xff, 0xff], @rand_addr}, 0x7fff}, @in6={0xa, 0x4e21, 0x60d, @empty, 0x1}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}], 0xcc) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x3}) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) ioprio_get$uid(0x3, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000050000000000000c3007000000f049000000000000a2a515fba7f29003ad5c4aee585400"], 0x1}, 0x1}, 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0xfec, 0x200000) [ 728.853103] FAULT_INJECTION: forcing a failure. [ 728.853103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 728.864936] CPU: 0 PID: 13657 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 728.871937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 728.881278] Call Trace: [ 728.883857] dump_stack+0x1a7/0x27d [ 728.887478] ? arch_local_irq_restore+0x53/0x53 [ 728.892149] should_fail+0x914/0xae0 [ 728.895852] ? perf_trace_lock+0xd6/0x900 [ 728.899990] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 728.905089] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 728.910268] ? trace_event_raw_event_lock+0x340/0x340 [ 728.915448] ? print_irqtrace_events+0x270/0x270 [ 728.920191] ? trace_event_raw_event_lock+0x340/0x340 [ 728.925369] ? perf_trace_lock+0xd6/0x900 [ 728.929512] ? trace_hardirqs_off+0x10/0x10 [ 728.933823] ? lock_acquire+0x1d5/0x580 [ 728.937790] ? perf_trace_lock+0xd6/0x900 [ 728.941935] ? trace_event_raw_event_lock+0x340/0x340 [ 728.947119] ? should_fail+0x23b/0xae0 [ 728.951001] __alloc_pages_nodemask+0x327/0xdd0 [ 728.955666] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 728.960669] ? rcu_is_watching+0x85/0x130 [ 728.964804] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 728.969725] ? find_held_lock+0x35/0x1d0 [ 728.973798] ? check_same_owner+0x320/0x320 [ 728.978114] cache_grow_begin+0x72/0x6e0 [ 728.982171] kmem_cache_alloc+0x400/0x760 [ 728.986310] ? map_files_get_link+0x3b0/0x3b0 [ 728.990798] getname_flags+0xcb/0x580 [ 728.994593] user_path_at_empty+0x2d/0x50 [ 728.998733] do_mount+0x15f/0x2bb0 [ 729.002265] ? copy_mount_string+0x40/0x40 [ 729.006494] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 729.011505] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 729.016258] ? retint_kernel+0x10/0x10 [ 729.020140] ? copy_mount_options+0x18b/0x2e0 [ 729.024627] ? copy_mount_options+0x196/0x2e0 [ 729.029112] ? copy_mount_options+0x1f7/0x2e0 [ 729.033595] SyS_mount+0xab/0x120 [ 729.037033] ? copy_mnt_ns+0xb40/0xb40 [ 729.040909] do_syscall_64+0x281/0x940 [ 729.044785] ? vmalloc_sync_all+0x30/0x30 [ 729.048919] ? _raw_spin_unlock_irq+0x27/0x70 [ 729.053407] ? finish_task_switch+0x1c1/0x810 [ 729.057898] ? syscall_return_slowpath+0x550/0x550 [ 729.062820] ? syscall_return_slowpath+0x2ac/0x550 [ 729.067739] ? prepare_exit_to_usermode+0x350/0x350 [ 729.072746] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 729.078108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 729.082941] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 729.088115] RIP: 0033:0x4552d9 [ 729.091291] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 729.098985] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 729.106251] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 729.113504] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 729.120757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 729.128010] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000004 2018/04/02 19:58:46 executing program 4 (fault-call:2 fault-nth:5): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) [ 729.151644] audit: type=1326 audit(1522699126.717:915): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13655 comm="syz-executor7" exe="/root/syz-executor7" sig=9 arch=c000003e syscall=202 compat=0 ip=0x4552d9 code=0x0 2018/04/02 19:58:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) [ 729.295765] FAULT_INJECTION: forcing a failure. [ 729.295765] name failslab, interval 1, probability 0, space 0, times 0 [ 729.307063] CPU: 0 PID: 13679 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 729.314065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.323407] Call Trace: [ 729.325986] dump_stack+0x1a7/0x27d [ 729.329605] ? arch_local_irq_restore+0x53/0x53 [ 729.334274] should_fail+0x914/0xae0 [ 729.337976] ? kasan_check_read+0x11/0x20 [ 729.342115] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 729.347216] ? is_bpf_text_address+0xa4/0x120 [ 729.351707] ? find_held_lock+0x35/0x1d0 [ 729.355776] ? check_same_owner+0x320/0x320 [ 729.360083] ? putname+0xee/0x130 [ 729.363525] ? filename_lookup+0x315/0x500 [ 729.367745] ? user_path_at_empty+0x40/0x50 [ 729.372055] ? rcu_note_context_switch+0x710/0x710 [ 729.376974] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 729.382330] should_failslab+0xec/0x120 [ 729.386293] kmem_cache_alloc+0x47/0x760 [ 729.390342] ? perf_trace_lock+0xd6/0x900 [ 729.394481] ? trace_hardirqs_off+0xd/0x10 [ 729.398706] alloc_vfsmnt+0xe0/0x9c0 [ 729.402413] ? path_lookupat+0x238/0xba0 [ 729.406471] ? mnt_free_id.isra.21+0x50/0x50 [ 729.410869] ? kasan_check_read+0x11/0x20 [ 729.415002] ? rcu_is_watching+0x85/0x130 [ 729.419141] ? trace_hardirqs_off+0x10/0x10 [ 729.423456] ? trace_hardirqs_off+0xd/0x10 [ 729.427683] ? putname+0xee/0x130 [ 729.431126] ? putname+0xee/0x130 [ 729.434564] ? rcu_read_lock_sched_held+0x108/0x120 [ 729.439570] ? find_held_lock+0x35/0x1d0 2018/04/02 19:58:47 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") timer_create(0x1, &(0x7f0000000180)={0x0, 0x40, 0x6, @thr={&(0x7f0000000040)="a18fa86325c7f9a99fa39998657220531df3cd864a0373736cabfe7cb5cf373de78e579c28d1398c46cccdc9737f5207c97ae00f14adba8930a53a8a916c4eadd1f3df347f2d6d143fbbf789f95a46695e82234760dc64ce1e267f0ab9be336a6473de2c8d992bbac85b682e3018976204", &(0x7f00000000c0)="5f921342efe540eacaedf5e68af905eb1a1b7c97cfdcfe3ad058179e2ef8d0e9db9359e90a47ec3117a03f7aa22409accf131e4b14fc7243c8ec32efb2a353d81f54bc42e94ee1121a127d09c5f4a3491a6857f8c1aa2a8b083ad59bc2f0f640989fa19f749e519ae9453a947fd3b7fb2658f53db0a9ea00ac83266b7b9f913abbc8b080bf20f1144402659e236db3"}}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x77359400}, {r2, r3+10000000}}, &(0x7f0000000280)) [ 729.443634] ? __get_fs_type+0x8a/0xc0 [ 729.447508] ? lock_downgrade+0x980/0x980 [ 729.451645] ? module_unload_free+0x530/0x530 [ 729.456127] ? lock_release+0xa40/0xa40 [ 729.460094] ? mpi_resize+0x200/0x200 [ 729.463887] vfs_kern_mount.part.26+0x84/0x4a0 [ 729.468466] ? may_umount+0xa0/0xa0 [ 729.472096] ? _raw_read_unlock+0x22/0x30 [ 729.476242] ? __get_fs_type+0x8a/0xc0 [ 729.480130] do_mount+0xea4/0x2bb0 [ 729.483667] ? copy_mount_string+0x40/0x40 [ 729.487896] ? rcu_pm_notify+0xc0/0xc0 [ 729.491786] ? copy_mount_options+0x5f/0x2e0 2018/04/02 19:58:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/31, &(0x7f0000000100)=0x1f) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) [ 729.496187] ? rcu_read_lock_sched_held+0x108/0x120 [ 729.501199] ? kmem_cache_alloc_trace+0x459/0x740 [ 729.506041] ? kasan_check_write+0x14/0x20 [ 729.510270] ? _copy_from_user+0x99/0x110 [ 729.514415] ? copy_mount_options+0x1f7/0x2e0 [ 729.518915] SyS_mount+0xab/0x120 [ 729.522363] ? copy_mnt_ns+0xb40/0xb40 [ 729.526256] do_syscall_64+0x281/0x940 [ 729.530137] ? vmalloc_sync_all+0x30/0x30 [ 729.534278] ? _raw_spin_unlock_irq+0x27/0x70 [ 729.538768] ? finish_task_switch+0x1c1/0x810 2018/04/02 19:58:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget(0x2, 0x10000000008010) msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000003db2b0b2f13b07b100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xf0, 0x3, 0x1000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x5f8, 0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x1, @loopback={0x0, 0x1}, 0x81}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in={0x2, 0x4e24, @rand_addr=0x3}, @in6={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, @in6={0xa, 0x4e23, 0x2f79, @empty, 0x6}, @in6={0xa, 0x4e22, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffff8}], 0x90) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) [ 729.543259] ? syscall_return_slowpath+0x550/0x550 [ 729.548181] ? syscall_return_slowpath+0x2ac/0x550 [ 729.550134] audit: type=1326 audit(1522699127.072:916): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13655 comm="syz-executor7" exe="/root/syz-executor7" sig=9 arch=c000003e syscall=202 compat=0 ip=0x4552d9 code=0x0 [ 729.553106] ? prepare_exit_to_usermode+0x350/0x350 [ 729.553119] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 729.553134] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 729.553150] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 729.553159] RIP: 0033:0x4552d9 [ 729.553164] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 729.603726] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 729.610973] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 729.618223] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 729.625469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 729.632715] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000005 2018/04/02 19:58:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:47 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffffffffffff0000, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000280)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) fstat(r0, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638101e4befc624a91fcd6e171aaae2bf3050000004431000c30"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:47 executing program 4 (fault-call:2 fault-nth:6): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x40200) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x1, 0xfffffffffffffffa, 0x4, 0x7ff]}, &(0x7f00000000c0)=0xc) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/04/02 19:58:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101100, 0x8) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080), &(0x7f0000000140)=0x4) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:58:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x1000000, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000300)="da779cc54e163ea88bd4d79eca3423f4ab4f70fea62623f29e2ef3ce0039ca4f7ef793ac49962eba02000000000000008361c9858f1ec3b5eb87235ea7d460878132a64f57c6aaa66018bf80e3d55a5fc571b69a62aa68335033bcd5c8919603785ccbd1f2b8cf548b8806ad066bb7e9b2d1fb06fa2b570b73fb8fb519328a5cf3bd864445b677274fb8a2ec960c6ccaaf144f5b9d52d7277c59399b9e20896be6053fd57088edd084efb8aa608c6e48f1bf0072d487fd192dde19b82622d39b7dea7f6808b68785f33b73e43adf555c4bf51ea2288135a0e2f51e9ceb6fdddd5f4c22b8f1f8dc145d6fd800") execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000006ee612aafe4c326c9ea33e63d0c22d6b2da88f635532a1ba7213ef3a90dd35ed0357f2254d07c64e602d1ccef7fce44f0de89c5dde1cd40d699a040c1dee903d8ac477d4f3c56c8b251db189615e38e053a079a7bf12f5359df8ee2cd58219e1400f9c60756ba1a30532bdb668fb48253d8f6d5f6f4bd3ceeb3da2dc64fa47783312e73e28f22f17078a289cd76d59bcd28d4c9b48c2b91948f1ca9ce788a153dffc7d8be2ae78dc61a5dea0d1ccd9ae26879f2d7d0589485523aeb2bd2295c48d63"], &(0x7f0000000280)=0x8) sysfs$3(0x3) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x0, 0x7, [0x8, 0x0, 0x5, 0xd740000000000000, 0x7, 0xff, 0x2]}, &(0x7f00000000c0)=0x16) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x400000, 0x9, 0x6, 0x6, 0x4}, 0x14) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x101, 0x8, &(0x7f0000001500)=[{&(0x7f0000000140)="74a9e575f63deea9d34ed621", 0xc}, {&(0x7f0000000180)="c77377af215d802bd7b9e5ac6a27e0b0990131dbe3806be9531285673d70b2650246a5768b38487aa0e6363a75fe0089f9f7d22f1c194b5a1ee88959601832861722afa817343dd958424eb81ff19e02f0711b2757121c759fab0d2ce9f6175c03afbb398bd668808fadf1d0e1", 0x6d, 0x6}, {&(0x7f0000000200)="4e3de571c8b5b32c203dc7b9c3a9ac0438e443fafed367e67e5b2a148f3338ed3406f9d517bbda2e4998a33c68f0dde7cb244c08847311a026a212e15dcbdc04327b5110154e57f61a9dd82b57d4bfa178e79caecae942818c0308e05ed3e9876cc235625671d8d1df6727fe087c0d73e971960c2c217013f3866b33eb1e31964ed57e", 0x83, 0x98}, {&(0x7f0000000300)="177b1153252bf23dcb97b46d4124c4303c299dbe6b5b558dfccf5fe8c01764fe6517eb0b393edc9e833d9beba8a30cbbe59648f27108edb27316bcca66ab9cedc87cd57dffb7a41ed82544e064046b47044fb250ffa8df1862ae9bb7625e4a8f120c2febc18977c62fbb1ab4a7b51e79fac5b84d9d138e0e0f81b7a0bf6794a00c83299de09a6d6bfc2e08521bbda61a58e13e914dc64e2a9e9106feacae73f7d9fa355f3a438605f4", 0xa9, 0x3}, {&(0x7f00000003c0)="1773039edf9c", 0x6, 0xccc}, {&(0x7f0000000400)="a185f9cfd95d4c5d1bed71", 0xb, 0x10000}, {&(0x7f0000000440)="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", 0x1000, 0x1}, {&(0x7f0000001440)="8e12ec8ca0f78896f4884a6acf5091518d359f6b194d9be5fd414931c8d9d1ee1a5fd74e8d1cdcfe6807391054649f5d1eb342bf0501d7f0b8986d18e52d2808d78430ab987ee54eb1f16afae68b8319c30542547a413804f9b5a7e6f4cd247d5647c8540ad6542bed09e4321d73b868e47df2b37a001c6dce3a82d0b63dba57008eb3468906817116ab5cfa652c43b9077cba", 0x93, 0x8}], 0x100000, &(0x7f00000015c0)={[{@showexec='showexec', 0x2c}, {@nfs_nostale_ro='nfs=nostale_ro', 0x2c}, {@nocase='nocase', 0x2c}, {@nocase='nocase', 0x2c}, {@codepage={'codepage', 0x3d, '862'}, 0x2c}, {@nfs='nfs', 0x2c}, {@sys_immutable='sys_immutable', 0x2c}, {@nocase='nocase', 0x2c}]}) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000240)="9c1d9f3b1b50375e2c5cb530ff01ebd6f8e14915c74a09ca680ead11ff4595de3cf09e63b2bdf127ea4b6b5f05063bc27088b375011ef74bed0bb9a647195b1b0a53faa7d951b04c7e7f367917d09663839712d9aad866098a8937abc25f08242c827d819491b377542f9a81d6b2036f6be9c9bb39ca38c876604f929ed246c047363b5a85bb13b1482ee27d0a51bc9ca440213c08453c4838f9aafbac4b5eb497e2c22c70bcbde68331801851478e30585055a0abdca56a2b4b6ebefd5c23cfad0a57b2cbfef063d950daa6c9b9282c6ecde7c1380000000000000000", 0xdd) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3f62501a) 2018/04/02 19:58:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 2018/04/02 19:58:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002cc0)='/proc/self/net/pfkey\x00', 0x40040, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002d00)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}}}, &(0x7f0000002e00)=0xe8) 2018/04/02 19:58:48 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, 0x3f, 0x1, 0x5b0, 0x100, 0x2, 0x80000, r1}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@rand_addr=0x9, @multicast1=0xe0000001, 0x1, 0x1, [@remote={0xac, 0x14, 0x14, 0xbb}]}, 0x14) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000240)=0x44) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r2 = getpgid(0xffffffffffffffff) ptrace$pokeuser(0x6, r2, 0x5, 0x8) epoll_pwait(r0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0xa6, &(0x7f0000000300)={0x101}, 0x8) [ 730.459790] FAULT_INJECTION: forcing a failure. [ 730.459790] name failslab, interval 1, probability 0, space 0, times 0 [ 730.471088] CPU: 0 PID: 13716 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 730.478091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.487434] Call Trace: [ 730.490013] dump_stack+0x1a7/0x27d [ 730.493634] ? arch_local_irq_restore+0x53/0x53 [ 730.498288] ? __unwind_start+0x169/0x330 [ 730.502440] should_fail+0x914/0xae0 [ 730.506149] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 730.511241] ? perf_trace_lock+0xd6/0x900 [ 730.515383] ? save_stack+0xa3/0xd0 [ 730.518999] ? trace_event_raw_event_lock+0x340/0x340 [ 730.524202] ? kasan_slab_alloc+0x12/0x20 [ 730.528344] ? alloc_vfsmnt+0xe0/0x9c0 [ 730.532223] ? vfs_kern_mount.part.26+0x84/0x4a0 [ 730.536967] ? do_mount+0xea4/0x2bb0 [ 730.540672] ? find_held_lock+0x35/0x1d0 [ 730.544749] ? check_same_owner+0x320/0x320 [ 730.549060] ? rcu_note_context_switch+0x710/0x710 [ 730.553983] should_failslab+0xec/0x120 [ 730.557945] __kmalloc_track_caller+0x5f/0x760 [ 730.562517] ? kasan_check_read+0x11/0x20 [ 730.566651] ? do_raw_spin_unlock+0x9e/0x310 [ 730.571048] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 730.575620] ? kstrdup_const+0x39/0x50 [ 730.579500] kstrdup+0x39/0x70 [ 730.582682] kstrdup_const+0x39/0x50 [ 730.586392] alloc_vfsmnt+0x1a5/0x9c0 [ 730.590179] ? path_lookupat+0x238/0xba0 [ 730.594322] ? mnt_free_id.isra.21+0x50/0x50 [ 730.598720] ? kasan_check_read+0x11/0x20 [ 730.602857] ? rcu_is_watching+0x85/0x130 [ 730.606993] ? trace_hardirqs_off+0x10/0x10 [ 730.611299] ? trace_hardirqs_off+0xd/0x10 [ 730.615525] ? putname+0xee/0x130 [ 730.618966] ? putname+0xee/0x130 [ 730.622409] ? rcu_read_lock_sched_held+0x108/0x120 [ 730.627418] ? find_held_lock+0x35/0x1d0 [ 730.631473] ? __get_fs_type+0x8a/0xc0 [ 730.635353] ? lock_downgrade+0x980/0x980 [ 730.639489] ? module_unload_free+0x530/0x530 [ 730.643975] ? lock_release+0xa40/0xa40 [ 730.647937] ? mpi_resize+0x200/0x200 [ 730.651733] vfs_kern_mount.part.26+0x84/0x4a0 [ 730.656302] ? may_umount+0xa0/0xa0 [ 730.659926] ? _raw_read_unlock+0x22/0x30 [ 730.664072] ? __get_fs_type+0x8a/0xc0 [ 730.667958] do_mount+0xea4/0x2bb0 [ 730.671503] ? copy_mount_string+0x40/0x40 [ 730.675735] ? rcu_pm_notify+0xc0/0xc0 [ 730.679624] ? copy_mount_options+0x5f/0x2e0 [ 730.684030] ? rcu_read_lock_sched_held+0x108/0x120 [ 730.689037] ? kmem_cache_alloc_trace+0x459/0x740 [ 730.693872] ? kasan_check_write+0x14/0x20 [ 730.698094] ? _copy_from_user+0x99/0x110 [ 730.702233] ? copy_mount_options+0x1f7/0x2e0 [ 730.706722] SyS_mount+0xab/0x120 [ 730.710160] ? copy_mnt_ns+0xb40/0xb40 [ 730.714035] do_syscall_64+0x281/0x940 [ 730.717910] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 730.723434] ? syscall_return_slowpath+0x550/0x550 [ 730.728358] ? syscall_return_slowpath+0x2ac/0x550 [ 730.733277] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 730.738633] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 730.743468] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 730.748644] RIP: 0033:0x4552d9 [ 730.751817] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2018/04/02 19:58:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700639100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) [ 730.759515] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 730.766773] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 730.774027] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 730.781280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 730.788538] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000006 2018/04/02 19:58:48 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x20201, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000080)="d34adbe90a47f4", &(0x7f00000000c0)=""/228}, 0x18) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xd0200, 0x1) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000340)={0x1, &(0x7f0000000100)=""/52, &(0x7f0000000300)=[{0x101, 0x59, 0x401, &(0x7f0000000240)=""/89}]}) [ 731.179902] QAT: Invalid ioctl [ 731.317698] QAT: Invalid ioctl 2018/04/02 19:58:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:49 executing program 4 (fault-call:2 fault-nth:7): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000270063810005000000000000033007dc3f00f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000080)={0x1000, "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"}) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000010c0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x1f, 0x4, 0xacc, 0x1, 0x20}, &(0x7f0000001180)=0x98) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001200)=""/45, 0x2d}, {&(0x7f0000001240)=""/14, 0xe}, {&(0x7f0000001280)=""/217, 0xd9}, {&(0x7f0000001380)=""/161, 0xa1}, {&(0x7f0000001440)=""/6, 0x6}, {&(0x7f0000001480)=""/106, 0x6a}, {&(0x7f0000001500)=""/238, 0xee}, {&(0x7f0000001600)=""/69, 0x45}, {&(0x7f0000001680)=""/95, 0x5f}], 0x9, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000011c0)={r1, 0x7d}, 0x8) 2018/04/02 19:58:49 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc01848fe, &(0x7f0000d68f5d)="60bc836ead2c9193cf") syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6, 0x101000) 2018/04/02 19:58:49 executing program 2: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f00003fd000)) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="900000001f7ce32a246288397a83a0033e176e0b81e8a2c85ad0747dd7f110bd8aee95cdf385c5b953bcf2cfb32caefd3e53a8d7656fb2f603e1b2674084d2567a1650400744003ed5a8cf33bc86501790e12477c60b9a0e208faffc8806232d35ffb63ef71957cea4f2bddc6d8e519c2bcd44cc48c699a5495d1632a4a657e5a7d3104256131992fa3bf21949ea2cffbd91e8b1"], &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e22, @rand_addr=0x400}}, 0x1}, 0x90) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 2018/04/02 19:58:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="35af9f8ce0300a27d203c8619f93407f8d879d0d25409983e430401185d4e808ad8fa7fe46dabf7f92d80bf757b49e8c1c7c8ca842ed94324069"], &(0x7f0000000280)=0x8) sysfs$3(0x3) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:49 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10000, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0x81) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x7, 0x4, 0x400, 0xfffffffffffffffa}) write$sndseq(r1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r1}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:58:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$inet6(0xa, 0x6, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x7f, 0x1, 0x0, 0x1, 0xffffffff}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000fe49000000000000a200"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 2018/04/02 19:58:49 executing program 2: unshare(0x400) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0x9) ioctl$int_in(0xffffffffffffffff, 0xaf01, &(0x7f00001e3000)) r1 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000001c0)=0x1) r2 = eventfd2(0x0, 0x0) prctl$setname(0xf, &(0x7f0000000040)='/dev/vhost-net\x00') getrusage(0x0, &(0x7f0000000080)) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000200)=0x4) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=r2) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x2, 0x200000) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000180)={0x101ff, 0x0, &(0x7f0000ffb000/0x4000)=nil}) 2018/04/02 19:58:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x68002, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x1f) [ 732.248559] FAULT_INJECTION: forcing a failure. [ 732.248559] name failslab, interval 1, probability 0, space 0, times 0 [ 732.260257] CPU: 0 PID: 13781 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 732.267268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.276698] Call Trace: [ 732.279279] dump_stack+0x1a7/0x27d [ 732.282901] ? arch_local_irq_restore+0x53/0x53 [ 732.287567] should_fail+0x914/0xae0 [ 732.291278] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 732.296368] ? find_next_zero_bit+0xe3/0x110 [ 732.300780] ? find_held_lock+0x35/0x1d0 [ 732.304836] ? __lock_is_held+0xb6/0x140 [ 732.308894] ? check_same_owner+0x320/0x320 [ 732.313208] ? __might_sleep+0x95/0x190 [ 732.317172] ? rcu_note_context_switch+0x710/0x710 [ 732.322100] should_failslab+0xec/0x120 [ 732.326064] __kmalloc+0x63/0x760 [ 732.329506] ? lockdep_init_map+0x9/0x10 [ 732.333553] ? debug_mutex_init+0x2d/0x60 [ 732.337690] ? __list_lru_init+0xcf/0x750 [ 732.341831] __list_lru_init+0xcf/0x750 [ 732.345800] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 732.351677] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 732.356680] ? __lockdep_init_map+0xe4/0x650 [ 732.361079] ? lockdep_init_map+0x9/0x10 [ 732.365131] sget_userns+0x6a2/0xe60 [ 732.368829] ? get_anon_bdev+0x2a0/0x2a0 [ 732.372888] ? destroy_unused_super.part.7+0xf0/0xf0 [ 732.377979] ? rcu_read_lock_sched_held+0x108/0x120 [ 732.382982] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 732.387820] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 732.392823] ? rcu_is_watching+0x85/0x130 [ 732.396962] ? trace_hardirqs_off+0x10/0x10 [ 732.401269] ? trace_hardirqs_off+0xd/0x10 [ 732.405496] ? cap_capable+0x1b5/0x230 [ 732.409379] ? security_capable+0x8e/0xc0 [ 732.413518] ? get_anon_bdev+0x2a0/0x2a0 [ 732.417570] ? ns_capable_common+0xcf/0x160 [ 732.421880] ? get_anon_bdev+0x2a0/0x2a0 [ 732.425925] sget+0xd2/0x120 [ 732.428933] ? __get_fs_type+0x8a/0xc0 [ 732.432812] ? shmem_remount_fs+0x750/0x750 [ 732.437119] mount_nodev+0x37/0x100 [ 732.440734] shmem_mount+0x2c/0x40 [ 732.444269] mount_fs+0x66/0x2d0 [ 732.447626] vfs_kern_mount.part.26+0xc6/0x4a0 [ 732.452205] ? may_umount+0xa0/0xa0 [ 732.455820] ? _raw_read_unlock+0x22/0x30 [ 732.459955] ? __get_fs_type+0x8a/0xc0 [ 732.463838] do_mount+0xea4/0x2bb0 [ 732.467381] ? copy_mount_string+0x40/0x40 [ 732.471612] ? rcu_pm_notify+0xc0/0xc0 [ 732.475500] ? copy_mount_options+0x5f/0x2e0 [ 732.479900] ? rcu_read_lock_sched_held+0x108/0x120 [ 732.484896] ? kmem_cache_alloc_trace+0x459/0x740 [ 732.489725] ? copy_mount_options+0x1f7/0x2e0 [ 732.494204] SyS_mount+0xab/0x120 [ 732.497633] ? copy_mnt_ns+0xb40/0xb40 [ 732.501500] do_syscall_64+0x281/0x940 [ 732.505366] ? vmalloc_sync_all+0x30/0x30 [ 732.509493] ? _raw_spin_unlock_irq+0x27/0x70 [ 732.513966] ? finish_task_switch+0x1c1/0x810 [ 732.518437] ? syscall_return_slowpath+0x550/0x550 [ 732.523344] ? syscall_return_slowpath+0x2ac/0x550 [ 732.528252] ? prepare_exit_to_usermode+0x350/0x350 [ 732.533248] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 732.538590] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 732.543414] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/02 19:58:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="290700a7d108dc81000500000020e7ff0c3007000000f049000000000000a200c3e2ebe7008ca18bc1d41f1e7848ead7ef92e25f09e4e68f3517077ae7ac7037b1c083b6a342e609a5d5cca441e95897fb8bc197a08509f698c466af6c4eff5de912c3224041432e2a6c1b9e2612b3887428d090d6ea0e55093e1d0c56c5949c26f23344f16332b7ca899bb4379032c5aef366baec7714b408c2d5b1cc22263db9971403e4e0d850b99d162abfac82833d094f01d8e38b301cf3dddc27727fbeb6125a87617ff6baf7543c065b43b6c26b42a5a312e13c34230d6be95953f8f1040e15bb7d4af51eab7d41b1dc30cd400119048e70dc6a00000000000000000000000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:50 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8001000000000000, 0x3c1502) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x100}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001000)={r3, 0x1, 0x1000, "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"}, 0x1008) prctl$setname(0xf, &(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00') rt_tgsigqueueinfo(r0, r1, 0x3a, &(0x7f0000000180)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000481000)=""/128, 0x80) [ 732.548579] RIP: 0033:0x4552d9 [ 732.551747] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 732.559431] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 732.566680] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 732.573927] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 732.581179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 732.588425] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000007 2018/04/02 19:58:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280), &(0x7f00000003c0)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x4) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000300)={0x3, 0x0, [{0x7fff, 0x7, 0x0, 0x0, @irqchip={0x2, 0x8}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x7, 0xfffffffffffffff8}}, {0x8001, 0x3, 0x0, 0x0, @irqchip={0x561, 0x7fff}}]}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x400, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xf, 0x15, "c3bcfc9c68ddcee9d1af25099c8a4f2e5de4ba1e7724e8ec8960178b48f47c57624ac9bf570a9c4ce4e18c97aa502af35f4c7298cc77481125bb4d5bcc90fe1e", "e4c27d5962c99a6b899d5c04f8078ddbae150575311e6e1fd1a3a0976605f6ac61951d4219559d8563f60460f1dae2ffc309e5e43fdd36126162cbe2ca0387e1", "bd3dcc0d2641b0984507c5e23112232ac6abc84f349f98d07143529794f512cf", [0x0, 0x100000000]}) 2018/04/02 19:58:50 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000040)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000000340)) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x100) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000180)={[], 0xffff, 0x0, 0x7, 0x0, 0x1000, 0x10f000, 0x0, [], 0x6}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r3) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000000c0)={0x8}) tkill(r0, 0x1f) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) 2018/04/02 19:58:50 executing program 1: r0 = shmget(0x1, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20080000270063810000f049000000000000a200000000000000000000000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:51 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x220800, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000100)={0x3, 0x8}) 2018/04/02 19:58:51 executing program 4 (fault-call:2 fault-nth:8): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200100002700638100050000000000000c3007000000f049000000000200a2008dfbffb468a15700bfa24d06828ecea8939f5f465c8f0219000000000000858010ef96c4ef096f84d55f86477f09a0021c1714794f0acf54dfcff395e774306eb89076672a79148dd965f0f49797c1f5e82878cc74d697cc0fa2da5fd111095064f298800c2ea8f8f6af86c93c3ed00c1c0f03d6fb9c062d93b7d7"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x0, 0xfffffffffffffffc, 0x4000, 0xffffffffffffffff}) 2018/04/02 19:58:51 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x400) sendto$unix(r0, &(0x7f0000000140)="38563e0a381ccdf63b26ca52f9ac930671dea4296638729fe0fbbbe991cee00e206416263e7650f9c5c2d6627debfffc1e1cf68cb86e1f6cfd6fabdca549cae3a0c94d15b25f13447dbf674aee4ab96435c3f8ee6da2b94d14be574f2221bbc1c58824a3457496c9f16b00ccd95960e118ab6be612612ef1594e1b1a08551456cd230000045f257ab84fc8687b9d30bdb163b32ed0dd6a58d2ebe4046bda4bee356e348828f590c60dde3388eb85c9", 0xaf, 0x44000, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x2, 0x2000, 0x885, &(0x7f0000ffd000/0x2000)=nil) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x2}) 2018/04/02 19:58:51 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x8, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000001800)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000110023000000000000000000ac146600006b030e23743a69695c92f20207df5b000000000000720ee94666f64cb2de6228cdae3ebddc0b91f1402533b20a0253f72429c97ba046a4792adcdaede7deeb555c462043f0f50e3a56468cea25f01f9e54e8990a11ffff684d1aafa249c16c446aac925d003fce004bec9be2141ce2062189ac1be27b0d1315ebafbfa395f2573824913f8e927053985135a7b9b89b5ce9dfa6d0c91871ab5bd1e389c39b2115af6d00cd07be0b5f571294930aeae05f8668bf9d2a8d9368457b1e74b824703b4d82236ae2e9362cd3c8c483b16f62000000f77de8108c0f5005e15fcca76a657b2e0f0cac3268aa072ce6773cb140c54db5094316e99c7a9d965b"], 0x28}, 0x1}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000000c0)=0x2, 0x4) 2018/04/02 19:58:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0804553dfbd8bdb50c32718dc33a1e0328073778ce9c6a07febc72c53560279a2c4a2b0cf7bd33e517ce93d750a0e279b23fc33b7b5c3f4d22770b8fc85d2f0e8c9077f38057279156ec80f6d3ed2ba835ce7e5ea037deb779c50ba078153d854b42017681ef99815fd3"], &(0x7f0000000280)=0x8) sysfs$3(0x3) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) r2 = shmget(0x0, 0x3000, 0x1100, &(0x7f0000878000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:51 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x4}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:51 executing program 2: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x0, 0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x200000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x26}, @in6={0xa, 0x4e23, 0x10000, @empty, 0xfffffffffffff131}, @in6={0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x8}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e23, @multicast1=0xe0000001}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r1, 0x79, "1ac0c57feafa701dffc605a99a0ff6aae01a998ff3630cffdbaecf3adb5813c1ec1435cadb8421bdfb2d584f7595157b797d985e27020ebfca87e28286801243f0ffcebc9aad725742a74bdf6b2c26755d050b8e350a6d4da5fd1df9a050cc3bf386fd5050891bcde12f3f2d61573a23e81a554e18eaa9e517"}, &(0x7f0000000180)=0x81) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000, 0x0, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82}, &(0x7f0000000180)=0x20) r3 = socket(0x1d, 0xb, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000b80)='/dev/loop#\x00', 0x0, 0x4006) r5 = memfd_create(&(0x7f0000000000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x3, 0xffffffff}, &(0x7f0000000440)=0x10) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000c80)={{0x2, 0x3, 0x3, 0x4d, "a723aca0f67bbf373237eac7e055357a8a7489b8b9aaa5b0f2931944abb4bebe4368b7baa91952c31e9ae1c2", 0x50cd072f}, 0x0, [0xa000000000000, 0x5000000000000000, 0xd8, 0x992, 0x4, 0x6, 0xffffffffffffffff, 0x4, 0x401, 0x7fffffff, 0x9f, 0x7, 0xfff, 0x8, 0x24, 0x1f, 0x8, 0x703f, 0x20, 0x8e58, 0xbd85, 0xe6, 0x0, 0x20, 0x179d0252, 0x8000, 0x2, 0x5, 0xfffffffffffffffa, 0x1, 0x9, 0x7ff, 0x4c04, 0x7, 0x6, 0x4, 0x5, 0x2, 0xff, 0xffffffffffff0000, 0x8, 0x4b8, 0x35c2, 0x5f, 0x8, 0x0, 0x7fffffff, 0x6, 0x9, 0x8b0, 0x80000000, 0x7, 0x1, 0x5, 0x7, 0x1f, 0xffffffff, 0xfff, 0x442, 0x80000001, 0xfffffffffffffffc, 0x8, 0x2, 0x0, 0x7, 0xfff, 0x7ff, 0x6, 0x6, 0x4, 0x40, 0x3, 0xa8f, 0x7563, 0xffffffffffffff7f, 0x1ff, 0x100000000, 0xf9fc, 0x7, 0x3, 0x7, 0x7, 0x2, 0x7fff, 0x401, 0x1f, 0x0, 0x2, 0x3f, 0x101, 0x81, 0x40, 0xaf1e, 0xdc7, 0x3, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x1, 0x2, 0x7fffffff, 0xc3, 0x1c0000000000, 0x0, 0x9, 0x8aa4, 0x3, 0x8, 0x4, 0x323, 0x0, 0x9, 0x1, 0x3, 0x7, 0x7ff, 0xfffffffffffffff9, 0x81, 0x6, 0x6, 0xb2, 0x9, 0x5917d376, 0x8, 0x100, 0x1ff, 0xc3], {r6, r7+30000000}}) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x10001, 0x81, 0x9}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e23, 0x81, @mcast2={0xff, 0x2, [], 0x1}, 0x7fff}}, 0x2, 0x4, 0xf8, 0x1, 0x6}, &(0x7f0000000700)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000740)={0x0, 0x200}, &(0x7f0000000340)=0x8) pselect6(0x40, &(0x7f0000000a80)={0x28b, 0x3, 0x9, 0x8001, 0xff, 0x1ff, 0x40, 0x10000}, &(0x7f0000000b00)={0x92a, 0x7, 0x7fff, 0x9, 0x0, 0x5, 0x8, 0x1f}, &(0x7f0000000b40)={0x80000001, 0x81, 0x2, 0x4, 0x3, 0x7, 0xb3f5, 0x37ef}, &(0x7f0000000bc0), &(0x7f0000000c40)={&(0x7f0000000c00)={0x6}, 0x8}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0xe}, 0x3}}}, &(0x7f0000000880)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000008c0)={0x0, 0x1b5}, &(0x7f0000000900)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)=@in={0x2, 0x4e20}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="b25b2002e7d8bc055c7d9ed742f2ca865f150419606e27d187b4ce0f2f81d8a0ab0d18a71f265b68c86f9c82600911dcc4698a4baebfb56adf90bec3", 0x3c}], 0x1, &(0x7f0000000940), 0x0, 0x24000001}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ipddp0\x00', @ifru_mtu=0x1}) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r4, 0x4c01) fdatasync(r4) 2018/04/02 19:58:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000000c0)={r1, 0x3}) [ 733.804884] FAULT_INJECTION: forcing a failure. [ 733.804884] name failslab, interval 1, probability 0, space 0, times 0 [ 733.816151] CPU: 0 PID: 13842 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 733.823152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.832490] Call Trace: [ 733.835078] dump_stack+0x1a7/0x27d [ 733.838700] ? arch_local_irq_restore+0x53/0x53 [ 733.843359] ? kasan_check_write+0x14/0x20 [ 733.847589] should_fail+0x914/0xae0 [ 733.851295] ? lock_downgrade+0x980/0x980 [ 733.855433] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 733.860524] ? kasan_check_read+0x11/0x20 [ 733.864664] ? rcu_is_watching+0x85/0x130 [ 733.868800] ? perf_trace_lock+0xd6/0x900 [ 733.872944] ? find_held_lock+0x35/0x1d0 [ 733.877011] ? check_same_owner+0x320/0x320 [ 733.881322] ? sget_userns+0x27d/0xe60 [ 733.885196] ? rcu_note_context_switch+0x710/0x710 [ 733.890123] should_failslab+0xec/0x120 [ 733.894092] kmem_cache_alloc_trace+0x4b/0x740 [ 733.898664] ? kasan_check_write+0x14/0x20 [ 733.902884] ? do_raw_spin_lock+0xc1/0x230 [ 733.907112] sget_userns+0x2a3/0xe60 [ 733.910814] ? get_anon_bdev+0x2a0/0x2a0 [ 733.914872] ? destroy_unused_super.part.7+0xf0/0xf0 [ 733.919962] ? rcu_read_lock_sched_held+0x108/0x120 [ 733.924966] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 733.929804] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 733.934808] ? rcu_is_watching+0x85/0x130 [ 733.938943] ? trace_hardirqs_off+0x10/0x10 [ 733.943250] ? trace_hardirqs_off+0xd/0x10 [ 733.947476] ? cap_capable+0x1b5/0x230 [ 733.951354] ? security_capable+0x8e/0xc0 [ 733.955489] ? get_anon_bdev+0x2a0/0x2a0 [ 733.959539] ? ns_capable_common+0xcf/0x160 [ 733.963849] ? get_anon_bdev+0x2a0/0x2a0 [ 733.967900] sget+0xd2/0x120 [ 733.970907] ? __get_fs_type+0x8a/0xc0 [ 733.974787] ? shmem_remount_fs+0x750/0x750 [ 733.979097] mount_nodev+0x37/0x100 [ 733.982715] shmem_mount+0x2c/0x40 [ 733.986246] mount_fs+0x66/0x2d0 [ 733.989603] vfs_kern_mount.part.26+0xc6/0x4a0 [ 733.994174] ? may_umount+0xa0/0xa0 [ 733.997792] ? _raw_read_unlock+0x22/0x30 [ 734.001927] ? __get_fs_type+0x8a/0xc0 [ 734.005805] do_mount+0xea4/0x2bb0 [ 734.009335] ? kasan_check_read+0x11/0x20 [ 734.013468] ? do_raw_spin_unlock+0x9e/0x310 [ 734.017875] ? copy_mount_string+0x40/0x40 [ 734.022109] ? rcu_pm_notify+0xc0/0xc0 [ 734.026000] ? copy_mount_options+0x5f/0x2e0 [ 734.030403] ? rcu_read_lock_sched_held+0x108/0x120 [ 734.035418] ? kmem_cache_alloc_trace+0x459/0x740 [ 734.040257] ? kasan_check_write+0x14/0x20 [ 734.044496] ? copy_mount_options+0x1f7/0x2e0 [ 734.048991] SyS_mount+0xab/0x120 [ 734.052432] ? copy_mnt_ns+0xb40/0xb40 [ 734.056315] do_syscall_64+0x281/0x940 [ 734.060195] ? vmalloc_sync_all+0x30/0x30 [ 734.064338] ? _raw_spin_unlock_irq+0x27/0x70 [ 734.068825] ? finish_task_switch+0x1c1/0x810 [ 734.073307] ? syscall_return_slowpath+0x550/0x550 [ 734.078226] ? syscall_return_slowpath+0x2ac/0x550 [ 734.083143] ? prepare_exit_to_usermode+0x350/0x350 [ 734.088146] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 734.093500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 734.098337] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 734.103513] RIP: 0033:0x4552d9 2018/04/02 19:58:51 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x6, 0x40002) setsockopt$inet_dccp_int(r1, 0x21, 0x7, &(0x7f0000000080)=0x10001, 0x4) shmget(0xffffffffffffffff, 0x1000, 0x54000a10, &(0x7f0000ffd000/0x1000)=nil) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 2018/04/02 19:58:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000270063050000000000000c300715df3e437b7afc6751e18eae617a210000020049000000000000a2009454174ed18b29a0a78950f85f0b6633a070cca2084ca2cba5dce1250a5f68dac266f42c7deb938a549b6c70efcad6942be22fe2c929c4ea7a05762bb3a25096b84a700b0600138f8a20d774ea271335d5354cbbade8209ea88f57ef43e4f5500b8846bba08ff0945537d50eb3f12c107c607bd965"], 0x1}, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = dup2(r0, r0) ioctl$TCFLSH(r2, 0x540b, 0x7fff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="02001000", @ANYRES16=r1, @ANYBLOB="020026bd7000ffdbdf250e000000080004006a5700000c000300080007004e230000380003001400060000000000000000000000ffffac1414bb080008000600000008000500e0000001080003000400000008000400800000000c0002006311fc50b865f5c0"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c0d1}, 0xc084) r3 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x4, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000340)) [ 734.106686] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 734.114386] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 734.121644] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 734.128900] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 734.136153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 734.143410] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000008 2018/04/02 19:58:51 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4000000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:51 executing program 4 (fault-call:2 fault-nth:9): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) [ 734.296331] FAULT_INJECTION: forcing a failure. [ 734.296331] name failslab, interval 1, probability 0, space 0, times 0 [ 734.307608] CPU: 0 PID: 13876 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 734.314627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.323976] Call Trace: [ 734.326571] dump_stack+0x1a7/0x27d [ 734.330205] ? arch_local_irq_restore+0x53/0x53 [ 734.334873] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 734.339809] should_fail+0x914/0xae0 [ 734.343523] ? is_bpf_text_address+0xa4/0x120 [ 734.348022] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 734.353135] ? __kernel_text_address+0xd/0x40 [ 734.357631] ? unwind_get_return_address+0x61/0xa0 [ 734.362575] ? find_held_lock+0x35/0x1d0 [ 734.366637] ? __lock_is_held+0xb6/0x140 [ 734.370704] ? check_same_owner+0x320/0x320 [ 734.375019] ? rcu_note_context_switch+0x710/0x710 [ 734.379949] should_failslab+0xec/0x120 [ 734.383914] kmem_cache_alloc_trace+0x4b/0x740 [ 734.388485] ? __kmalloc_node+0x33/0x70 [ 734.392446] ? __kmalloc_node+0x33/0x70 [ 734.396407] ? rcu_read_lock_sched_held+0x108/0x120 [ 734.401422] __memcg_init_list_lru_node+0x169/0x270 [ 734.406432] ? list_lru_add+0x7c0/0x7c0 [ 734.410395] ? __kmalloc_node+0x47/0x70 [ 734.414361] __list_lru_init+0x544/0x750 [ 734.418420] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 734.424298] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 734.429309] ? __lockdep_init_map+0xe4/0x650 [ 734.433710] ? lockdep_init_map+0x9/0x10 [ 734.437763] sget_userns+0x6a2/0xe60 [ 734.441464] ? get_anon_bdev+0x2a0/0x2a0 [ 734.445524] ? destroy_unused_super.part.7+0xf0/0xf0 [ 734.450615] ? rcu_read_lock_sched_held+0x108/0x120 [ 734.455621] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 734.460458] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 734.465465] ? rcu_is_watching+0x85/0x130 [ 734.469600] ? trace_hardirqs_off+0x10/0x10 [ 734.473910] ? trace_hardirqs_off+0xd/0x10 [ 734.478135] ? cap_capable+0x1b5/0x230 [ 734.482019] ? security_capable+0x8e/0xc0 [ 734.486153] ? get_anon_bdev+0x2a0/0x2a0 [ 734.490200] ? ns_capable_common+0xcf/0x160 [ 734.494509] ? get_anon_bdev+0x2a0/0x2a0 [ 734.498553] sget+0xd2/0x120 [ 734.501562] ? __get_fs_type+0x8a/0xc0 [ 734.505437] ? shmem_remount_fs+0x750/0x750 [ 734.509744] mount_nodev+0x37/0x100 [ 734.513359] shmem_mount+0x2c/0x40 [ 734.516885] mount_fs+0x66/0x2d0 [ 734.520246] vfs_kern_mount.part.26+0xc6/0x4a0 [ 734.524815] ? may_umount+0xa0/0xa0 [ 734.528434] ? _raw_read_unlock+0x22/0x30 [ 734.532566] ? __get_fs_type+0x8a/0xc0 [ 734.536448] do_mount+0xea4/0x2bb0 [ 734.539984] ? copy_mount_string+0x40/0x40 [ 734.544212] ? rcu_pm_notify+0xc0/0xc0 [ 734.548093] ? copy_mount_options+0x5f/0x2e0 [ 734.552486] ? rcu_read_lock_sched_held+0x108/0x120 [ 734.557491] ? kmem_cache_alloc_trace+0x459/0x740 [ 734.562326] ? copy_mount_options+0x1f7/0x2e0 [ 734.566810] SyS_mount+0xab/0x120 [ 734.570250] ? copy_mnt_ns+0xb40/0xb40 [ 734.574125] do_syscall_64+0x281/0x940 [ 734.578010] ? vmalloc_sync_all+0x30/0x30 [ 734.582153] ? _raw_spin_unlock_irq+0x27/0x70 [ 734.586646] ? finish_task_switch+0x1c1/0x810 [ 734.591140] ? syscall_return_slowpath+0x550/0x550 [ 734.596068] ? syscall_return_slowpath+0x2ac/0x550 [ 734.600994] ? prepare_exit_to_usermode+0x350/0x350 [ 734.606019] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 734.611383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 734.616220] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 734.621397] RIP: 0033:0x4552d9 [ 734.624572] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 734.632267] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 734.639522] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 734.646776] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 734.654031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 734.661287] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000009 [ 734.674923] print_req_error: I/O error, dev loop0, sector 0 [ 734.704559] print_req_error: I/O error, dev loop0, sector 0 2018/04/02 19:58:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x7, r0}) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000140)=0x800) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x1) ioctl$TCXONC(r0, 0x540a, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000180)) ioctl$TCXONC(r0, 0x540a, 0x4) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[0x101]}) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f00000001c0)={0x80, 0x7, 0x4000, 0x702}) 2018/04/02 19:58:52 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x7, 0x8000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd6c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, @perf_bp, 0x2, 0x4e11b533, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:52 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip6_mr_cache\x00') setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000380)=0x5c62, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") nanosleep(&(0x7f0000000040), 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x1220}}, [0x3, 0x2, 0x1000, 0xef3f, 0x8b, 0x7, 0x8, 0x80, 0x5, 0x9, 0x1, 0x43, 0x1, 0x8, 0x1]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="a9000000bfc3a3a092aff4a563d5852365576d55c715bb7ee2f0c2415f09f77467c73d35e2dcb2593597d10147f35a0d1e8bd00c21d3378d5781b98ac2700ee541f00fd2f9636283e82068b3852bae3072802f569844165a5ffea3d3ace40a0da3825157c83c9e7628f0a4e2b9171cd4908ab318b7ae99c664a3e48d4b57cd2dadec086c025d298603407c1969c206be7f9b1f3a451fcd8bf2c257381315720f306b383f20ae0e19a2e2931669"], &(0x7f0000000300)=0xb1) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5310, 0x600000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000003c0)=""/62) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) 2018/04/02 19:58:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x80) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x9bd8}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="eceeed0c30003265439ca45d4f3a430162bbdd5d130ab6cf3245c7f8fa984f1265566f321f4568a029c168787b0522c5987e90e7989cf29a25c157842df0a251ec818738f1a41385bb05687c82024cf381"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:52 executing program 4 (fault-call:2 fault-nth:10): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:52 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x802, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f000049e000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r1, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x41, 0x20, 0x8, 0x3f, "43cfa127935d08df47fe04b0ea63dffac7d713002ac9db5d5d433ad9dbeeb484"}) 2018/04/02 19:58:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x3, 0x0, @time={0x77359400}, {0x0, 0x20000000000000}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e, 0x0, 0x0, 0x0, 0x80000000000000}) 2018/04/02 19:58:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(r0, r0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d34923fa200000000c3007000000f04900000000"], 0x1}, 0x1}, 0x4) 2018/04/02 19:58:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x401, 0x1, 0x200}) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x0, @random="2a2be2c048a9", 'ifb0\x00'}}, 0x1e) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) [ 735.444284] FAULT_INJECTION: forcing a failure. [ 735.444284] name failslab, interval 1, probability 0, space 0, times 0 [ 735.455580] CPU: 0 PID: 13910 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 735.462579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.471915] Call Trace: [ 735.474499] dump_stack+0x1a7/0x27d [ 735.478115] ? arch_local_irq_restore+0x53/0x53 [ 735.482788] should_fail+0x914/0xae0 [ 735.486495] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 735.491587] ? find_next_zero_bit+0xe3/0x110 [ 735.495998] ? find_held_lock+0x35/0x1d0 [ 735.500050] ? __lock_is_held+0xb6/0x140 [ 735.504111] ? check_same_owner+0x320/0x320 [ 735.508423] ? __might_sleep+0x95/0x190 [ 735.512470] ? rcu_note_context_switch+0x710/0x710 [ 735.517396] should_failslab+0xec/0x120 [ 735.521361] __kmalloc+0x63/0x760 [ 735.524804] ? lockdep_init_map+0x9/0x10 [ 735.528849] ? debug_mutex_init+0x2d/0x60 [ 735.532984] ? __list_lru_init+0xcf/0x750 [ 735.537123] __list_lru_init+0xcf/0x750 [ 735.541087] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 735.546962] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 735.551975] ? __lockdep_init_map+0xe4/0x650 [ 735.556373] ? lockdep_init_map+0x9/0x10 [ 735.560424] sget_userns+0x6a2/0xe60 [ 735.564127] ? get_anon_bdev+0x2a0/0x2a0 [ 735.568178] ? destroy_unused_super.part.7+0xf0/0xf0 [ 735.573265] ? rcu_read_lock_sched_held+0x108/0x120 [ 735.578271] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 735.583103] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 735.588110] ? rcu_is_watching+0x85/0x130 [ 735.592243] ? trace_hardirqs_off+0x10/0x10 [ 735.596551] ? trace_hardirqs_off+0xd/0x10 [ 735.600776] ? cap_capable+0x1b5/0x230 [ 735.604650] ? security_capable+0x8e/0xc0 [ 735.608786] ? get_anon_bdev+0x2a0/0x2a0 [ 735.612839] ? ns_capable_common+0xcf/0x160 [ 735.617156] ? get_anon_bdev+0x2a0/0x2a0 [ 735.621211] sget+0xd2/0x120 [ 735.624228] ? __get_fs_type+0x8a/0xc0 [ 735.628108] ? shmem_remount_fs+0x750/0x750 [ 735.632418] mount_nodev+0x37/0x100 [ 735.636037] shmem_mount+0x2c/0x40 [ 735.639565] mount_fs+0x66/0x2d0 [ 735.642924] vfs_kern_mount.part.26+0xc6/0x4a0 [ 735.647493] ? may_umount+0xa0/0xa0 [ 735.651107] ? _raw_read_unlock+0x22/0x30 [ 735.655238] ? __get_fs_type+0x8a/0xc0 [ 735.659114] do_mount+0xea4/0x2bb0 [ 735.662643] ? kasan_check_read+0x11/0x20 [ 735.666778] ? do_raw_spin_unlock+0x9e/0x310 [ 735.671175] ? copy_mount_string+0x40/0x40 [ 735.675398] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 735.680399] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 735.685148] ? retint_kernel+0x10/0x10 [ 735.689028] ? copy_mount_options+0x18b/0x2e0 [ 735.693511] ? copy_mount_options+0x191/0x2e0 [ 735.697993] ? copy_mount_options+0x1f7/0x2e0 [ 735.702476] SyS_mount+0xab/0x120 [ 735.705916] ? copy_mnt_ns+0xb40/0xb40 [ 735.709793] do_syscall_64+0x281/0x940 [ 735.713665] ? vmalloc_sync_all+0x30/0x30 [ 735.718683] ? kasan_check_write+0x14/0x20 [ 735.722912] ? syscall_return_slowpath+0x550/0x550 [ 735.727828] ? syscall_return_slowpath+0x2ac/0x550 [ 735.732741] ? prepare_exit_to_usermode+0x350/0x350 [ 735.737746] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 735.743100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 735.747939] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 735.753116] RIP: 0033:0x4552d9 [ 735.756290] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 735.763984] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 735.771236] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 735.778490] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 735.785746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 2018/04/02 19:58:53 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.advise\x00') r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x2, 0x10000) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) r2 = socket(0x4, 0x2, 0x8) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x2, &(0x7f000009b000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003ad57e0554000000fddbdf250a0000006f4626fc623c81a87539c662e9653ea8ff4521896be14f4e840129f342988ab709e37fd5dfa426a1759a5de57310e768dffe197226ccda08df053c05f7b50a25dd4222236da1e31d101e9f5f2efca6ea8600000042b9000000000000"], 0x14}, 0x1}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x7fe) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000000000100000008000000000000000000000000000000000000000000000000000000000000000000"]) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xa, @loopback={0x0, 0x1}, 0x7}], 0x1c) [ 735.792998] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000a 2018/04/02 19:58:53 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x2100) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20}}, 0x0, 0x0, 0x0, "126db4cf4105c71d404e27e40c932036a3e205ac2575be70c3095c2994e44c1497a2098786bab86fd06acd96a21e643699a937802817efddcbb574f5665943d67e851e458b47e7158af3606ea2fe9282"}, 0xd8) 2018/04/02 19:58:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200edd12d27f09920fa51d468cfe70a0e988f105d368897058d214f9163c230ec07924e05c8a7cfffca4ace821e8c31107d7b60cddbe1069d4a00ad9feb294dda83f2af8e52a31b2ee10ed9e6890886d2c365366ec91bd0acf6514198ec90599268a24fbd7365f11a07c9c8a3ffcf6597552894a5b3157a5d1fa5a1cb"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:53 executing program 7: shmget(0x3, 0x4000, 0x54000a10, &(0x7f0000ff8000/0x4000)=nil) 2018/04/02 19:58:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x800, r2}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x402001, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x8c8, 0xda6, 0x1, 0x8, 0x200}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={r4, 0x9}, &(0x7f0000000280)=0x8) write(r1, &(0x7f0000000000)="791f7dfde08186d67d777a649298a8fb", 0x10) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/02 19:58:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x1, 0xbd41b3e7c18ee1c) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a2006bcb9bbedbc8c5e07b1fb62d4da35479cb065b491f0a"], 0x1}, 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="80000000562b9f4ee50009532d304e1a0e048603c52574a8b93162a1a8839ce6674f037ffc9776c1ff150bb7a732528cb1c279183b1cb07fda074589ba7d01bfd912aca20cd72f07f36809c0fcd53f2caab0cf7b02dbb0b697cd02e2fd78daa81ed8f27649a4ca31154d46620452ec32a36e9a8db08446037698f78c19bdd6f1886ba472"], &(0x7f0000000440)=0x88) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000480)={r2, 0x5}, &(0x7f00000004c0)=0x8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x8, 0x0, 0x601, 0xf645, 0xff, 0x3f, 0x9, 0x0], 0x8, 0xfffffffffffffe01, 0x2, 0x100, 0x40, 0x0, {0x5c5b, 0x1, 0x8000, 0x7fffffff, 0x7fff, 0x3, 0x5, 0xd2, 0x0, 0x9, 0x7fff, 0x9, 0x401, 0x0, "ab83b9d575f67c31c10c0dd3137fe1c253119d0b7bf8c9a952784c0ba8d62912"}}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/45) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000240)) 2018/04/02 19:58:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0xfffffffffffffe82) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:55 executing program 4 (fault-call:2 fault-nth:11): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/153) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) 2018/04/02 19:58:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000270068b737b62e263b3a49000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:55 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x101, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) sendto$packet(r1, &(0x7f0000000080)="cc695028043c5d92ab363a0d3ebf608e8dcbc157a986375b975a76cd60ee44acc43d3ed2c2ee7d272f1caf585e6094ce98f7295cda9c6e5a0b27af2f7ac88a04555fe15d250604b4e4b080099753c017b29d922cd291438b63313fc392745106926e1abac6722231034a2a0f9c3aedc3de9451870171c8d6abbf83cb4b96e885cd1cf145d914d83d276ffa930291be133b89ee80a64fa9d12ed2806aca5267bbbcf49a45", 0xa4, 0x800, &(0x7f0000000280)={0x11, 0x1b, r2, 0x1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x10}}, 0x14) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = fcntl$getown(r0, 0x9) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000380)={0x2, 0x1fd}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000340)=r3) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000002c0)=""/76) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:55 executing program 7: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xff, 0x8881) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/192) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @multicast1=0xe0000001}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x2, {0x2, 0x4e23, @multicast1=0xe0000001}, 'bcsh0\x00'}) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000080)=[{{r2, r3/1000+10000}, 0xffffffff, 0x3, 0x101}, {{}, 0xff, 0x100000000, 0x4}, {{0x0, 0x7530}, 0x3, 0xfffffffffffffffa, 0x2}, {{0x77359400}, 0x2, 0x80000001, 0x6}], 0x60) r4 = accept$netrom(0xffffffffffffff9c, &(0x7f00000003c0), &(0x7f0000000400)=0x10) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000440)={'ip_vti0\x00', {0x2, 0x200000004e22}}) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:58:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r1 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x550a3cbc, 0x200) getsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x4) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) r2 = open(&(0x7f0000000180)='./file0\x00', 0xabd2beebb61c53a0, 0x120) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req={0x4, 0x100, 0x3, 0x100000001}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000240)=0x3, 0x4) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20185c787a1dff"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:55 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x40) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000240)={@rand_addr}, &(0x7f0000000280)=0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="fcee94e88cc004e13f86a6f4ad24972f92e44b40a35700003694f4e29e0dbde5295b311564f9160a32ff8bee2c49e7d1ea055b6d00c15d99e0f061ac764635d147edc54c25c560abd030de874a83a0cda0f90d61690812acfb66f2e53504bb4fb37bd5586df0d583b5928b8bf075fb6b95676852f45b220512762396aee7c34eaea37b75b69fbf52d47567acb2d051f35165", @ANYRES16=r2, @ANYBLOB="00012cbd7000fedbdf250c000000380001000c0007002400000008000000080004004e2100000c000700030000001800000014000300ac14141300000000000000000000000008000600ff000000080006006a000000080005000907000008000600020000000800050005000000780001000c000700100000000100000014000300fe8000000000000000000000000000bb080002002f0000001400030000000000000000000000000000000001080004004e2300000c0007003000000004000000080009000e00000008000800000100000c00070020000000010000000800050004000000080006008b0000000800040017910000"], 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200321d3be620e1dc5c2fce64259e6e83a5a5b7f99d95b8d9e3d52a742fab1589b7e995acf085779f821772386a08e8d7193bd02dff26dc1e6a1537b4b50b4e91f25b7385e99e3865702f8dde0672cdee5a1b80f88123bd2e7627c822957acf21c2a0ee3988355019cef526f16032555e4c1ca20e7a52c5124de970f2336eb9f9386830109d70005c9c76e72aea75f38e716e3a117a1430f6717185f37769749234cd38cd0e81a5533a1ce82f134ec225959b72bff764544ef3288b33a699e431bf9f77b5ac0cb84fcd8112bbad88268f1ff4ee80d7d857f24cc037e8a6730e093cb47debdec50c00e6ea774a43c18fee93d924a1a2c1f2f3c0f76f1d6095"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:55 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101000, 0x0) [ 737.719014] FAULT_INJECTION: forcing a failure. [ 737.719014] name failslab, interval 1, probability 0, space 0, times 0 [ 737.730329] CPU: 0 PID: 13977 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 737.737326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 737.746663] Call Trace: [ 737.749240] dump_stack+0x1a7/0x27d [ 737.752856] ? arch_local_irq_restore+0x53/0x53 [ 737.757512] ? __save_stack_trace+0x7e/0xd0 [ 737.761830] should_fail+0x914/0xae0 [ 737.765532] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 737.770625] ? kasan_kmalloc+0xad/0xe0 [ 737.774498] ? kmem_cache_alloc_trace+0x136/0x740 [ 737.779327] ? __memcg_init_list_lru_node+0x169/0x270 [ 737.784509] ? __list_lru_init+0x544/0x750 [ 737.788728] ? sget_userns+0x6a2/0xe60 [ 737.792606] ? mount_fs+0x66/0x2d0 [ 737.796133] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 737.800871] ? do_mount+0xea4/0x2bb0 [ 737.804575] ? SyS_mount+0xab/0x120 [ 737.808190] ? do_syscall_64+0x281/0x940 [ 737.812235] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 737.817587] ? find_held_lock+0x35/0x1d0 [ 737.821641] ? __lock_is_held+0xb6/0x140 [ 737.825698] ? check_same_owner+0x320/0x320 [ 737.830008] ? rcu_note_context_switch+0x710/0x710 [ 737.834933] should_failslab+0xec/0x120 [ 737.838899] kmem_cache_alloc_trace+0x4b/0x740 [ 737.843468] ? __kmalloc_node+0x33/0x70 [ 737.847430] ? __kmalloc_node+0x33/0x70 [ 737.851391] ? rcu_read_lock_sched_held+0x108/0x120 [ 737.856395] __memcg_init_list_lru_node+0x169/0x270 [ 737.861398] ? list_lru_add+0x7c0/0x7c0 [ 737.865358] ? __kmalloc_node+0x47/0x70 [ 737.869324] __list_lru_init+0x544/0x750 [ 737.873376] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 737.879248] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 737.884258] ? __lockdep_init_map+0xe4/0x650 [ 737.888656] ? lockdep_init_map+0x9/0x10 [ 737.892713] sget_userns+0x6a2/0xe60 [ 737.896426] ? get_anon_bdev+0x2a0/0x2a0 [ 737.900486] ? destroy_unused_super.part.7+0xf0/0xf0 [ 737.905586] ? rcu_read_lock_sched_held+0x108/0x120 [ 737.910598] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 737.915432] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 737.920433] ? rcu_is_watching+0x85/0x130 [ 737.924568] ? trace_hardirqs_off+0x10/0x10 [ 737.928873] ? trace_hardirqs_off+0xd/0x10 [ 737.933096] ? cap_capable+0x1b5/0x230 [ 737.936975] ? security_capable+0x8e/0xc0 [ 737.941111] ? get_anon_bdev+0x2a0/0x2a0 [ 737.945160] ? ns_capable_common+0xcf/0x160 [ 737.949467] ? get_anon_bdev+0x2a0/0x2a0 [ 737.953512] sget+0xd2/0x120 [ 737.956518] ? __get_fs_type+0x8a/0xc0 [ 737.960390] ? shmem_remount_fs+0x750/0x750 [ 737.964700] mount_nodev+0x37/0x100 [ 737.968318] shmem_mount+0x2c/0x40 [ 737.971843] mount_fs+0x66/0x2d0 [ 737.975199] vfs_kern_mount.part.26+0xc6/0x4a0 [ 737.979782] ? may_umount+0xa0/0xa0 [ 737.983399] ? _raw_read_unlock+0x22/0x30 [ 737.987532] ? __get_fs_type+0x8a/0xc0 [ 737.991407] do_mount+0xea4/0x2bb0 [ 737.994939] ? copy_mount_string+0x40/0x40 [ 737.999158] ? rcu_pm_notify+0xc0/0xc0 [ 738.003040] ? copy_mount_options+0x5f/0x2e0 [ 738.007435] ? rcu_read_lock_sched_held+0x108/0x120 [ 738.012439] ? kmem_cache_alloc_trace+0x459/0x740 [ 738.017270] ? kasan_check_write+0x14/0x20 [ 738.021492] ? _copy_from_user+0x99/0x110 [ 738.025629] ? copy_mount_options+0x1f7/0x2e0 [ 738.030114] SyS_mount+0xab/0x120 [ 738.033551] ? copy_mnt_ns+0xb40/0xb40 [ 738.037427] do_syscall_64+0x281/0x940 [ 738.041301] ? vmalloc_sync_all+0x30/0x30 [ 738.045437] ? _raw_spin_unlock_irq+0x27/0x70 [ 738.049921] ? finish_task_switch+0x1c1/0x810 [ 738.054403] ? syscall_return_slowpath+0x550/0x550 [ 738.059319] ? syscall_return_slowpath+0x2ac/0x550 [ 738.064235] ? prepare_exit_to_usermode+0x350/0x350 [ 738.069239] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 738.074591] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 738.079430] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 738.084606] RIP: 0033:0x4552d9 [ 738.087784] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 738.095479] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 738.102735] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 738.109991] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 2018/04/02 19:58:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = dup2(r0, r0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000140)=0x80000000, 0x4) 2018/04/02 19:58:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x10000) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) r1 = accept(r0, 0x0, &(0x7f00000000c0)) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x3, 0x0, 0xdfae0b3, 0x20, 0x1}, 0xc) [ 738.117241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 738.124497] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000b 2018/04/02 19:58:55 executing program 1: set_robust_list(&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f0000000080)}, 0x5}, 0x18) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x54f, 0x121000) r1 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x44d9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000280)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f00000001c0)=0x7, 0x101, 0x9c0ca1c288c58416) fdatasync(r1) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20400000270063010005000000000000ed2f070049000000000000a200"], 0x1}, 0x1}, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x4, 0x101) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000300)=0x10000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000600)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000640)={r4, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) 2018/04/02 19:58:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(r0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0xfff, 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x6081, 0x140) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x20, 0x0, 0x2000}, 0x4) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000040)=0x4) ioctl$sock_ipx_SIOCIPXCFGDATA(r3, 0x89e2, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000100)={{0xe50, 0x9}, 'port1\x00', 0x1, 0x40000, 0x8, 0x0, 0x0, 0x1, 0x9, 0x0, 0x6, 0x80}) getsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f00000001c0), &(0x7f0000000280)=0x4) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x2c6) 2018/04/02 19:58:55 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/qat_adf_ctl\x00', 0x402000, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000540)={0x8200000000000000, 0x5000, 0x520, 0xb, 0xa}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000004c0)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000300)="3549c1fbc30de98b29f9057132d30b118a0f2ec79c67c51eec3187058df115261c4236070f205e96ecb30a23fdb6d33cf3afa613d07f28a90f1bb3f0970ecad70ab86bff019635c3f4a90e97b9ee72e3cea4b69c7908fab74da82f4a108042152beb5552cec3f9795cb153a5d43c025be10bf7148dfcbf7aa8b1fdee6aaa4b8d40203df2bd7e91c054ef5ea3fd4aafde1a70c4f29eebb809bf38281e949f98ae8040a22b519410c6c454e7dbe23cfc7e1bfc063ed66f8a86a1b8eec740e819e8ba31", 0xc2}, {&(0x7f0000000280)="7c4239b80cae63931df080389c23c6fc6fa7f5c6ea67a4f0945f6c9ec90c44ad2d6567e7bc494262323499", 0x2b}, {&(0x7f0000000400)="8ad10e7fd27150678bbbd66a2e906d8548084a0b5fc82daeb661aaaeba5981e35ef4aa3158df3df9d28a4dae2ffc414e4c0e65d7a2d9c20796a6c809db46f34ff71753b2a287d228b0a3", 0x4a}], 0x4}, 0x20000040) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) shmget$private(0x0, 0x1000, 0x810, &(0x7f0000ffc000/0x1000)=nil) 2018/04/02 19:58:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) r2 = semget$private(0x0, 0x0, 0x80) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000000)=""/114) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0xfffffffffffffffc) 2018/04/02 19:58:56 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) futimesat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}}) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r1}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:58:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) fcntl$getown(r0, 0x9) 2018/04/02 19:58:56 executing program 4 (fault-call:2 fault-nth:12): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc357}, 0x0, 0x0, 0xffffffffffffffff, 0x3) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002800)={0x0, @in6={{0xa, 0x4e24, 0x7}}, 0xffffffffffff424f, 0xcf76}, &(0x7f00000028c0)=0x90) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002900)={r1, 0xfffffffffffffffb, 0x1, [0x3f]}, &(0x7f0000002940)=0xa) 2018/04/02 19:58:56 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'teql0\x00'}}) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/153) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) 2018/04/02 19:58:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/97) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:58:56 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2040, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000100)={{0x5, 0x7fffffff, 0x7fff, 0x80000001, 0x9, 0x1}, 0xffffffff80000000, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f0f8000000000000a200"], 0x1}, 0x1}, 0x4) [ 739.052932] FAULT_INJECTION: forcing a failure. [ 739.052932] name failslab, interval 1, probability 0, space 0, times 0 [ 739.064378] CPU: 0 PID: 14041 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 739.071382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.080718] Call Trace: [ 739.083297] dump_stack+0x1a7/0x27d [ 739.086919] ? arch_local_irq_restore+0x53/0x53 [ 739.091578] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 739.096508] should_fail+0x914/0xae0 [ 739.100209] ? is_bpf_text_address+0xa4/0x120 [ 739.104693] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 739.109783] ? __kernel_text_address+0xd/0x40 [ 739.114267] ? unwind_get_return_address+0x61/0xa0 [ 739.119196] ? find_held_lock+0x35/0x1d0 [ 739.123249] ? __lock_is_held+0xb6/0x140 [ 739.127309] ? check_same_owner+0x320/0x320 [ 739.131625] ? rcu_note_context_switch+0x710/0x710 [ 739.136553] should_failslab+0xec/0x120 [ 739.140515] kmem_cache_alloc_trace+0x4b/0x740 [ 739.145084] ? __kmalloc_node+0x33/0x70 [ 739.149042] ? __kmalloc_node+0x33/0x70 [ 739.153009] ? rcu_read_lock_sched_held+0x108/0x120 [ 739.158016] __memcg_init_list_lru_node+0x169/0x270 [ 739.163027] ? list_lru_add+0x7c0/0x7c0 [ 739.166991] ? __kmalloc_node+0x47/0x70 [ 739.170959] __list_lru_init+0x544/0x750 [ 739.175013] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 739.180892] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 739.185900] ? __lockdep_init_map+0xe4/0x650 [ 739.190298] ? lockdep_init_map+0x9/0x10 [ 739.194350] sget_userns+0x6a2/0xe60 [ 739.198049] ? get_anon_bdev+0x2a0/0x2a0 [ 739.202107] ? destroy_unused_super.part.7+0xf0/0xf0 [ 739.207199] ? rcu_read_lock_sched_held+0x108/0x120 [ 739.212202] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 739.217040] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 739.222044] ? rcu_is_watching+0x85/0x130 [ 739.226181] ? trace_hardirqs_off+0x10/0x10 [ 739.230488] ? trace_hardirqs_off+0xd/0x10 [ 739.234714] ? cap_capable+0x1b5/0x230 [ 739.238591] ? security_capable+0x8e/0xc0 [ 739.242729] ? get_anon_bdev+0x2a0/0x2a0 [ 739.246780] ? ns_capable_common+0xcf/0x160 [ 739.251088] ? get_anon_bdev+0x2a0/0x2a0 [ 739.255133] sget+0xd2/0x120 [ 739.258141] ? __get_fs_type+0x8a/0xc0 [ 739.262031] ? shmem_remount_fs+0x750/0x750 [ 739.266354] mount_nodev+0x37/0x100 [ 739.269981] shmem_mount+0x2c/0x40 [ 739.273516] mount_fs+0x66/0x2d0 [ 739.276881] vfs_kern_mount.part.26+0xc6/0x4a0 [ 739.281462] ? may_umount+0xa0/0xa0 [ 739.285086] ? _raw_read_unlock+0x22/0x30 [ 739.289228] ? __get_fs_type+0x8a/0xc0 [ 739.293118] do_mount+0xea4/0x2bb0 [ 739.296658] ? kasan_check_read+0x11/0x20 [ 739.300797] ? do_raw_spin_unlock+0x9e/0x310 [ 739.305206] ? copy_mount_string+0x40/0x40 [ 739.309437] ? rcu_pm_notify+0xc0/0xc0 [ 739.313327] ? copy_mount_options+0x5f/0x2e0 [ 739.317724] ? rcu_read_lock_sched_held+0x108/0x120 [ 739.322736] ? kmem_cache_alloc_trace+0x459/0x740 [ 739.327567] ? kasan_check_write+0x14/0x20 [ 739.331798] ? copy_mount_options+0x1f7/0x2e0 [ 739.336285] SyS_mount+0xab/0x120 [ 739.339727] ? copy_mnt_ns+0xb40/0xb40 [ 739.343608] do_syscall_64+0x281/0x940 [ 739.347486] ? vmalloc_sync_all+0x30/0x30 [ 739.351623] ? _raw_spin_unlock_irq+0x27/0x70 [ 739.356104] ? finish_task_switch+0x1c1/0x810 [ 739.360589] ? syscall_return_slowpath+0x550/0x550 [ 739.365508] ? syscall_return_slowpath+0x2ac/0x550 [ 739.370428] ? prepare_exit_to_usermode+0x350/0x350 [ 739.375434] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 739.380791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 739.385633] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 739.390812] RIP: 0033:0x4552d9 [ 739.393989] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2018/04/02 19:58:57 executing program 4 (fault-call:2 fault-nth:13): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:57 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x2) fchmod(r0, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002310638100050000000000a20000000000000000000000f0051dc200"], 0x1}, 0x1}, 0x0) [ 739.401687] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 739.408941] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 739.416194] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 739.423448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 739.430705] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000c 2018/04/02 19:58:57 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r2 = getpgid(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x4, 0x20, 0x1, r2}) 2018/04/02 19:58:57 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000000140)="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") 2018/04/02 19:58:57 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0xfffffffffffffffe, 0x80000000, 0xffff, 0x101, 0xfe64}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r2, 0x3}, &(0x7f00000001c0)=0x8) ioctl(r0, 0x7, &(0x7f00000000c0)="60bc836ead2c9193cf") pwrite64(r1, &(0x7f0000000200)="86fa21ed3572b50bb60cf291ad3db3d4b505dd78993d4c4f07667e81a832a29f6ac55188b2692a44c6f327cbe2e989140eabe6a49ddcc2d7c972f3f145952d7ebbee9f3e20e2f54b0a39e7126fdac8047f50fdea83d6527fbebba628161479e115fbe31ef852415a741e8ca974fef45d4bb86b134a4d70ca6f0d998c0a58a143eabd18912b61ce18f45ddd6c0612a0e9eb61fe9465eacdd0cbd4513fbb3cddaec31da1d00abb31cc21", 0xa9, 0x0) 2018/04/02 19:58:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x200) recvmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000100)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/25, 0x19}], 0x1, &(0x7f0000000200)=""/81, 0x51, 0x101}, 0x40000001) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c30070000467abcd94ede86ca00a200"], 0x1}, 0x1}, 0x0) [ 739.748598] FAULT_INJECTION: forcing a failure. [ 739.748598] name failslab, interval 1, probability 0, space 0, times 0 [ 739.759917] CPU: 0 PID: 14061 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 739.766915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.776251] Call Trace: [ 739.778833] dump_stack+0x1a7/0x27d [ 739.782456] ? arch_local_irq_restore+0x53/0x53 [ 739.787110] ? finish_task_switch+0x1c1/0x810 [ 739.791604] ? finish_task_switch+0x182/0x810 [ 739.796099] should_fail+0x914/0xae0 [ 739.799806] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 739.804902] ? mount_fs+0x66/0x2d0 [ 739.808439] ? __sched_text_start+0x8/0x8 [ 739.812583] ? find_held_lock+0x35/0x1d0 [ 739.816635] ? __lock_is_held+0xb6/0x140 [ 739.820693] ? check_same_owner+0x320/0x320 [ 739.825016] should_failslab+0xec/0x120 [ 739.828979] kmem_cache_alloc_trace+0x4b/0x740 [ 739.833545] ? __kmalloc_node+0x33/0x70 [ 739.837506] ? __kmalloc_node+0x33/0x70 [ 739.841470] ? rcu_read_lock_sched_held+0x108/0x120 [ 739.846477] __memcg_init_list_lru_node+0x169/0x270 [ 739.851483] ? list_lru_add+0x7c0/0x7c0 [ 739.855448] ? __kmalloc_node+0x47/0x70 [ 739.859415] __list_lru_init+0x544/0x750 [ 739.863467] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 739.869342] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 739.874351] ? __lockdep_init_map+0xe4/0x650 [ 739.878749] ? lockdep_init_map+0x9/0x10 [ 739.882800] sget_userns+0x6a2/0xe60 [ 739.886498] ? get_anon_bdev+0x2a0/0x2a0 [ 739.890554] ? destroy_unused_super.part.7+0xf0/0xf0 [ 739.895648] ? rcu_read_lock_sched_held+0x108/0x120 [ 739.900661] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 739.905499] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 739.910506] ? rcu_is_watching+0x85/0x130 [ 739.914645] ? trace_hardirqs_off+0x10/0x10 [ 739.918958] ? trace_hardirqs_off+0xd/0x10 [ 739.923184] ? cap_capable+0x1b5/0x230 [ 739.927062] ? security_capable+0x8e/0xc0 [ 739.931199] ? get_anon_bdev+0x2a0/0x2a0 [ 739.935251] ? ns_capable_common+0xcf/0x160 [ 739.939578] ? get_anon_bdev+0x2a0/0x2a0 [ 739.943637] sget+0xd2/0x120 [ 739.946643] ? __get_fs_type+0x8a/0xc0 [ 739.950520] ? shmem_remount_fs+0x750/0x750 [ 739.954831] mount_nodev+0x37/0x100 [ 739.958448] shmem_mount+0x2c/0x40 [ 739.961978] mount_fs+0x66/0x2d0 [ 739.965337] vfs_kern_mount.part.26+0xc6/0x4a0 [ 739.969907] ? may_umount+0xa0/0xa0 [ 739.973519] ? _raw_read_unlock+0x22/0x30 [ 739.977653] ? __get_fs_type+0x8a/0xc0 [ 739.981532] do_mount+0xea4/0x2bb0 [ 739.985070] ? copy_mount_string+0x40/0x40 [ 739.989291] ? rcu_pm_notify+0xc0/0xc0 [ 739.993176] ? copy_mount_options+0x5f/0x2e0 [ 739.997575] ? rcu_read_lock_sched_held+0x108/0x120 [ 740.002581] ? kmem_cache_alloc_trace+0x459/0x740 [ 740.007413] ? kasan_check_write+0x14/0x20 [ 740.011638] ? _copy_from_user+0x99/0x110 [ 740.015777] ? copy_mount_options+0x1f7/0x2e0 [ 740.020261] SyS_mount+0xab/0x120 [ 740.023701] ? copy_mnt_ns+0xb40/0xb40 [ 740.027586] do_syscall_64+0x281/0x940 [ 740.031461] ? vmalloc_sync_all+0x30/0x30 [ 740.035600] ? _raw_spin_unlock_irq+0x27/0x70 [ 740.040081] ? finish_task_switch+0x1c1/0x810 [ 740.044566] ? syscall_return_slowpath+0x550/0x550 [ 740.049483] ? syscall_return_slowpath+0x2ac/0x550 [ 740.054398] ? prepare_exit_to_usermode+0x350/0x350 [ 740.059403] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 740.064756] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 740.069591] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 740.074829] RIP: 0033:0x4552d9 [ 740.078005] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 740.085707] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 740.092964] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 740.100218] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 740.107480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 740.114733] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000d 2018/04/02 19:58:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x7, 0x80000000, 0x80, 0x7f, 0x4, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x401, 0x5}) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:58:58 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x7d51ea3016e037b2, 0x20) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000100)=""/165) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xd, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x6, 0x8, 0x4, 0x100, 0x3, 0x1c4000000, 0x80000000, 0x9}, 0xb) 2018/04/02 19:58:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/153) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) 2018/04/02 19:58:58 executing program 4 (fault-call:2 fault-nth:14): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:58:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:58:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) r1 = semget(0x1, 0x4, 0x50) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000000)=""/4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:58:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="6557a743102ac16a6034fe00230b467dfc2e31e337bea742a5d749f38c2e09d4f53d00df3ca7ffb138944f9ba87bfc5679bd00059802bbd99fc38d8f463368ee4c068f8bd75a4e34f38f89d3f95a3a5c45856536c8cd9d2af271740d12", @ANYRES64, @ANYRES16=r0, @ANYPTR, @ANYPTR64, @ANYBLOB="88ad493fdb570d948dea6006500ab5a774424f0dd349db201d434dfb43c19ff261072566a62367", @ANYRES32, @ANYPTR, @ANYPTR64, @ANYRES64], @ANYRES16], @ANYRES32=r0], &(0x7f0000000280)=0x2) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:58:58 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x800, 0x100000001) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) r2 = dup2(r0, r0) fcntl$setsig(r2, 0xa, 0x1e) flock(r1, 0x1) rt_sigsuspend(&(0x7f0000000040)={0x5}, 0x8) ioctl$TIOCSTI(r2, 0x5412, 0x9) readahead(r0, 0x7fff, 0x3ff) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={{0x100, 0x0, 0xfffffffffffffff9, 0x4, 0x2, 0x570a}, 0x4160}) 2018/04/02 19:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000003fc549004492fb6245ff4206c67bda2700000029a9e710cc5fbb9606246c8900030000000000000c"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x7, r0}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000100)={0x7ff, 0x3, 0x8000}) fcntl$setstatus(r0, 0x4, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) [ 740.941553] FAULT_INJECTION: forcing a failure. [ 740.941553] name failslab, interval 1, probability 0, space 0, times 0 [ 740.952871] CPU: 0 PID: 14107 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 740.959873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.969212] Call Trace: [ 740.971792] dump_stack+0x1a7/0x27d [ 740.975414] ? arch_local_irq_restore+0x53/0x53 [ 740.980077] ? __save_stack_trace+0x7e/0xd0 [ 740.984398] should_fail+0x914/0xae0 [ 740.988102] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 740.993195] ? kasan_kmalloc+0xad/0xe0 [ 740.997071] ? kmem_cache_alloc_trace+0x136/0x740 [ 741.001898] ? __memcg_init_list_lru_node+0x169/0x270 [ 741.007074] ? __list_lru_init+0x544/0x750 [ 741.011294] ? sget_userns+0x6a2/0xe60 [ 741.015167] ? mount_fs+0x66/0x2d0 [ 741.018694] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 741.023434] ? do_mount+0xea4/0x2bb0 [ 741.027136] ? SyS_mount+0xab/0x120 [ 741.030754] ? do_syscall_64+0x281/0x940 [ 741.034800] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 741.040156] ? find_held_lock+0x35/0x1d0 [ 741.044215] ? __lock_is_held+0xb6/0x140 [ 741.048273] ? check_same_owner+0x320/0x320 [ 741.052588] ? rcu_note_context_switch+0x710/0x710 [ 741.057514] should_failslab+0xec/0x120 [ 741.061481] kmem_cache_alloc_trace+0x4b/0x740 [ 741.066052] ? __kmalloc_node+0x33/0x70 [ 741.070023] ? __kmalloc_node+0x33/0x70 [ 741.073983] ? rcu_read_lock_sched_held+0x108/0x120 [ 741.078993] __memcg_init_list_lru_node+0x169/0x270 [ 741.084003] ? list_lru_add+0x7c0/0x7c0 [ 741.087963] ? __kmalloc_node+0x47/0x70 [ 741.091929] __list_lru_init+0x544/0x750 [ 741.095979] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 741.101855] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 741.106864] ? __lockdep_init_map+0xe4/0x650 [ 741.111265] ? lockdep_init_map+0x9/0x10 [ 741.115319] sget_userns+0x6a2/0xe60 [ 741.119017] ? get_anon_bdev+0x2a0/0x2a0 [ 741.123073] ? destroy_unused_super.part.7+0xf0/0xf0 [ 741.128165] ? rcu_read_lock_sched_held+0x108/0x120 [ 741.133177] ? __alloc_pages_nodemask+0xabe/0xdd0 2018/04/02 19:58:58 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4200, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:58:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x15, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") [ 741.138020] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 741.143033] ? rcu_is_watching+0x85/0x130 [ 741.147183] ? trace_hardirqs_off+0x10/0x10 [ 741.151499] ? trace_hardirqs_off+0xd/0x10 [ 741.155733] ? cap_capable+0x1b5/0x230 [ 741.159623] ? security_capable+0x8e/0xc0 [ 741.163765] ? get_anon_bdev+0x2a0/0x2a0 [ 741.167822] ? ns_capable_common+0xcf/0x160 [ 741.172138] ? get_anon_bdev+0x2a0/0x2a0 [ 741.176191] sget+0xd2/0x120 [ 741.179203] ? __get_fs_type+0x8a/0xc0 [ 741.183090] ? shmem_remount_fs+0x750/0x750 [ 741.187403] mount_nodev+0x37/0x100 2018/04/02 19:58:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 741.191025] shmem_mount+0x2c/0x40 [ 741.194563] mount_fs+0x66/0x2d0 [ 741.197930] vfs_kern_mount.part.26+0xc6/0x4a0 [ 741.202508] ? may_umount+0xa0/0xa0 [ 741.206130] ? _raw_read_unlock+0x22/0x30 [ 741.210272] ? __get_fs_type+0x8a/0xc0 [ 741.214158] do_mount+0xea4/0x2bb0 [ 741.217702] ? copy_mount_string+0x40/0x40 [ 741.221935] ? rcu_pm_notify+0xc0/0xc0 [ 741.225822] ? copy_mount_options+0x5f/0x2e0 [ 741.230224] ? rcu_read_lock_sched_held+0x108/0x120 [ 741.235237] ? kmem_cache_alloc_trace+0x459/0x740 2018/04/02 19:58:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x490280, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0xdc6, @remote={0xfe, 0x80, [], 0xbb}, 0x8}}, [0x6, 0xffffffff, 0x6ca, 0x7ff, 0x10001, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x800, 0x1ffc, 0x2e, 0xea]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x71ea}, 0x8) [ 741.240074] ? kasan_check_write+0x14/0x20 [ 741.244302] ? _copy_from_user+0x99/0x110 [ 741.248455] ? copy_mount_options+0x1f7/0x2e0 [ 741.252951] SyS_mount+0xab/0x120 [ 741.256401] ? copy_mnt_ns+0xb40/0xb40 [ 741.260282] do_syscall_64+0x281/0x940 [ 741.264159] ? vmalloc_sync_all+0x30/0x30 [ 741.268296] ? finish_task_switch+0x1c1/0x810 [ 741.272777] ? syscall_return_slowpath+0x550/0x550 [ 741.277695] ? syscall_return_slowpath+0x2ac/0x550 [ 741.282612] ? prepare_exit_to_usermode+0x350/0x350 [ 741.287615] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 741.292968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 741.297800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 741.302973] RIP: 0033:0x4552d9 [ 741.306147] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 741.313842] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 741.321099] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 741.328356] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 741.335610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 741.342867] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000e 2018/04/02 19:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x40, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000140)=0x1ff, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4e36b66f270063810005000045d2bd2ce0ceec2c8ef1000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="b3", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:59:00 executing program 4 (fault-call:2 fault-nth:15): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:00 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7fff, 0x3, [0x7, 0x77b9, 0x4]}, &(0x7f0000000080)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x10001, @dev={0xfe, 0x80, [], 0x17}, 0x100000000}, @in6={0xa, 0x4e20, 0x901a, @loopback={0x0, 0x1}, 0x8001}, @in6={0xa, 0x4e24, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x1000}, @in={0x2, 0x4e20, @loopback=0x7f000001}]}, &(0x7f0000000180)=0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:59:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x240000, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000100)=0xff, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/153) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) 2018/04/02 19:59:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xd3c, 0x220000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) ptrace$getregs(0xe, r1, 0xf6, &(0x7f0000000100)=""/201) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={&(0x7f0000ff9000/0x3000)=nil, 0x3000}) shmget(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) eventfd2(0x400, 0x0) 2018/04/02 19:59:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000140)) accept$ax25(r0, &(0x7f0000000000), &(0x7f0000000080)=0x10) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:59:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xfffffffffffffffb, 0x2000) ioctl$TIOCNXCL(r0, 0x540d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200cfd5f31144e6e4624a90aae7d19a95f700d01fc4f7136a2b1a2101e0b154ca4c9d4a4d035f2545fc01a5bf371a97f280b827482e0397cfbd0f209056c47e23e19ad2bdcdfab0e98bd8aac90e0db989d236a688ae39b7af24936cbcd77ad850ae1f653038aabb"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:00 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000100)={0x7e, @empty, 0x4e24, 0x1, 'lblc\x00', 0x20, 0x0, 0x52}, 0x2c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0xc2, "77dd10046dd7345eb5bf814324b9a033ff34e228a5f7797a625596d0b1c493bc7c82554206cad4c06290dedd490f92744136f5e424d69a8a238df7d55e36ced80e9710ea667be4ad7b4ad32c9162a8f1399e5e3c9bab379dea04108c673066a7869774dc3ecea8ff49cc1b9480ff1a33189738182d4b39d2aa506f4aded1907f3ae683de9b239ff5814728ddee2e4896505fa1aff136cf9298fe6cd5f9ff9bebfee0d4e095d2891530ef8e73bf63aeb2c27a5b21703ee25b9924c6a92329a0e2f14f"}, &(0x7f0000000400)=0xca) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0xf73}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x3f, "16cb551b65a07766863156aa7e8d19ee6fa5d79b6c612ddf85b5c8216d1f601339d84f632c1df7fffc852fd9d1c98deeaa46a6c450ff60b6d567794ef9ff2c"}, &(0x7f0000000040)=0x47) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e24, 0x3, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xcf73}}}, &(0x7f00000002c0)=0x84) [ 742.973688] FAULT_INJECTION: forcing a failure. [ 742.973688] name failslab, interval 1, probability 0, space 0, times 0 [ 742.984980] CPU: 0 PID: 14179 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 742.991996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.001345] Call Trace: [ 743.003929] dump_stack+0x1a7/0x27d [ 743.007548] ? arch_local_irq_restore+0x53/0x53 [ 743.012208] ? __save_stack_trace+0x7e/0xd0 [ 743.016531] should_fail+0x914/0xae0 [ 743.020239] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 743.025334] ? kasan_kmalloc+0xad/0xe0 [ 743.029209] ? kmem_cache_alloc_trace+0x136/0x740 [ 743.034037] ? __memcg_init_list_lru_node+0x169/0x270 [ 743.039211] ? __list_lru_init+0x544/0x750 [ 743.043435] ? sget_userns+0x6a2/0xe60 [ 743.047317] ? mount_fs+0x66/0x2d0 [ 743.050845] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 743.055588] ? do_mount+0xea4/0x2bb0 [ 743.059284] ? SyS_mount+0xab/0x120 [ 743.062903] ? do_syscall_64+0x281/0x940 [ 743.066950] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 743.072311] ? find_held_lock+0x35/0x1d0 [ 743.076364] ? __lock_is_held+0xb6/0x140 [ 743.080422] ? check_same_owner+0x320/0x320 [ 743.084736] ? rcu_note_context_switch+0x710/0x710 [ 743.089658] should_failslab+0xec/0x120 [ 743.093625] kmem_cache_alloc_trace+0x4b/0x740 [ 743.098197] ? __kmalloc_node+0x33/0x70 [ 743.102167] ? __kmalloc_node+0x33/0x70 [ 743.106129] ? rcu_read_lock_sched_held+0x108/0x120 [ 743.111140] __memcg_init_list_lru_node+0x169/0x270 [ 743.116152] ? list_lru_add+0x7c0/0x7c0 [ 743.120114] ? __kmalloc_node+0x47/0x70 [ 743.124084] __list_lru_init+0x544/0x750 [ 743.128140] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 743.134016] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 743.139023] ? __lockdep_init_map+0xe4/0x650 [ 743.143423] ? lockdep_init_map+0x9/0x10 [ 743.147478] sget_userns+0x6a2/0xe60 [ 743.151176] ? get_anon_bdev+0x2a0/0x2a0 [ 743.155231] ? destroy_unused_super.part.7+0xf0/0xf0 [ 743.160320] ? rcu_read_lock_sched_held+0x108/0x120 [ 743.165325] ? __alloc_pages_nodemask+0xabe/0xdd0 2018/04/02 19:59:00 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") [ 743.170158] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 743.175159] ? rcu_is_watching+0x85/0x130 [ 743.179297] ? trace_hardirqs_off+0x10/0x10 [ 743.183607] ? trace_hardirqs_off+0xd/0x10 [ 743.187830] ? cap_capable+0x1b5/0x230 [ 743.191710] ? security_capable+0x8e/0xc0 [ 743.195850] ? get_anon_bdev+0x2a0/0x2a0 [ 743.199905] ? ns_capable_common+0xcf/0x160 [ 743.204226] ? get_anon_bdev+0x2a0/0x2a0 [ 743.208290] sget+0xd2/0x120 [ 743.211308] ? __get_fs_type+0x8a/0xc0 [ 743.215193] ? shmem_remount_fs+0x750/0x750 [ 743.219509] mount_nodev+0x37/0x100 [ 743.223130] shmem_mount+0x2c/0x40 [ 743.226650] mount_fs+0x66/0x2d0 [ 743.229999] vfs_kern_mount.part.26+0xc6/0x4a0 [ 743.234564] ? may_umount+0xa0/0xa0 [ 743.238172] ? _raw_read_unlock+0x22/0x30 [ 743.242295] ? __get_fs_type+0x8a/0xc0 [ 743.246167] do_mount+0xea4/0x2bb0 [ 743.249686] ? kasan_check_read+0x11/0x20 [ 743.253812] ? do_raw_spin_unlock+0x9e/0x310 [ 743.258202] ? copy_mount_string+0x40/0x40 [ 743.262416] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 743.267412] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 743.272149] ? retint_kernel+0x10/0x10 [ 743.276028] ? copy_mount_options+0x168/0x2e0 [ 743.280501] ? copy_mount_options+0x1f7/0x2e0 [ 743.284976] SyS_mount+0xab/0x120 [ 743.288406] ? copy_mnt_ns+0xb40/0xb40 [ 743.292278] do_syscall_64+0x281/0x940 [ 743.296142] ? vmalloc_sync_all+0x30/0x30 [ 743.300269] ? _raw_spin_unlock_irq+0x27/0x70 [ 743.304744] ? finish_task_switch+0x1c1/0x810 [ 743.309220] ? syscall_return_slowpath+0x550/0x550 [ 743.314127] ? syscall_return_slowpath+0x2ac/0x550 [ 743.319038] ? prepare_exit_to_usermode+0x350/0x350 [ 743.324037] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 743.329382] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 743.334206] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 743.339374] RIP: 0033:0x4552d9 [ 743.342540] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 743.350227] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 743.357473] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 743.364722] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 2018/04/02 19:59:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x0) [ 743.371969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 743.379216] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000f 2018/04/02 19:59:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000002700638100050000000000002ee285010fe9778110181d61e1d4a70c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000180)=0x7) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x4) 2018/04/02 19:59:01 executing program 4 (fault-call:2 fault-nth:16): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10}) 2018/04/02 19:59:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x400000) getsockname$llc(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x10) [ 743.600225] FAULT_INJECTION: forcing a failure. [ 743.600225] name failslab, interval 1, probability 0, space 0, times 0 [ 743.611527] CPU: 0 PID: 14201 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 743.618530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.627871] Call Trace: [ 743.630452] dump_stack+0x1a7/0x27d [ 743.634073] ? arch_local_irq_restore+0x53/0x53 [ 743.638732] ? __save_stack_trace+0x7e/0xd0 [ 743.643048] should_fail+0x914/0xae0 [ 743.646752] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 743.651846] ? kasan_kmalloc+0xad/0xe0 [ 743.655717] ? kmem_cache_alloc_trace+0x136/0x740 [ 743.660544] ? __memcg_init_list_lru_node+0x169/0x270 [ 743.665720] ? __list_lru_init+0x544/0x750 [ 743.669940] ? sget_userns+0x6a2/0xe60 [ 743.673817] ? mount_fs+0x66/0x2d0 [ 743.677348] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 743.682089] ? do_mount+0xea4/0x2bb0 [ 743.685787] ? SyS_mount+0xab/0x120 [ 743.689398] ? do_syscall_64+0x281/0x940 [ 743.693453] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 743.698814] ? find_held_lock+0x35/0x1d0 [ 743.702868] ? __lock_is_held+0xb6/0x140 [ 743.706926] ? check_same_owner+0x320/0x320 [ 743.711246] ? rcu_note_context_switch+0x710/0x710 [ 743.716792] should_failslab+0xec/0x120 [ 743.720764] kmem_cache_alloc_trace+0x4b/0x740 [ 743.725331] ? __kmalloc_node+0x33/0x70 [ 743.729291] ? __kmalloc_node+0x33/0x70 [ 743.733262] ? rcu_read_lock_sched_held+0x108/0x120 [ 743.738271] __memcg_init_list_lru_node+0x169/0x270 [ 743.743280] ? list_lru_add+0x7c0/0x7c0 [ 743.747245] ? __kmalloc_node+0x47/0x70 [ 743.751213] __list_lru_init+0x544/0x750 [ 743.755273] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 743.761147] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 743.766152] ? __lockdep_init_map+0xe4/0x650 [ 743.770554] ? lockdep_init_map+0x9/0x10 [ 743.774607] sget_userns+0x6a2/0xe60 [ 743.778305] ? get_anon_bdev+0x2a0/0x2a0 [ 743.782360] ? destroy_unused_super.part.7+0xf0/0xf0 [ 743.787451] ? rcu_read_lock_sched_held+0x108/0x120 [ 743.792466] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 743.797309] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 743.802324] ? rcu_is_watching+0x85/0x130 [ 743.806467] ? trace_hardirqs_off+0x10/0x10 [ 743.810783] ? trace_hardirqs_off+0xd/0x10 [ 743.815015] ? cap_capable+0x1b5/0x230 [ 743.818895] ? security_capable+0x8e/0xc0 [ 743.823030] ? get_anon_bdev+0x2a0/0x2a0 [ 743.827079] ? ns_capable_common+0xcf/0x160 [ 743.831392] ? get_anon_bdev+0x2a0/0x2a0 [ 743.835440] sget+0xd2/0x120 [ 743.838445] ? __get_fs_type+0x8a/0xc0 [ 743.842320] ? shmem_remount_fs+0x750/0x750 [ 743.846632] mount_nodev+0x37/0x100 [ 743.850250] shmem_mount+0x2c/0x40 [ 743.853776] mount_fs+0x66/0x2d0 [ 743.857134] vfs_kern_mount.part.26+0xc6/0x4a0 [ 743.861707] ? may_umount+0xa0/0xa0 [ 743.865327] ? _raw_read_unlock+0x22/0x30 [ 743.869463] ? __get_fs_type+0x8a/0xc0 [ 743.873341] do_mount+0xea4/0x2bb0 [ 743.876872] ? copy_mount_string+0x40/0x40 [ 743.881096] ? rcu_pm_notify+0xc0/0xc0 [ 743.884975] ? copy_mount_options+0x5f/0x2e0 [ 743.889368] ? rcu_read_lock_sched_held+0x108/0x120 [ 743.894370] ? kmem_cache_alloc_trace+0x459/0x740 [ 743.899205] ? kasan_check_write+0x14/0x20 [ 743.903429] ? _copy_from_user+0x99/0x110 [ 743.907566] ? copy_mount_options+0x1f7/0x2e0 [ 743.912050] SyS_mount+0xab/0x120 [ 743.915488] ? copy_mnt_ns+0xb40/0xb40 [ 743.919370] do_syscall_64+0x281/0x940 [ 743.923242] ? vmalloc_sync_all+0x30/0x30 [ 743.927389] ? _raw_spin_unlock_irq+0x27/0x70 [ 743.931873] ? finish_task_switch+0x1c1/0x810 [ 743.936356] ? syscall_return_slowpath+0x550/0x550 [ 743.941271] ? syscall_return_slowpath+0x2ac/0x550 [ 743.946190] ? prepare_exit_to_usermode+0x350/0x350 [ 743.951199] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 743.956555] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 743.961388] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 743.966566] RIP: 0033:0x4552d9 [ 743.969740] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 743.977438] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 743.984693] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 743.991947] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 743.999202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 744.006462] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000010 2018/04/02 19:59:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {0x20}, {0x20, '/dev/ptmx\x00'}], 0xa, "cd356d9881c968b1e2e3b8ea23abdcda86f4b7942a84d31d1d77f255cd9810513d9cec54c67f28019174097ee9abbeb4b5d8fcc27bb4bb3169106bedd9c5321399f1ecafb5feca734e477d97c6f5a372b8b7ff6d5c267a5945e0842611c1626e1d308d824cfe93612ea09e0411b9c0a0c7a71d70dab121062a83e6b8447812448ba27fa96fece5a16c397ac0ece4e3fd342bfd56e4d49f54669fb2bc9b6bdfc8cc55d804c550985dad2120e04e8c44053d1a281933b9f509174f0c9f6076ed651d2d50fe77daa99a268fcef9079868f508b3b791359e6ca98330a32b96773da34fb05a6cf4fee5923ea81150f1ccdf8302c019"}, 0x115) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:59:02 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x100, 0x200000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001440)={0x1, 0x1, &(0x7f0000000300)=""/128, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/142, 0xf000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x10000, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8, 0x400000) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000140)=""/251) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000100)) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000000}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:02 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) socket$packet(0x11, 0x3, 0x300) 2018/04/02 19:59:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8)={0x2}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:59:02 executing program 4 (fault-call:2 fault-nth:17): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/153) 2018/04/02 19:59:02 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) getpeername$ipx(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 2018/04/02 19:59:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xee7, 0x400) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x20, 0x36) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x0, 0x70bd2b, 0x25dfdbfe, {0x1}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x88}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x1d}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x844}, 0x20000001) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="20638100001000004200000c3087000000f049000000000000a2000000000000e7c4eb6c806379cb3d568422b6c0dc6c83987be94f242842c6d120bbf38b49f45556c9bfdf454527282900899c815a8bfe93000000000000000000"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002700438100050000000000002cfcc6b48359153007000000f04900000000f19799bd48ea99350353d41c96cc0000a2808aa69f8f37b8b75ddf7fcde19be8152569d1ed37a3c9a70958e995bc3897e7a499698a45fc1a539e0da051c2942d27287cc28187746a8c27d2964d2733b7ed895a712892c05c11c1fef92a5e9baeb60b80aa46da1262199f21f5710079ad8c28d5e7c162049497dff36104a731d3563ade0b7de416b611636a8919b0611e3f21004ab411342b902b8af90aa4e9501f787ac7d12b5f28be12ecf38b2ba2b114e517a9c22989ecfcfeb1f740157d188517dca1e5bb189a94"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x8, &(0x7f00000035c0)=[{&(0x7f0000000300)="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", 0x1000, 0x100}, {&(0x7f0000000140)="fbdf43b208546d7393a48064798f2a64030c7fab7281b8b3a540d24f5fb96d65a5ed83fa918a2cc732548b5ef099693445e173457a45cd13d2cbdb4be2828cc41f736bc857f33579e23cf719691ef67248491e796cd986ce7099cfbcda5e85daafe1326fcac00473b11cd10dd183c0079288b81ae945bfbcf4c004140013947616700f3a5e47ca79cd9c29a9fdb39f1f2cd2ed", 0x93, 0x2}, {&(0x7f0000001300)="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", 0x1000, 0x1804}, {&(0x7f0000002300)="de4f1b23f73e880db3e85593a060c4274c77028d8de4709e9caa02c44f887742528be0a42bf4f7baa9ae822b3e2aa9c05329f60c54c9c04ab2d9c50dbb2a2d30a87c9e3092daa87093e3eaef9c23f52ae7c3a61d590ec14199b9cd8326d0680f335300c7d223b97feeeffe14b96ecc7a72f8850c0a0dd28fca63089dabf818e2b7de70cb03aa8a1dbb551a8445c79532ed69cc9ac64ed90182a5eb6a24b354d08df5a03d1cf2f03202c9633afa9eb97f0e57ca36f31341981c1e9b3b8d7783f96544f5811985fb4409c8a1913e570d06d30f8235614c5f449204046c203342c41cbf73dea1fe3c0dee234bad572e257e3773114edeb68f06b5be98e6e1", 0xfd, 0x2}, {&(0x7f0000002400)="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", 0x1000, 0x1}, {&(0x7f0000000200)="84fcf46584e6b8458c41c8d46072bf42a24c9d2342038458d4f8c5478c2aa99a8ea35afb857441c48ec78c77e4c6ca920cbbbbce391f94bb58a24c37e61138d4e977f8259bd4879e818b3eeae7f09d8888d3074c", 0x54, 0x5}, {&(0x7f0000003400)="0a6ff3a3e4499b99e7d070703e8f1ca416ff57170d88f365161b3282d8f12fc94a2c8fcc50b6ab1ef0afc94f1bd6e147d9b8033eb496a97520da23833e26a1db1df7494648ad96335b6c1883e43323cf5876525ac824b9813d396f778d3634e9f5d7928333d46f449c842ebab367efdcf9d1511c76bb05aa59be19b91698a7d524cbc4e207866b97514376f2977b712a48ef7062eebab072ed4df5bc0b62", 0x9e, 0x4}, {&(0x7f00000034c0)="6cadf1e93bda583b960d04d5f755efc9b39f644230fb639fcf981c981f47362cf0118bbbcb1252c6e91157b8fca67119a7a439ae969ffb02888fc4d19394f34bce46e0b2fc5eb07b6bbd87914dcabca7f033878ab2d63fbc8870bc7af25aa18decd73234bc0a2a0176531cd69dd966276475110588224be0fedb01a2f341e74b6f884169675df01b31da2f25a8c92261e21759afc0bbffb331de14f87ab6d7c8e4e7c5d3282e92a13e36c4dab0975011f7b99eb18ca12435c9ceb924bba780fdb8b68cd4bdae2a6ea84d803a8e53bdf5c703e0f3db00c18d290fedce164203a091154a3ea31671c433c622570e15577ab881fa34704d2b24eddd48", 0xfb, 0x9}], 0x20, &(0x7f0000000280)={[{@dir_umask={'dir_umask', 0x3d, [0x32, 0x37, 0x32, 0x32, 0x35, 0x34, 0x35, 0x35]}, 0x2c}, {@creator={'creator', 0x3d, "ddce1763"}, 0x2c}]}) 2018/04/02 19:59:02 executing program 1: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={"6c6f00ecff00000000000000f9ff00", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}, 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r3 = dup(r0) setsockopt$inet6_dccp_buf(r3, 0x21, 0xd, &(0x7f0000000080)="14", 0x1) [ 745.163679] IPVS: ftp: loaded support on port[0] = 21 2018/04/02 19:59:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000008000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x40, 0x0) sendmsg$kcm(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000500)="53e362a775506dbbcc2065a32c7268d5cf49a33a345b93528581fc1262c4e672cf2312bf8d86ac1ca2f0ef300260d817ca661d200eab7222d1a2a550dc640b57c6861a80b7363b8a6b18c799b0ead5a13f4f575c9f284fb555a188d10f5711ada0be45e7285dc011f389", 0x6a}, {&(0x7f0000000580)="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", 0x1000}], 0x2, 0x0, 0x0, 0x41}, 0x4) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) 2018/04/02 19:59:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="208159593b0dd22b00000000000c3007000000f049000000000000a2000000000000000000f09f"], 0x1}, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0a7f16e", @ANYRES16=r1, @ANYBLOB="00042dbd7000fcdbdf25070000000c0003000800030001000000080005002c010000080004000900000008000500080000007400010008000b007369700008000b007369700014000300ff01000000000000000000000000000108000600646800000c00070002000000350059be0c000700040000000c000000080004004e0f0800080002007e00000008000800010000001400030000000000000000000000000000000000080005003f00000008000600010000001400020008000b000a00000008000800ff010000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c850) r2 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x200, 0x1) creat(&(0x7f0000000400)='./file0\x00', 0x101) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x44) [ 745.290398] FAULT_INJECTION: forcing a failure. [ 745.290398] name failslab, interval 1, probability 0, space 0, times 0 [ 745.301698] CPU: 0 PID: 14229 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 745.308699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.318037] Call Trace: [ 745.320615] dump_stack+0x1a7/0x27d [ 745.324238] ? arch_local_irq_restore+0x53/0x53 [ 745.328898] ? __save_stack_trace+0x7e/0xd0 [ 745.333216] should_fail+0x914/0xae0 [ 745.336922] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 745.342014] ? kasan_kmalloc+0xad/0xe0 [ 745.345890] ? kmem_cache_alloc_trace+0x136/0x740 [ 745.350727] ? __memcg_init_list_lru_node+0x169/0x270 [ 745.355903] ? __list_lru_init+0x544/0x750 [ 745.360123] ? sget_userns+0x6a2/0xe60 [ 745.363999] ? mount_fs+0x66/0x2d0 [ 745.367528] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 745.372267] ? do_mount+0xea4/0x2bb0 [ 745.375966] ? SyS_mount+0xab/0x120 [ 745.379582] ? do_syscall_64+0x281/0x940 [ 745.383628] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 745.388988] ? find_held_lock+0x35/0x1d0 [ 745.393040] ? __lock_is_held+0xb6/0x140 [ 745.397106] ? check_same_owner+0x320/0x320 [ 745.401418] ? rcu_note_context_switch+0x710/0x710 [ 745.406345] should_failslab+0xec/0x120 [ 745.410309] kmem_cache_alloc_trace+0x4b/0x740 [ 745.414881] ? __kmalloc_node+0x33/0x70 [ 745.418842] ? __kmalloc_node+0x33/0x70 [ 745.422806] ? rcu_read_lock_sched_held+0x108/0x120 [ 745.427817] __memcg_init_list_lru_node+0x169/0x270 [ 745.432827] ? list_lru_add+0x7c0/0x7c0 [ 745.436787] ? __kmalloc_node+0x47/0x70 [ 745.440758] __list_lru_init+0x544/0x750 [ 745.444811] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 745.450688] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 745.455697] ? __lockdep_init_map+0xe4/0x650 [ 745.460103] ? lockdep_init_map+0x9/0x10 [ 745.464156] sget_userns+0x6a2/0xe60 [ 745.467858] ? get_anon_bdev+0x2a0/0x2a0 [ 745.471915] ? destroy_unused_super.part.7+0xf0/0xf0 [ 745.477004] ? rcu_read_lock_sched_held+0x108/0x120 [ 745.482010] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 745.486848] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 745.491864] ? rcu_is_watching+0x85/0x130 [ 745.496004] ? trace_hardirqs_off+0x10/0x10 [ 745.500314] ? trace_hardirqs_off+0xd/0x10 [ 745.504541] ? cap_capable+0x1b5/0x230 [ 745.508421] ? security_capable+0x8e/0xc0 [ 745.512559] ? get_anon_bdev+0x2a0/0x2a0 [ 745.516609] ? ns_capable_common+0xcf/0x160 [ 745.520922] ? get_anon_bdev+0x2a0/0x2a0 [ 745.524969] sget+0xd2/0x120 [ 745.527976] ? __get_fs_type+0x8a/0xc0 [ 745.531851] ? shmem_remount_fs+0x750/0x750 [ 745.536174] mount_nodev+0x37/0x100 [ 745.539790] shmem_mount+0x2c/0x40 [ 745.543321] mount_fs+0x66/0x2d0 [ 745.546678] vfs_kern_mount.part.26+0xc6/0x4a0 [ 745.551254] ? may_umount+0xa0/0xa0 [ 745.554871] ? _raw_read_unlock+0x22/0x30 [ 745.559005] ? __get_fs_type+0x8a/0xc0 [ 745.562889] do_mount+0xea4/0x2bb0 [ 745.566420] ? copy_mount_string+0x40/0x40 [ 745.570645] ? rcu_pm_notify+0xc0/0xc0 [ 745.574526] ? copy_mount_options+0x5f/0x2e0 [ 745.578919] ? rcu_read_lock_sched_held+0x108/0x120 [ 745.583926] ? kmem_cache_alloc_trace+0x459/0x740 [ 745.588756] ? kasan_check_write+0x14/0x20 [ 745.592977] ? _copy_from_user+0x99/0x110 [ 745.597117] ? copy_mount_options+0x1f7/0x2e0 [ 745.601606] SyS_mount+0xab/0x120 [ 745.605045] ? copy_mnt_ns+0xb40/0xb40 [ 745.608926] do_syscall_64+0x281/0x940 [ 745.612802] ? vmalloc_sync_all+0x30/0x30 [ 745.616940] ? _raw_spin_unlock_irq+0x27/0x70 [ 745.621423] ? finish_task_switch+0x1c1/0x810 [ 745.625906] ? syscall_return_slowpath+0x550/0x550 [ 745.630821] ? syscall_return_slowpath+0x2ac/0x550 [ 745.635738] ? prepare_exit_to_usermode+0x350/0x350 [ 745.640741] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 745.646119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 745.650956] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 745.656132] RIP: 0033:0x4552d9 [ 745.659312] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 745.667007] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 745.674265] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 745.681520] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 2018/04/02 19:59:03 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x8010, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x84010, 0xffffffffffffff9c, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f0000000200)=0x80) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe20c1aecd63978c3, 0x8013, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x108, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x3, 0x3}, @request_death={0x400c630e, 0x3, 0x4}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x2, 0x6}, @fda={0x66646185, 0x3, 0x3, 0x6}], &(0x7f0000000140)=[0x78, 0x20, 0x38]}}, @acquire_done={0x40106309, r1, 0x3}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000240)=[@fda={0x66646185, 0xa, 0x3, 0x1d}, @flat={0x776a2a85, 0xa, r2, 0x4}, @fd={0x66642a85, 0x0, r3, 0x0, 0x2}], &(0x7f00000002c0)=[0x30]}, 0x7f}}, @transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x40, 0x40, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x1, 0x3, 0x13}, @flat={0x776a2a85, 0x1, r4, 0x4}], &(0x7f0000000380)=[0x78, 0x68, 0x28, 0x38, 0x18, 0x68, 0x28, 0x68]}}], 0x48, 0x0, &(0x7f0000000500)="be8b0456f5707649a60314ff2003594df884b03c1ca6de8bc5b09539f31517d9a1ee8cb5342e8629cad7d7b730eb1bd0457cd3146171598296293e312c77ecb08bbee142adf25ae2"}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r5, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") [ 745.688775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 745.696032] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000011 2018/04/02 19:59:03 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r2 = dup2(r0, r1) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x34, @loopback={0x0, 0x1}, 0xfffffffffffffe00}, {0xa, 0x4e20, 0xfffffffffffffffe, @loopback={0x0, 0x1}}, 0x200, [0xf7f, 0x3, 0x0, 0x40, 0x3, 0x3, 0x200, 0x2]}, 0x5c) 2018/04/02 19:59:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x1, r1, r2, 0xfb1, 0xffffffff, 0x20) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:59:04 executing program 6: mkdir(&(0x7f0000000140)='./file0\x00', 0xa) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) socketpair(0x11, 0x1, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x4, 0x10000, &(0x7f0000000080)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000d68f5d)="60bc836ead2c9191cf") setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 2018/04/02 19:59:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1) 2018/04/02 19:59:04 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x54000a10, &(0x7f0000ffe000/0x2000)=nil) 2018/04/02 19:59:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:04 executing program 4 (fault-call:2 fault-nth:18): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) statx(r0, &(0x7f0000000240)='./file0\x00', 0x1000, 0x8, &(0x7f0000000280)) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0x6, 0x9}, 0x1, 0x3ff, 0x9, {0x4af6, 0xffffffffffff0000}, 0xffffffff, 0x4}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x4, 0x7ff, 0x1, 0x1, 0x6, 0xfff, 0x18b3c0000000, 0x1ff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)=0x0) sched_setattr(r2, &(0x7f00000003c0)={0x30, 0x1, 0x1, 0xff, 0x7, 0x1d24000000000000, 0x401, 0x5}, 0x0) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x80000001, 0xfffffffffffff001, 0x9, 0xfff]}) 2018/04/02 19:59:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000bc0)={0xffffffffffffffff}) shutdown(r1, 0x1) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) socketpair(0x10, 0x80000, 0xba, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r2, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e, 0x800) r3 = dup2(r0, 0xffffffffffffffff) r4 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_netfilter(r3, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x6ac, 0xb, 0xf, 0x100, 0x70bd27, 0x25dfdbfc, {0x5, 0x0, 0x5}, [@nested={0xa4, 0x5, [@generic="20f4e59b856ee96e56f66d4990a799d70e3ec80b421c00a28eac663ef6d8852d640e6d42ec2f7d12206811112f04ec98d37f3690ff55e9f3bbbb18f1b1ec46043528234bc45632fcd3ae86c202cfa8903bfa1031023a1d68954bbfa76cb28c5c8973179b04d21aef1a2d0c84638d6b89af353e1fdab11bb5d39a5628a5cd937726819200d3186e402cfbcfc90a0aa2e44df3f7b876fb17a33e42fe0a64517e1e"]}, @typed={0x4, 0x28}, @typed={0x8, 0x8d, @pid=r4}, @nested={0x2c, 0x3a, [@typed={0x14, 0x2, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0x4, 0x1e}, @typed={0x8, 0x3b, @u32=0x23683dc1}, @typed={0x8, 0x33, @ipv4=@multicast1=0xe0000001}]}, @generic="ccba4e88057cbdb599a05b865e68d185f8e9c3480f9c800dc243fccb19a6183bf0b42d17d8893ef8e7673f0bd6f137c69d8e356d6587d4fdebe30d8d247edb77781055225ac657f9077d36b40b9b66f0eaecfc296f9488a90c7216d8f25f06f111af66ffa9ce5ac8cf4aacd97e3674e1524cc43f6e6e65fc4d01a7e2373b093c21bc985cbedb9f7c3fbf121935ec77fa58008cf0736bbd6997f5a01309", @nested={0x98, 0x2b, [@generic="7ca402b6d66eb0d2cfe86a6ba188d34baf702df1c7842dd605d2eb2f9f1e5e204f4ddb8d8e4d4224f8269f6cc370defb4b90da4d5d6a2beaf94fed1571bc69966e8e789cff3fb1f40ed8dcaf42353281829c74b6bcb9b12d1cb2da7b359585666847eff10a3371d83b00ef4077b9ad58623841a2", @generic="36b8f0df50fbf42190ea21a8f04ce0cf0efe5eed4cc61b397754dcb2e2287b7a"]}, @typed={0x8, 0x15, @fd=r3}, @nested={0x94, 0x12, [@typed={0x8, 0x4f, @pid=r4}, @typed={0x8, 0x48, @u32=0x2}, @generic="dd9891db8cc9d921c5214890439cc59bd2736990edd660495c714e32ec9c4857ae1eb2d0bf670228a7331249b1793777a0e68ce2b9f646059d9a3660b2f6f868365dd0a67fde1f1e6cb970793b9bf6c82bfcebe7b34247e1e1b13a5b695f56b94f539d402afff64361e8994c9ef433e4e9f171fc1ea8488e8965fab3035a90fa"]}, @nested={0x1a4, 0x42, [@generic="cde6705f5f6590ae0973a040cb510d36396483cb1b8f2f19cd2b805831bf04145b5e334d56a7ef9a3eb318a3433114aa01eaed4589f5c8cb5cbc97b7a794e7e283524ab62bd8b702d246582b1b7c9ac17fd1aea1209b3fdd3564", @typed={0x8, 0x46, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}, @typed={0x8, 0x9, @uid=r5}, @generic="1d11553cc1d482a35546629f50b69be984cb03691992200e72210dbf21ad58a3bbac554cf7ae499c5f5cc5533106a77d7ffd159400be0534b9aa095cc478fd92caeb7e501d026ed2b8283bf6368e13af595feb6d3eb9e9253d125ff04d80e711102771343d27162203dc56f3ba342c04519b61fdf10f51", @typed={0x90, 0x7d, @binary="575832374aa613b781ad549885d318f71dbd66104f797fd12cc7843a5a7ede30f44c046a9e12f3314786676a815bd30191c70a0db1a59083432a18b5d3cc539f8f74bb837474ddf5f7d057053716e90f8d4910a73cdcf3d80cf903ffb91ec8418fe6e2870779d55e4601c1a3ae61e134645d0ca9aca51079bedeb210f01add83c98b358b0480ac45d49b5fe5"}, @typed={0x8, 0x2b, @u32=0x567}, @generic="cb65d53f153f7431c23cb0554f287c0d0b49560989aa", @typed={0x8, 0x47, @pid=r4}, @typed={0x8, 0x1b, @fd=r0}]}, @nested={0x244, 0x32, [@generic="5c8793a150039a9f748900d7da63a107562c0fce7487c9", @generic="8d508bdaabe371bacdb761898d3260a6f6e08d1ad212d33839e471a60f730e3afca835c5fd17ed611e4fa99c18730410b176ab579d877883d66a6451164ec2414617cad040", @generic="048dbdb018bade111088153232e44e99e75cc440c6eb2b3134dbd053a618285a7491ff6e9cf7ec6758374c10c5b8dbce9afb2a4babea0947ecafe83856a9ffc019a4615339f85b4231fdc71cf295859bd28eb71ffc4706546c0d878f04c7cfc73dcb6644e380bb3953401ef50c0aaf7fe78b4a54341b0cf65039fd3bc9605356aab2fbe27ba142ce5668ed93c898016a053c64c64df1f519de9a26a525fcbe67f7af440e8aa2d1a0cfa0b0d2e29e1bc5a125c15f76bcac34abad2f7e1e4e5da223bd1811e625de4f7693f8095aa8f805ba", @generic="43373cbc6a6fde1fe5be9124553c53435e37af04708abbe51e5c035a9fd838cfda2ad2f55e325ebd67c4f9adc1fe808655f2a4b5fc7a43ce22dcbf8fc213de5419f686c2b243a8e5be893c81d03202d8f7479980c9baaee94ac4d68f6bc40b7e3fc8bf71a2b3b62b40ba05e038390d1e7df27170b16d0abc3ae8700aceca4af1d67d2274f704ca1abb8209401f46029415f4175e59", @generic="9f9111e06e79a85a1cef7abf380d5fe7369cf19106ef0520b37a1ccd99fe9bde702dbe5fff57570c5b3a80f5df4782ca16912337f60abd100b218d54fe4e03af97b7d5e9db53c6437f7394562fc4bfd4eafbb4e62a7664d79feaed6e715b037fa69b5c69ec79c6a1bbde03813b39752d", @typed={0x8, 0x7a, @pid=r4}, @typed={0x4, 0x71}]}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x40801}, 0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100f049000000000000a20000000000000000000000000000"], 0x1}, 0x1}, 0x0) r1 = socket(0x7, 0x6, 0x10000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000001300)={0x0, @in={{0x2, 0x4e22}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000013c0)={r2, @in={{0x2, 0x4e21}}, 0x3fe, 0x9}, 0x90) 2018/04/02 19:59:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000270063810005fff049001600800000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000140)={0x6, r0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0x50, &(0x7f0000000180)}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x204340, 0x50) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000300)=""/157) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0xa8be, 0x2) [ 747.210369] FAULT_INJECTION: forcing a failure. [ 747.210369] name failslab, interval 1, probability 0, space 0, times 0 [ 747.221659] CPU: 0 PID: 14293 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 747.228661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.237998] Call Trace: [ 747.240580] dump_stack+0x1a7/0x27d [ 747.244202] ? arch_local_irq_restore+0x53/0x53 [ 747.248861] ? __save_stack_trace+0x7e/0xd0 [ 747.253180] should_fail+0x914/0xae0 [ 747.256884] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 747.261974] ? kasan_kmalloc+0xad/0xe0 [ 747.265846] ? kmem_cache_alloc_trace+0x136/0x740 [ 747.270672] ? __memcg_init_list_lru_node+0x169/0x270 [ 747.275846] ? __list_lru_init+0x544/0x750 [ 747.280071] ? sget_userns+0x6a2/0xe60 [ 747.283953] ? mount_fs+0x66/0x2d0 [ 747.287485] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 747.292224] ? do_mount+0xea4/0x2bb0 [ 747.295923] ? SyS_mount+0xab/0x120 [ 747.299546] ? do_syscall_64+0x281/0x940 [ 747.303596] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 747.308958] ? find_held_lock+0x35/0x1d0 [ 747.313012] ? __lock_is_held+0xb6/0x140 [ 747.317075] ? check_same_owner+0x320/0x320 [ 747.321388] ? rcu_note_context_switch+0x710/0x710 [ 747.326310] should_failslab+0xec/0x120 [ 747.330279] kmem_cache_alloc_trace+0x4b/0x740 [ 747.334846] ? __kmalloc_node+0x33/0x70 [ 747.338806] ? __kmalloc_node+0x33/0x70 [ 747.342768] ? rcu_read_lock_sched_held+0x108/0x120 [ 747.347775] __memcg_init_list_lru_node+0x169/0x270 [ 747.352785] ? list_lru_add+0x7c0/0x7c0 [ 747.356745] ? __kmalloc_node+0x47/0x70 [ 747.360716] __list_lru_init+0x544/0x750 [ 747.364767] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 747.370642] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 747.375647] ? __lockdep_init_map+0xe4/0x650 [ 747.380049] ? lockdep_init_map+0x9/0x10 [ 747.384103] sget_userns+0x6a2/0xe60 [ 747.387803] ? get_anon_bdev+0x2a0/0x2a0 [ 747.391865] ? destroy_unused_super.part.7+0xf0/0xf0 [ 747.396954] ? rcu_read_lock_sched_held+0x108/0x120 [ 747.401957] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 747.406789] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 747.411804] ? rcu_is_watching+0x85/0x130 [ 747.415949] ? trace_hardirqs_off+0x10/0x10 [ 747.420256] ? trace_hardirqs_off+0xd/0x10 [ 747.424480] ? cap_capable+0x1b5/0x230 [ 747.428362] ? security_capable+0x8e/0xc0 [ 747.432498] ? get_anon_bdev+0x2a0/0x2a0 [ 747.436549] ? ns_capable_common+0xcf/0x160 [ 747.440860] ? get_anon_bdev+0x2a0/0x2a0 [ 747.444905] sget+0xd2/0x120 [ 747.447924] ? __get_fs_type+0x8a/0xc0 [ 747.451798] ? shmem_remount_fs+0x750/0x750 [ 747.456111] mount_nodev+0x37/0x100 [ 747.459729] shmem_mount+0x2c/0x40 [ 747.463260] mount_fs+0x66/0x2d0 [ 747.466619] vfs_kern_mount.part.26+0xc6/0x4a0 [ 747.471189] ? may_umount+0xa0/0xa0 [ 747.474808] ? _raw_read_unlock+0x22/0x30 [ 747.478942] ? __get_fs_type+0x8a/0xc0 [ 747.482820] do_mount+0xea4/0x2bb0 [ 747.486351] ? copy_mount_string+0x40/0x40 [ 747.490572] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 747.495576] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 747.500328] ? retint_kernel+0x10/0x10 [ 747.504208] ? copy_mount_options+0x18b/0x2e0 [ 747.508693] ? __sanitizer_cov_trace_pc+0x1/0x50 [ 747.513438] ? copy_mount_options+0x1f7/0x2e0 [ 747.517928] SyS_mount+0xab/0x120 [ 747.521365] ? copy_mnt_ns+0xb40/0xb40 [ 747.525240] do_syscall_64+0x281/0x940 [ 747.529114] ? vmalloc_sync_all+0x30/0x30 [ 747.533251] ? _raw_spin_unlock_irq+0x27/0x70 [ 747.537734] ? finish_task_switch+0x1c1/0x810 [ 747.542220] ? syscall_return_slowpath+0x550/0x550 [ 747.547146] ? syscall_return_slowpath+0x2ac/0x550 [ 747.552062] ? prepare_exit_to_usermode+0x350/0x350 [ 747.557065] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 747.562423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 747.567259] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 747.572433] RIP: 0033:0x4552d9 [ 747.575606] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 747.583306] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 747.590563] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 747.597817] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 747.605071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 747.612326] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000012 2018/04/02 19:59:05 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x125182) ioctl$TCSBRK(r1, 0x5409, 0x8000) setns(r0, 0x4000000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x7f) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0x50, &(0x7f0000000140)}, 0x10) 2018/04/02 19:59:05 executing program 4 (fault-call:2 fault-nth:19): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) [ 747.745955] FAULT_INJECTION: forcing a failure. [ 747.745955] name failslab, interval 1, probability 0, space 0, times 0 [ 747.757319] CPU: 0 PID: 14319 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 747.764413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.773747] Call Trace: [ 747.776326] dump_stack+0x1a7/0x27d [ 747.779944] ? arch_local_irq_restore+0x53/0x53 [ 747.784598] ? mutex_lock_io_nested+0x16c0/0x16c0 [ 747.789426] ? __memcg_init_list_lru_node+0x169/0x270 [ 747.794610] should_fail+0x914/0xae0 [ 747.798317] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 747.803414] ? lock_downgrade+0x980/0x980 [ 747.807551] ? find_held_lock+0x35/0x1d0 [ 747.811606] ? __lock_is_held+0xb6/0x140 [ 747.815675] ? check_same_owner+0x320/0x320 [ 747.820002] ? __might_sleep+0x95/0x190 [ 747.823974] ? rcu_note_context_switch+0x710/0x710 [ 747.828911] should_failslab+0xec/0x120 [ 747.832880] __kmalloc+0x63/0x760 [ 747.836339] ? __kmalloc_node+0x47/0x70 [ 747.840307] ? __list_lru_init+0xcf/0x750 [ 747.844445] __list_lru_init+0xcf/0x750 [ 747.848408] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 747.854284] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 747.859294] ? lockdep_init_map+0x9/0x10 [ 747.863345] sget_userns+0x6c2/0xe60 [ 747.867042] ? get_anon_bdev+0x2a0/0x2a0 [ 747.871093] ? destroy_unused_super.part.7+0xf0/0xf0 [ 747.876181] ? rcu_read_lock_sched_held+0x108/0x120 [ 747.881187] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 747.886017] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 747.891017] ? rcu_is_watching+0x85/0x130 [ 747.895151] ? trace_hardirqs_off+0x10/0x10 [ 747.899457] ? trace_hardirqs_off+0xd/0x10 [ 747.903681] ? cap_capable+0x1b5/0x230 [ 747.907558] ? security_capable+0x8e/0xc0 [ 747.911692] ? get_anon_bdev+0x2a0/0x2a0 [ 747.915738] ? ns_capable_common+0xcf/0x160 [ 747.920050] ? get_anon_bdev+0x2a0/0x2a0 [ 747.924099] sget+0xd2/0x120 [ 747.927103] ? __get_fs_type+0x8a/0xc0 [ 747.930975] ? shmem_remount_fs+0x750/0x750 [ 747.935282] mount_nodev+0x37/0x100 [ 747.938917] shmem_mount+0x2c/0x40 [ 747.942446] mount_fs+0x66/0x2d0 [ 747.945799] vfs_kern_mount.part.26+0xc6/0x4a0 [ 747.950370] ? may_umount+0xa0/0xa0 [ 747.953983] ? _raw_read_unlock+0x22/0x30 [ 747.958120] ? __get_fs_type+0x8a/0xc0 [ 747.962000] do_mount+0xea4/0x2bb0 [ 747.965528] ? copy_mount_string+0x40/0x40 [ 747.969750] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 747.974756] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 747.979500] ? retint_kernel+0x10/0x10 [ 747.983376] ? copy_mount_options+0x18b/0x2e0 [ 747.987860] ? __sanitizer_cov_trace_pc+0x2b/0x50 [ 747.992691] ? copy_mount_options+0x1f7/0x2e0 [ 747.997174] SyS_mount+0xab/0x120 [ 748.000609] ? copy_mnt_ns+0xb40/0xb40 [ 748.004486] do_syscall_64+0x281/0x940 [ 748.008360] ? vmalloc_sync_all+0x30/0x30 [ 748.012492] ? _raw_spin_unlock_irq+0x27/0x70 [ 748.016981] ? finish_task_switch+0x1c1/0x810 [ 748.021463] ? syscall_return_slowpath+0x550/0x550 [ 748.026381] ? syscall_return_slowpath+0x2ac/0x550 [ 748.031299] ? prepare_exit_to_usermode+0x350/0x350 [ 748.036304] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 748.041654] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 748.046486] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 748.051661] RIP: 0033:0x4552d9 [ 748.054837] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 748.062537] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 748.069790] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 748.077043] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 748.084298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 2018/04/02 19:59:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000270000a20008c933aacfffa7d1a8143c"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) [ 748.091553] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000013 2018/04/02 19:59:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x141482, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000200)=0xe8) 2018/04/02 19:59:06 executing program 7: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x100000000, 0x20502) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000000200)="282566e4faea83bd4c614f744e5a64b895fd70d932e35906b4f43335374506cbe4751d8f52d9f3c75e09195e0b745c623c6fda069e0863ec1a00b49fc36660ea4597265ae9ffe34cf0eb1c1df72322399135f164fe714c217c908f39a9595f0c95a1fd72ac1bb24125b0ec465d4ef90c8d09afb025cb97041da7f640ebe5e7926d0aec40d64a96d021b3cc697931f62ae29f4f6b61dd2828c8b56b79e4eca81387f1163028c30e06", 0xa8) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000140)={0x0, r1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) syz_open_procfs(r2, &(0x7f00000001c0)='net/rt6_stats\x00') memfd_create(&(0x7f00000002c0)='user{vboxnet0(@selinux\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000080)=0x8) 2018/04/02 19:59:06 executing program 4 (fault-call:2 fault-nth:20): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000400)={0x0, 0x80000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000700)={r2, 0x0, r3}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0xa, &(0x7f00000005c0)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="c1bab9be261267485d615b6c197212671016c318ac9993ca8e820bd8503ed22695c217b67c784305a67635e5b09872cb7c2bd142837055acb8fb18626c6f31293c5042eb6a4e07bc36840a7ab1ea40e4519326a439f4fdbe8bc6b937a7456f359f0e33cbeefe0b9e61a9496825cbfd927d453c22985b0d33db93c9620cf62917f4f900f9b5914ad159f174dbd95df8c16f3a386c771540842616ba05e1bd1e1a29ac644195a53fcb815e6d14b3004daedb79a2", 0xb3}, {&(0x7f0000000240)="fcdada1d05b27603d0ce6054688b76e466ebaae60a5e3641b44a276f61662f6de593bdcf43f2cb681d2c648d34e79a80534a681ff86aa37a2fc220c730c9b34da81b9920918c9372b68f67342b26c63e65a7691cca57032942e94fa4a714086edc9c95761b8305bc88cc06a27490f251a9902d4c670f77b772ad2d9c21c0458df35485f9c0", 0x85, 0xff}, {&(0x7f0000000300)="ec6adfd0d88102568c759c47b8f6e161b7d8c0f499005e9938595f045bd3142fe698fbd15fbfc4788ca105735919ede541c5b9f2620ac733f9d8ae4f26340f7624f1223c783025a5f93253035fccf7beb890bee5617ea916dde69e7cfe725bc582dcfcdec01e79e43634046f96d345c765781ae70a3a", 0x76, 0x3}, {&(0x7f0000000380)="5828389ef88720ad026eaa3a1e69d80ce743a9804986e3", 0x17, 0x800}, {&(0x7f00000003c0)="7acc681c9fb06e899772e615aedf876c8c41ce4ff97412d3a2ec68b26bf1fdb74dce127680daa4932e851f730bf26f1353d77c93bfcdef13", 0x38, 0x4}, {&(0x7f0000000400), 0x0, 0xfffffffffffffff7}, {&(0x7f0000000440)="ff2da75623b4ac59a3a01d17daa594f951f1373c79ca8a09f02cbfa4a15cabbc7b0a17327b37a0e9158058dc562dcc6daf8f87046cc8d4780a4d2f5505de0849a9143a1b61b37271014870231d076da7f9751a07a9affe969f21631c29d59231eae73ceed813a23afe76038092aaa56423dded3a9fe5a057cf368295eeca1afe7bef15c85f1268eafa2f79c421386759830ea2b5156763e919d543383b84d25066c62163502f051d2674aca439f08345d1d31ae90f0f65d4521263d8059cd4f451a3785706785e0995b08471e6437e5d23d784449d53a333c90934d0ced6748ec4f67141b79f68001acc77597ccae8", 0xef, 0xffffffffffff7fff}, {&(0x7f0000000540)="82f63fe2b42be41e35b155fe445bae6ffc7e6fcb28df549d1e6d123a14f2f89f240bbd497c67", 0x26, 0x4}, {&(0x7f0000000580), 0x0, 0x20}], 0x10000, &(0x7f00000006c0)={[{@tz_utc='tz=UTC', 0x2c}]}) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:59:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x800000000}, &(0x7f0000000280)=0x2b4) sysfs$3(0x3) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000140)=0x3f, 0x2) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000340)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:06 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x81, 0x101000) getpeername$ipx(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="d7550000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x24) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20000, 0x0) 2018/04/02 19:59:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x301040) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KDSETLED(r1, 0x4b32, 0x101) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x8, @loopback={0x0, 0x1}, 0x7}}, 0x7, 0x4, 0xffff, 0x3, 0x8915}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000340)={r2, 0x4, 0x3, 0x7}, 0x10) ioctl$TCXONC(r0, 0x540a, 0xfffffffffffffffd) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x1ff, &(0x7f0000000180)=0x4) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)={r3, 0x80000, r1}) 2018/04/02 19:59:06 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) getgroups(0x1, &(0x7f0000000180)=[0xffffffffffffffff]) fchown(r1, r2, r3) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000001c0)=""/215, &(0x7f00000002c0)=0xd7) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000300)=""/243, &(0x7f0000000400)=0xf3) 2018/04/02 19:59:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xaa94, 0x2000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xff, 0x0, 0x7fffffff, 0x8}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0x3}, &(0x7f0000000140)=0x8) [ 749.404272] FAULT_INJECTION: forcing a failure. [ 749.404272] name failslab, interval 1, probability 0, space 0, times 0 [ 749.415567] CPU: 0 PID: 14349 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 749.422569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.431905] Call Trace: [ 749.434483] dump_stack+0x1a7/0x27d [ 749.438104] ? arch_local_irq_restore+0x53/0x53 [ 749.442765] ? __save_stack_trace+0x7e/0xd0 [ 749.447088] should_fail+0x914/0xae0 [ 749.450794] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 749.455887] ? kasan_kmalloc+0xad/0xe0 [ 749.459770] ? kmem_cache_alloc_trace+0x136/0x740 [ 749.464599] ? __memcg_init_list_lru_node+0x169/0x270 [ 749.469779] ? __list_lru_init+0x544/0x750 [ 749.474000] ? sget_userns+0x6a2/0xe60 [ 749.477878] ? mount_fs+0x66/0x2d0 [ 749.481409] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 749.486148] ? do_mount+0xea4/0x2bb0 [ 749.489846] ? SyS_mount+0xab/0x120 [ 749.493462] ? do_syscall_64+0x281/0x940 [ 749.497513] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 749.502874] ? find_held_lock+0x35/0x1d0 [ 749.506926] ? __lock_is_held+0xb6/0x140 [ 749.510988] ? check_same_owner+0x320/0x320 [ 749.515305] ? rcu_note_context_switch+0x710/0x710 [ 749.520231] should_failslab+0xec/0x120 [ 749.524197] kmem_cache_alloc_trace+0x4b/0x740 [ 749.528776] __memcg_init_list_lru_node+0x169/0x270 [ 749.533784] ? list_lru_add+0x7c0/0x7c0 [ 749.537755] ? __kmalloc_node+0x47/0x70 [ 749.541725] __list_lru_init+0x544/0x750 [ 749.545781] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 749.551669] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 749.556680] ? __lockdep_init_map+0xe4/0x650 [ 749.561083] ? lockdep_init_map+0x9/0x10 [ 749.565137] sget_userns+0x6a2/0xe60 [ 749.568836] ? get_anon_bdev+0x2a0/0x2a0 [ 749.572893] ? destroy_unused_super.part.7+0xf0/0xf0 [ 749.577982] ? rcu_read_lock_sched_held+0x108/0x120 [ 749.582990] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 749.587822] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 749.592826] ? rcu_is_watching+0x85/0x130 [ 749.596962] ? trace_hardirqs_off+0x10/0x10 [ 749.601270] ? trace_hardirqs_off+0xd/0x10 [ 749.605497] ? cap_capable+0x1b5/0x230 [ 749.609461] ? security_capable+0x8e/0xc0 [ 749.613596] ? get_anon_bdev+0x2a0/0x2a0 [ 749.617655] ? ns_capable_common+0xcf/0x160 [ 749.621972] ? get_anon_bdev+0x2a0/0x2a0 [ 749.626024] sget+0xd2/0x120 [ 749.629033] ? __get_fs_type+0x8a/0xc0 [ 749.632914] ? shmem_remount_fs+0x750/0x750 [ 749.637221] mount_nodev+0x37/0x100 [ 749.640838] shmem_mount+0x2c/0x40 [ 749.644364] mount_fs+0x66/0x2d0 [ 749.647721] vfs_kern_mount.part.26+0xc6/0x4a0 [ 749.652293] ? may_umount+0xa0/0xa0 [ 749.655911] ? _raw_read_unlock+0x22/0x30 [ 749.660051] ? __get_fs_type+0x8a/0xc0 [ 749.663932] do_mount+0xea4/0x2bb0 [ 749.667457] ? kasan_check_read+0x11/0x20 [ 749.671591] ? do_raw_spin_unlock+0x9e/0x310 [ 749.675992] ? copy_mount_string+0x40/0x40 [ 749.680218] ? rcu_pm_notify+0xc0/0xc0 [ 749.684098] ? copy_mount_options+0x5f/0x2e0 [ 749.688493] ? rcu_read_lock_sched_held+0x108/0x120 [ 749.693499] ? kmem_cache_alloc_trace+0x459/0x740 [ 749.698327] ? kasan_check_write+0x14/0x20 [ 749.702556] ? copy_mount_options+0x1f7/0x2e0 [ 749.707045] SyS_mount+0xab/0x120 [ 749.710483] ? copy_mnt_ns+0xb40/0xb40 [ 749.715110] do_syscall_64+0x281/0x940 [ 749.718987] ? vmalloc_sync_all+0x30/0x30 [ 749.723121] ? _raw_spin_unlock_irq+0x27/0x70 [ 749.727606] ? finish_task_switch+0x1c1/0x810 [ 749.732091] ? syscall_return_slowpath+0x550/0x550 [ 749.737008] ? syscall_return_slowpath+0x2ac/0x550 [ 749.741929] ? prepare_exit_to_usermode+0x350/0x350 [ 749.746934] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 749.752290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 749.757128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 749.762307] RIP: 0033:0x4552d9 [ 749.765480] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 749.773176] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 749.780430] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 749.787694] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 749.794950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 749.802208] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000014 2018/04/02 19:59:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:09 executing program 6: r0 = getpid() ptrace$setsig(0x4203, r0, 0x80000000, &(0x7f0000000180)={0x38, 0x1, 0x5, 0x8}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x100000000000100, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000001c0)='dummy0\x00') r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xfffffffffffffbf6, 0x7, 0x1000, 0x2, 0x1000000010001, 0x2, 0x8, 0x7, 0x1ff, 0x6}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x10000, 0x8, 0x1, r1}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000040), 0x4) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="4b8d5f4ab2fc253972f6860bb488b90bf3c9dd90a3b2605b7ebdb6b1f144e717bd1315a80fdc1356d79956da00f99a3551b334301a6944990f3ef23cf1e18699f8ddaefc6a85f9d7ae8201b4c2091d8384a10aadc7b142b0d0bf4c3b3aa5e9c360d3e276b476dace1888c2648b2e20d3cc0bf93d7124aa522d2cf31da869feec2c2907d3f6e351ed429f9872810de719304629fde245c1c4520af47fc636264475f9a4f31522f9a349171ab6789ae0b85d40e73e0e344eb3a096ba3d1a5212fbe0f782c3e73a0cac93e1329738e1ea50db7ff502d6a5c765098e811067a06add", 0xe0}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="2000000000000000172a710700000018000000000000001701000003000000000000000000000018000000000000001701000003000000000000000000000018000000000000001701000004000000f7ffffff000000001800000000000000170100000300000000000000000000000000000000000000000000000000000000"], 0x80, 0x40000}, 0x40) ioctl(r2, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") getpeername$ax25(r1, &(0x7f0000000400), &(0x7f0000000440)=0x10) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000140)={0x0, 0xff, 0xbd64}) 2018/04/02 19:59:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:09 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{&(0x7f00000006c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/4096, 0x1000, 0x49}, 0xfffffffffffffffe}, {{&(0x7f0000001780)=@pptp={0x0, 0x0, {0x0, @multicast1}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001800)=""/129, 0x81}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/17, 0x11}, {&(0x7f0000002900)=""/145, 0x91}, {&(0x7f00000029c0)=""/38, 0x26}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x7, &(0x7f0000003ac0)=""/147, 0x93, 0x7}, 0x8}, {{&(0x7f0000003b80)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000003c00)=""/126, 0x7e}, {&(0x7f0000003c80)=""/122, 0x7a}, {&(0x7f0000003d00)=""/167, 0xa7}, {&(0x7f0000003dc0)=""/73, 0x49}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/4, 0x4}], 0x6, &(0x7f0000004f00)=""/68, 0x44, 0x76}, 0x9}, {{0x0, 0x0, &(0x7f0000004f80), 0x0, &(0x7f0000004fc0)=""/169, 0xa9, 0xb9d}, 0x9b}, {{&(0x7f0000005080)=@sco, 0x80, &(0x7f0000005540)=[{&(0x7f0000005100)=""/133, 0x85}, {&(0x7f00000051c0)=""/250, 0xfa}, {&(0x7f00000052c0)}, {&(0x7f0000005300)=""/5, 0x5}, {&(0x7f0000005340)=""/172, 0xac}, {&(0x7f0000005400)=""/25, 0x19}, {&(0x7f0000005440)=""/237, 0xed}], 0x7, &(0x7f00000055c0)=""/24, 0x18, 0xeae}, 0x1}, {{&(0x7f0000005600)=@in={0x0, 0x0, @broadcast}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005680)=""/218, 0xda}, {&(0x7f0000005780)=""/28, 0x1c}, {&(0x7f00000057c0)=""/157, 0x9d}, {&(0x7f0000005880)=""/61, 0x3d}, {&(0x7f00000058c0)=""/62, 0x3e}], 0x5, 0x0, 0x0, 0xa2a}, 0x1000}, {{&(0x7f0000005980)=@ipx, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005a00)=""/217, 0xd9}, {&(0x7f0000005b00)=""/27, 0x1b}, {&(0x7f0000005b40)=""/75, 0x4b}, {&(0x7f0000005bc0)=""/73, 0x49}], 0x4, 0x0, 0x0, 0x5}}], 0x7, 0x2100, &(0x7f0000005e40)={0x0, 0x1c9c380}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000005e80)={0x3f, 0x8005, 0xdb1b, 0xffffffffd8bc0805, 0x0}, &(0x7f0000005ec0)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000005f00)={r2, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}}, 0x84) accept4$nfc_llcp(r0, &(0x7f0000006040), &(0x7f0000000680)=0x60, 0x80000) r3 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='+em0vboxnet1\x00', 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000600)={r2, 0x5}, &(0x7f0000000640)=0x8) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0xffff) keyctl$instantiate_iov(0x14, r3, &(0x7f00000004c0)=[{&(0x7f0000000100)="3891133187c2d6c75bb7cca6c91d572f5aeb80f58ff4bac585bf3281f7372ff97333460ee992f3578e75aa748a5274d9ebdcd93af2c0c9d61269f6fbf540222b776026535a82028d0ab39d4c385ebe873afc4af08c896e62e40d1c1465ec223710b156b9a6d2bba3bb2bce8b219ea2237ef527a90e0ba5baaeede7f6679e16a5c8", 0x81}, {&(0x7f00000001c0)="ed21f0b301d1e8e1f22938fa956e2e21df31d50d402eee", 0x17}, {&(0x7f0000000200)="26126667cfb8d2a1e2c77aaa1d995f57ddd66127061717433792fbfbe6d32eccfee2dc3175914d8914a565fdb5bafe9d6780b1b0fa14cbce7501637bde522fac0723a3354998b6fe160c5b1e012bf5356b76b7d0a2d68ef02567fc9c4740acff12af36b5595a16a8fdd1d50e720f59780e9a148d3424ac62288ed06b88acdd9d991ba8016f2e3b582b6f43df21078161ea71e23e4f", 0x95}, {&(0x7f00000002c0)="ef370ef8d85179f967c1eba2e828464091d0ef30a309f5c3fdb0ea735762bd67f137cf9f92dfe4a765ab42771d92ae58ac2dfc647500ec70082e66a0c1fa761241fe3df9168dba0f1a7b0dbac01aa118603a43fd0ab820390873f82e504e22d92483c2ed25aeed9b2217da2440f3bc27", 0x70}, {&(0x7f0000000340)="3b85be66fa8588b2ce09a752b59f650eecb3bb80682f307890a3cba1370d4225d7e2675cc3fb5694b44e5515623a611105bc962679c8040d93c3c61beb40e8cd6a61b6bece36b98962e54c626089bb882786c05e1d78279b703d32f94144004c3dfbe0010f2b22bd3cd0c5af", 0x6c}, {&(0x7f00000003c0)="a3383e4f2bf964670aa50a11553c2ad7426b49e9836d68753efcfbfdfac04b69f8f5c45cf7a22eb6b8b1b1ef4bf844190802e478de541159e19171d1befb7a18dcbe24249de2529e5dcd036bace975eeefb40e96fb49ab8a70830372d20812a4e8a1e7c1e934336e68405e5f14f54185fcd3f294888b372f996defe6a59cf4dc0a21041a1073af1c2f499523a6b0747533a7854ff7d94c3ad480d6615f3d3dadb4b8db9d69cc820feb74d5051959a96e4638ca906ee64ef351ce1ab321c1c8e01b4eca91905444ba63f4aa5916ce2d505b51c4078e7f076bf13c082932f43dcb72bedbab", 0xe4}], 0x6, r4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000005fc0)={0x4a, 0x1, 0x6, {0x77359400}, 0x5}) 2018/04/02 19:59:09 executing program 4 (fault-call:2 fault-nth:21): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x44f8, 0x6100) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000014c0)=@filter={'filter\x00', 0xe, 0x7, 0x12b0, [0x0, 0x20000200, 0x200004c8, 0x20000750], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x11, 0x10, 0x0, 'bpq0\x00', 'yam0\x00', 'syz_tun\x00', 'rose0\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x70, 0x138, 0x188}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x20, 0x3ff, 0x2, 0x0, 0x0, "255dab2ea419dcf5ff552fefb935f83b34447f040ca80584212aa1d8279098fe18cb604f8f687430ea5704b4f264b92a933be9671903f739523fa8bb9b90db0d"}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x7, 0x8000}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz1\x00', 0x7}}}}, {{{0x19, 0xf, 0x2aef, 'erspan0\x00', 'bpq0\x00', 'ip6gre0\x00', 'eql\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff], 0x70, 0xc0, 0x110}, [@common=@log={'log\x00', 0x28, {{0x7, "7d7fad8b85242eaf78ba8d84948a3b048dbffad67b9ad8e8eb3e9a896c69"}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', 0xffffffffffff134e}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0xd, 0x30, 0xe89f, 'erspan0\x00', 'bond0\x00', 'nr0\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0xff, 0xff], 0x70, 0xd8, 0x108}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0}}}]}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}, {{{0x17, 0x10, 0xebf7, 'erspan0\x00', 'tunl0\x00', 'erspan0\x00', 'dummy0\x00', @empty, [0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2}, [0xff, 0xff, 0x0, 0xff, 0xff], 0xf0, 0x120, 0x150, [@time={'time\x00', 0x18, {{0x392, 0x2, 0xccb7, 0x8932, 0x5, 0x7f, 0x1}}}, @devgroup={'devgroup\x00', 0x18, {{0x0, 0x7, 0xfffffffffffffffd, 0xb92666a, 0x2}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x8b}}}}]}, {0x0, '\x00', 0x4, 0x934a03804ea926a8, 0x2, [{{{0x0, 0x21, 0x16, 'yam0\x00', 'ip6gre0\x00', 'ip6tnl0\x00', 'tunl0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @random="109ec6395a27", [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x960, 0x990, 0xac0, [@among={'among\x00', 0x8c8, {{0x1, 0x4, 0xff, {[0x0, 0x1f, 0xfffffffffffffffe, 0xf2f1, 0x2, 0x7, 0x401, 0x7fff, 0x5, 0x1, 0x3, 0x20, 0x2, 0x2, 0x8, 0x4, 0x1, 0x8, 0x3, 0x853, 0x0, 0x4, 0xfabb0e2, 0xfff, 0x8000, 0x20, 0x0, 0x9, 0x3ff, 0x81, 0x5, 0xb0bc, 0x2, 0x100, 0x4, 0x4, 0x7, 0xff, 0x7, 0x800, 0x8, 0xfffffffffffffff7, 0x2, 0x0, 0xffff, 0x0, 0xff, 0x7ff, 0x9, 0x0, 0x7fffffff, 0x0, 0xae1, 0x7ff, 0x3f, 0x1, 0xffffffff00000000, 0x80000000, 0x8, 0x1ff, 0x5, 0x6, 0x9, 0x25c, 0x2, 0x3, 0x9, 0x6, 0x3, 0x401, 0x447, 0x7, 0x7fff, 0x9, 0x4, 0x400, 0x3, 0x3, 0x4000000, 0x401, 0x140000, 0x80000001, 0x10000, 0x7, 0x200000000, 0x8001, 0xfff, 0x80, 0xdc, 0x6, 0x2a, 0x8, 0xfffffffffffffff7, 0xa1, 0x3ff, 0xbb, 0x9, 0x0, 0x2, 0x3ff, 0x3, 0x14, 0x501, 0x35, 0x3, 0x80000000, 0x0, 0x7f, 0x0, 0x40, 0xdd0, 0xff, 0x8000, 0x2, 0x9, 0x8000, 0x3, 0x4, 0x101, 0x4, 0xcf6c, 0x7, 0xffffffff, 0x6, 0x401, 0x0, 0x7f, 0x5, 0x8000, 0xa97, 0x3, 0x9, 0x0, 0x1, 0x400, 0x9840, 0x0, 0xb2f, 0x6d11, 0x80000, 0x100, 0x82, 0x7, 0x8000, 0xff, 0xc77, 0x400, 0x4, 0x2, 0x1ff, 0x200, 0x4, 0x4, 0x80000001, 0x401, 0x7, 0x7, 0x9, 0x0, 0x3b9e, 0x400, 0x33, 0x4, 0x3, 0x9, 0x200, 0x9, 0x3, 0x0, 0xff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x1, 0xff, 0x3, 0x400, 0xa046, 0x39f, 0x2, 0x400, 0x80, 0xfffffffffffffffe, 0x40, 0x2, 0x36cd, 0x10000, 0x4, 0x2, 0xe, 0x80000001, 0x7, 0x3fc0000, 0x2, 0x1ff, 0x40, 0x2, 0x250d, 0x4331bf01, 0x1, 0x3f, 0x1, 0x9, 0x1, 0xbf1b, 0x6, 0x0, 0x6c186d84, 0x84f2, 0x6a, 0xfc, 0x1, 0x100000000, 0x0, 0x800, 0xc6, 0x2, 0x4, 0x81, 0x7fff, 0x7, 0x2, 0x3, 0x9, 0xffff, 0x5d4, 0x3f, 0x10001, 0x9, 0xc00, 0x2, 0x6, 0xffffffffffffffff, 0x1, 0xffffffff, 0x200, 0x1, 0x3ff, 0x6, 0x2, 0x101, 0x5, 0x20, 0x4, 0x3, 0x81, 0x9, 0x7, 0x2, 0x6a84, 0xfffffffffffffff9, 0x3, 0x9, 0xab, 0x3], 0x6, [{[0x2, 0x1ff], @dev={0xac, 0x14, 0x14, 0xf}}, {[0x6, 0x1], @loopback=0x7f000001}, {[0x6, 0x9]}, {[0x9, 0x2], @multicast1=0xe0000001}, {[0x0, 0xdb], @dev={0xac, 0x14, 0x14, 0xa}}, {[0xfffffffffffff800, 0x5], @rand_addr=0x800}]}, {[0x10000, 0x3, 0x100, 0x100, 0xfffffffffffffffd, 0x7489, 0x5, 0x9, 0x8, 0x449, 0x3, 0x5, 0x460, 0x9, 0x0, 0xfffffffffffffffd, 0x1, 0x2, 0xea00, 0x83d, 0x0, 0x9, 0x7f, 0x3ff, 0xff, 0x80000001, 0x100000001, 0xfffffffffffffe01, 0x1, 0xea, 0x3, 0x3f00, 0x7ff, 0x401, 0x2, 0x8, 0x100000000, 0xa368, 0x1, 0x4ffc, 0x2, 0xffff, 0xae26, 0x0, 0x6, 0x1ff, 0xeb1, 0x1, 0x7409, 0x1, 0x100, 0x2, 0x401, 0x3, 0xae5, 0x7, 0x7ff, 0x9, 0x2, 0x0, 0x5, 0x100000001, 0xfff, 0x4, 0x60, 0x7, 0x3, 0x0, 0x8, 0x6, 0x7, 0x7, 0xfff, 0x6, 0xa1b3, 0x1c000000000000, 0x200, 0x2, 0x9, 0x46, 0xfffffffffffffff9, 0xfffffffffffffffa, 0xfffffffffffffc01, 0x1f, 0x80000001, 0x0, 0x2, 0x20000000000000, 0x0, 0x6, 0x4, 0x7fff, 0x100, 0x2, 0x9, 0x5, 0x185e8, 0x200, 0xffffffff80000000, 0xee06, 0xaf27, 0x100, 0x45f, 0x7, 0x3, 0x0, 0xfffffffffffffffc, 0x3f, 0x153, 0x7, 0x1ffc0, 0x1, 0x6, 0x1f, 0x4, 0x81, 0x0, 0x6, 0xa398, 0xf0a, 0x9, 0xe502, 0x0, 0x40, 0x6, 0x7, 0x1f, 0xfffffffffffffffa, 0xc9b9, 0x8a45, 0x100, 0xffffffffffff7fff, 0x6, 0x4, 0xffffffffffffff7f, 0xff, 0x0, 0x996, 0xfff, 0x8, 0x1, 0x982a, 0x5, 0x5, 0x80000000, 0x7, 0x7c, 0x0, 0x5, 0x3, 0x6, 0x6, 0x100000000, 0x4, 0x8, 0x1, 0x7, 0x8, 0x4, 0x40, 0x5, 0x5, 0x1, 0x7, 0x3ff, 0x9, 0xc6, 0xfffffffffffffffd, 0x700, 0xfffffffffffffffd, 0x8d2, 0x1000, 0x671d, 0x1, 0x20, 0x5, 0x101, 0x0, 0x261c, 0x2, 0x8001, 0x5, 0x7, 0x7ff, 0x2226ee8, 0x1, 0xc773, 0x40, 0x8, 0x5, 0x1, 0x6, 0x100000000, 0x100000001, 0x80000001, 0xc00000, 0x1, 0x1f, 0xf6d, 0x9, 0x14c, 0x101, 0x20, 0x4f, 0x6, 0x80000001, 0xffffffffffffffff, 0x91cc, 0x400, 0x0, 0x3ff, 0x1, 0x7, 0x100000001, 0x6, 0x8, 0x7, 0x100, 0xbc, 0x4, 0x3000000000, 0x80000000, 0x277, 0x3, 0x8, 0x8, 0x3, 0x4, 0x6f7e, 0x40, 0x1f, 0x5, 0x80, 0x4, 0x10000, 0x1, 0x8000, 0x3a4, 0x2, 0x4f, 0x7f, 0x1f, 0x7f, 0x7bc, 0x2, 0x51e, 0x2, 0x1, 0x7, 0x3, 0x812, 0x3, 0x9, 0xa70, 0x200, 0x10001, 0x1ff], 0x8, [{[0x7fffffff, 0x4], @dev={0xac, 0x14, 0x14, 0xc}}, {[0x1ff, 0x5], @broadcast=0xffffffff}, {[0x4b25, 0x1], @multicast2=0xe0000002}, {[0xfffffffffffffff8, 0x5], @multicast2=0xe0000002}, {[0xfffffffffffffffd, 0x8], @multicast1=0xe0000001}, {[0x1ff, 0x451], @local={0xac, 0x14, 0x14, 0xaa}}, {[0x0, 0x6], @remote={0xac, 0x14, 0x14, 0xbb}}, {[0x4, 0x5], @loopback=0x7f000001}]}}}}]}, [@common=@STANDARD={'\x00', 0x8}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:ld_so_cache_t:s0\x00'}}}}, {{{0x11, 0x0, 0x6003, 'teql0\x00', 'ip6gretap0\x00', 'vcan0\x00', 'syzkaller1\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @random="17f4d4e44f89", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0xf0, 0x170, 0x1a0, [@helper={'helper\x00', 0x28, {{0x1, 'sane-20000\x00'}}}, @pkttype={'pkttype\x00', 0x8, {{0x0, 0x1}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x6, 0x7}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}]}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x6, 0xffffffffffffffff, 0x1, [{{{0xd, 0x44, 0xe967, 'rose0\x00', 'syzkaller1\x00', 'yam0\x00', 'dummy0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xa0}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xb4b1}}}}]}]}, 0x1328) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:59:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x100000001, 0x0, 0x0, 0x100000001}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r3, 0x0, r1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x41e, r2}) write(r0, &(0x7f0000caf000)="9c", 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)=0x40000000000, 0x4) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000001c0)) 2018/04/02 19:59:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000300)=""/124, &(0x7f00000001c0)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000004c0)={[], 0x10000, 0x400, 0xa5, 0x0, 0x7fffffff, 0x0, 0x103000, [], 0xa0af}) 2018/04/02 19:59:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000027006381ff7f0000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x687, &(0x7f0000000100)=0x4) fcntl$setlease(r0, 0x400, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) 2018/04/02 19:59:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) [ 751.654678] FAULT_INJECTION: forcing a failure. [ 751.654678] name failslab, interval 1, probability 0, space 0, times 0 [ 751.666080] CPU: 0 PID: 14402 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 751.673089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.682450] Call Trace: [ 751.685045] dump_stack+0x1a7/0x27d [ 751.688669] ? arch_local_irq_restore+0x53/0x53 [ 751.693331] ? __save_stack_trace+0x7e/0xd0 [ 751.697649] should_fail+0x914/0xae0 [ 751.701359] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 751.706459] ? kasan_kmalloc+0xad/0xe0 [ 751.710333] ? kmem_cache_alloc_trace+0x136/0x740 [ 751.715912] ? __memcg_init_list_lru_node+0x169/0x270 [ 751.721089] ? __list_lru_init+0x544/0x750 [ 751.725308] ? sget_userns+0x6a2/0xe60 [ 751.729181] ? mount_fs+0x66/0x2d0 [ 751.732713] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 751.737454] ? do_mount+0xea4/0x2bb0 [ 751.741155] ? SyS_mount+0xab/0x120 [ 751.744770] ? do_syscall_64+0x281/0x940 [ 751.748819] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 751.754174] ? find_held_lock+0x35/0x1d0 [ 751.758226] ? __lock_is_held+0xb6/0x140 [ 751.762285] ? check_same_owner+0x320/0x320 [ 751.766598] ? rcu_note_context_switch+0x710/0x710 [ 751.771524] should_failslab+0xec/0x120 [ 751.775489] kmem_cache_alloc_trace+0x4b/0x740 [ 751.780064] ? __kmalloc_node+0x33/0x70 [ 751.784028] ? __kmalloc_node+0x33/0x70 [ 751.787993] ? rcu_read_lock_sched_held+0x108/0x120 [ 751.793003] __memcg_init_list_lru_node+0x169/0x270 [ 751.798013] ? list_lru_add+0x7c0/0x7c0 [ 751.801973] ? __kmalloc_node+0x47/0x70 [ 751.805948] __list_lru_init+0x544/0x750 [ 751.810000] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 751.815876] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 751.820884] ? __lockdep_init_map+0xe4/0x650 [ 751.825286] ? lockdep_init_map+0x9/0x10 [ 751.829338] sget_userns+0x6a2/0xe60 [ 751.833034] ? get_anon_bdev+0x2a0/0x2a0 [ 751.837085] ? destroy_unused_super.part.7+0xf0/0xf0 [ 751.842173] ? rcu_read_lock_sched_held+0x108/0x120 [ 751.847178] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 751.852016] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 751.857021] ? rcu_is_watching+0x85/0x130 [ 751.861166] ? trace_hardirqs_off+0x10/0x10 [ 751.865473] ? trace_hardirqs_off+0xd/0x10 [ 751.869703] ? cap_capable+0x1b5/0x230 [ 751.873585] ? security_capable+0x8e/0xc0 [ 751.877722] ? get_anon_bdev+0x2a0/0x2a0 [ 751.881773] ? ns_capable_common+0xcf/0x160 [ 751.886081] ? get_anon_bdev+0x2a0/0x2a0 [ 751.890128] sget+0xd2/0x120 [ 751.893135] ? __get_fs_type+0x8a/0xc0 [ 751.897019] ? shmem_remount_fs+0x750/0x750 [ 751.901336] mount_nodev+0x37/0x100 [ 751.904959] shmem_mount+0x2c/0x40 [ 751.908495] mount_fs+0x66/0x2d0 [ 751.911862] vfs_kern_mount.part.26+0xc6/0x4a0 [ 751.916439] ? may_umount+0xa0/0xa0 [ 751.920062] ? _raw_read_unlock+0x22/0x30 [ 751.924202] ? __get_fs_type+0x8a/0xc0 [ 751.928094] do_mount+0xea4/0x2bb0 [ 751.931625] ? kasan_check_read+0x11/0x20 [ 751.935763] ? do_raw_spin_unlock+0x9e/0x310 [ 751.940163] ? copy_mount_string+0x40/0x40 [ 751.944386] ? rcu_pm_notify+0xc0/0xc0 [ 751.948268] ? copy_mount_options+0x5f/0x2e0 [ 751.952666] ? rcu_read_lock_sched_held+0x108/0x120 [ 751.957672] ? kmem_cache_alloc_trace+0x459/0x740 [ 751.962505] ? kasan_check_write+0x14/0x20 [ 751.966734] ? copy_mount_options+0x1f7/0x2e0 [ 751.971220] SyS_mount+0xab/0x120 [ 751.974663] ? copy_mnt_ns+0xb40/0xb40 [ 751.978549] do_syscall_64+0x281/0x940 [ 751.982429] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 751.987956] ? syscall_return_slowpath+0x550/0x550 [ 751.992875] ? syscall_return_slowpath+0x2ac/0x550 [ 751.997796] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 752.003153] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 752.007987] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 752.013163] RIP: 0033:0x4552d9 [ 752.016337] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 752.024032] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 752.031287] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 752.038546] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 752.045799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 2018/04/02 19:59:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007060000f049000000000000a2008bbd10a74b36c6b587ec9d25fb02fed52f795350bee97e918fd5"], 0x1}, 0x1}, 0x0) [ 752.053053] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000015 2018/04/02 19:59:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:09 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x4000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:59:09 executing program 4 (fault-call:2 fault-nth:22): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:09 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init() ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:59:09 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x9, 0x2, [0x2, 0x4]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x800, 0x8005, 0x3ff, 0x4, r1}, &(0x7f0000000200)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000200000638144d10000000000000c3007000000f049000000000000a200594c89dc76f44b02dad86734f182bf5f47d5d130fa3366123a33269d6a6acadfdd5e074c261b87a74105a6adcced19fa9c8bc5121d188d5e4fd6645c2e2b2a"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:09 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x8) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x8) 2018/04/02 19:59:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) [ 752.379706] FAULT_INJECTION: forcing a failure. [ 752.379706] name failslab, interval 1, probability 0, space 0, times 0 [ 752.390990] CPU: 0 PID: 14449 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 752.397994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.407329] Call Trace: [ 752.409909] dump_stack+0x1a7/0x27d [ 752.413604] ? arch_local_irq_restore+0x53/0x53 [ 752.418266] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 752.423197] should_fail+0x914/0xae0 [ 752.426901] ? is_bpf_text_address+0xa4/0x120 [ 752.431388] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 752.436476] ? __kernel_text_address+0xd/0x40 [ 752.440962] ? unwind_get_return_address+0x61/0xa0 [ 752.445889] ? find_held_lock+0x35/0x1d0 [ 752.449942] ? __lock_is_held+0xb6/0x140 [ 752.454002] ? check_same_owner+0x320/0x320 [ 752.458318] ? rcu_note_context_switch+0x710/0x710 [ 752.463244] should_failslab+0xec/0x120 [ 752.467213] kmem_cache_alloc_trace+0x4b/0x740 [ 752.471780] ? __kmalloc_node+0x33/0x70 [ 752.475740] ? __kmalloc_node+0x33/0x70 [ 752.479705] ? rcu_read_lock_sched_held+0x108/0x120 [ 752.484714] __memcg_init_list_lru_node+0x169/0x270 [ 752.489720] ? list_lru_add+0x7c0/0x7c0 [ 752.493681] ? __kmalloc_node+0x47/0x70 [ 752.497647] __list_lru_init+0x544/0x750 [ 752.501698] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 752.507575] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 752.512587] ? lockdep_init_map+0x9/0x10 [ 752.516645] sget_userns+0x6c2/0xe60 [ 752.520344] ? get_anon_bdev+0x2a0/0x2a0 [ 752.524399] ? destroy_unused_super.part.7+0xf0/0xf0 [ 752.529492] ? rcu_read_lock_sched_held+0x108/0x120 [ 752.534500] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 752.539338] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 752.544342] ? rcu_is_watching+0x85/0x130 [ 752.548487] ? trace_hardirqs_off+0x10/0x10 [ 752.552794] ? trace_hardirqs_off+0xd/0x10 [ 752.557020] ? cap_capable+0x1b5/0x230 [ 752.560898] ? security_capable+0x8e/0xc0 [ 752.565041] ? get_anon_bdev+0x2a0/0x2a0 [ 752.569101] ? ns_capable_common+0xcf/0x160 [ 752.573421] ? get_anon_bdev+0x2a0/0x2a0 [ 752.577483] sget+0xd2/0x120 [ 752.580501] ? __get_fs_type+0x8a/0xc0 [ 752.584376] ? shmem_remount_fs+0x750/0x750 [ 752.588676] mount_nodev+0x37/0x100 [ 752.592284] shmem_mount+0x2c/0x40 [ 752.595803] mount_fs+0x66/0x2d0 [ 752.599151] vfs_kern_mount.part.26+0xc6/0x4a0 [ 752.603711] ? may_umount+0xa0/0xa0 [ 752.607316] ? _raw_read_unlock+0x22/0x30 [ 752.611440] ? __get_fs_type+0x8a/0xc0 [ 752.615308] do_mount+0xea4/0x2bb0 [ 752.618833] ? copy_mount_string+0x40/0x40 [ 752.623045] ? rcu_pm_notify+0xc0/0xc0 [ 752.626919] ? copy_mount_options+0x5f/0x2e0 [ 752.631301] ? rcu_read_lock_sched_held+0x108/0x120 [ 752.636296] ? kmem_cache_alloc_trace+0x459/0x740 [ 752.641120] ? kasan_check_write+0x14/0x20 [ 752.645334] ? _copy_from_user+0x99/0x110 [ 752.649463] ? copy_mount_options+0x1f7/0x2e0 [ 752.653942] SyS_mount+0xab/0x120 [ 752.657372] ? copy_mnt_ns+0xb40/0xb40 [ 752.661239] do_syscall_64+0x281/0x940 [ 752.665103] ? vmalloc_sync_all+0x30/0x30 [ 752.669230] ? _raw_spin_unlock_irq+0x27/0x70 [ 752.673702] ? finish_task_switch+0x1c1/0x810 [ 752.678177] ? syscall_return_slowpath+0x550/0x550 [ 752.683085] ? syscall_return_slowpath+0x2ac/0x550 [ 752.687991] ? prepare_exit_to_usermode+0x350/0x350 [ 752.692990] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 752.698336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 752.703161] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 752.708328] RIP: 0033:0x4552d9 [ 752.711502] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 752.719189] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 752.726437] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 752.733682] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 752.740927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 752.748173] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000016 2018/04/02 19:59:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1f, 0x101040) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) r2 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r4 = getpid() r5 = fcntl$getown(r1, 0x9) sendmsg$nl_netfilter(r1, &(0x7f0000001a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000019c0)={&(0x7f00000001c0)={0x17d0, 0xe, 0x5, 0x200, 0x70bd2a, 0x25dfdbff, {0xf, 0x0, 0x5}, [@typed={0x4, 0x52}, @generic="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", @typed={0x8, 0xfff, @pid=r2}, @nested={0xc, 0x22, [@typed={0x8, 0x77, @ipv4=@loopback=0x7f000001}]}, @nested={0x1248, 0x38, [@typed={0x4, 0x70}, @generic="45ae433cdc7efb557e3cc376f8730e076127f29491243fd49789b57028534a1fb902da28ecb105a083fe05e33df99e33d4612321567e1061f330032f7619363422774a97c553c56ac8f5a7636c956baf6b8eff5022cbdcb339caebc576c8f2f2a3f1e20fd5eacd5912eb3d5475d2bb8c5a96300d8dc606912e259669384a0191a0a12022372bb5d8db0033bba3e256abb6440b7f1401aec525673a42a32d68f10209ed0e31af2cd0684b10acc4eaa38947596b9c720cd1e8414b6a03b073a3003eca226d7cb2ffc52a53fa2cc69762c0b60cfd5b50", @generic="0dc18fbdbd97db050ceb9b3874909f2f9a450e11931598c49f17d15419c69fd88bb7b430744c3fe9491171b7b1fc29050eb0e754602cacaef5e92b5bf82612c040382a742af2cc35", @generic, @typed={0x8, 0x26, @pid=r3}, @generic="9f2f19f4241dc658f9b527befe0a38e205814fcb09ab9858afe8ae76fe3d5cf215cc9baf7c49d62e2c4348d8e06c4d9352bcba6e23295a02f7179fc8994536b91bf501ad9102bbdcc99d4f803b46d962d020118ddc544fb7b78d59b2cab8e4a70b4a27a0b1b9f8b72623c8ed6652fe42b2ef19f2e0e380e02241ad233c241f3156490907d402", @generic="4a72e76ca25a188a96e970901c5360e722eeb724917719f8e2391b679d732a2a67e6516fd83df078beabfc9e534015f3427fa94b4d3da038199a9896845826fefb3f8e903aea032adca73b7fcc123d42a995fb26302f5ec3c104db1487c797b6bb09bff2fcbd79ffd767afae56778efa1ec0f39c7837e6831b9b0e05", @typed={0x14, 0x75, @str='/dev/snd/seq\x00'}, @typed={0x1004, 0x57, @binary="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"}]}, @typed={0x4, 0x50}, @generic="68573a66f57802683e33175cd3e1fb6c1395d1c8089bfb9782d02d5b390be52f6f00d2d844b68735f49644f64e1e9f71cf9c011dd26e6d641afbb9edb022abca20d6cb86146178729ca571fc55b7af701450a0d178f4de295d528d67284fa88adec1dfe17c952367208afd63b43d66cd92a485d36bd419aeb02766449398b9c2c46e94a7110884cdd11a9a0d74deab2ff74af4871a7f29ba3c7913b34e6bfa2a00cc38612e1cfecffae57d2993da6c2faf862825de1ec6a57765cdde6b9300873c057e9181733ebcc8e27abaf91ecd88b56dbe567df1c3ebb283f8b6aba5c08901e154a7b2a913af816cd04a7c14b9b38aa104f79d37fd2a", @nested={0xdc, 0x3e, [@generic="61b845c95d4e00ac99ee9bf749d1fb99c480cf49e4971e9bcb539d9579bbdb573c3bd69882ad23abfeade795987db3df5590e322b657320c477d9e00650d11c9cd1c51f6c2ff4ec3ac759cd7ab659ebfa364254a373edf56db258151bb31672fd0b994fde8e2a9e5ea489ca9d28d75a687981a963105b33ae1577e3f0025358b7c6aa37b2512776cc545e4603018b1a4aaebd8344e19c00d0c14c5ced74f4000282a5e1e24e989b1e9c2b4261baf687c9f51e0aaf6eb2a3ba96ee5d183bcbcc658e29b81b8af812c7c92aa0791dedda07500f3409e11"]}, @nested={0x1b0, 0x95, [@generic="d39a2a9db80e9e656d2bbf58cb5705852221b76eb1bb8a4a7b4919e191f03652da31343e4c77f652c2988ae580066e812b47ce6742dac02fc91458871e6f3bf2ca2b884185737b41c9bbfde7752ba70ef2", @generic="9e7e9b2659e82e11e0346604f48c0c7ee7735beff411de7a6e126b74a4df09629d8963c4b99a953f029f05b41c668d896b563c2abd21ed65500330386cb52c80b90f051ef52ecb19d2604eea3d1f508bc84aa989fff7ef0e9c27535eead7089520cb651ce7f1af8007e337b90b634ad0f48abd62c3c436e328f011791d08887c7776f1d9396b3e05dc8e49f9357548cb81e88eefe6d4b364274290312cfb4932e015c5c0144b6ccc007385b17d85c012b8ac39d26da779f9abb3de17d1fc556617ccc2ecd06755bf2503b934a220f1b1532ee51e24e878c967ba161471a0d7aca31a5561e6c21fc6ebff98f0", @generic="9749bd", @generic="979d0ef5dcc6b9e48d173bc47e2927e78a45fec8c9d25ab705752a586fc8173a139cb9b3e42b033cf2b7619ea071da3801e18eac457424ba6e3c586249235160b1e3663a9b638584654a24a706", @typed={0x8, 0x57, @pid=r4}, @generic="b2058bc649cdb2b5decd60d6a8bd", @typed={0x8, 0x77, @pid=r5}]}, @generic="b9be9c151fc6869bde559b89b04b65e2e3157f674a58c0cb0d1af16a265c603975e33dcc7b8216e214cca74d7fbbcae66d26d5d899b3befad5a7215caa4cdb0ba5757c847da51d708ab1d3d9d2c6b84d983c7fc83aacdc0876f0213ef0c8b685a1f7830528a2a30b144c17dcdc8fd85403f66b35852e13f8aff359862ed096e70bed54fea38b7498e3350814c3a74c91024ff95b65f22e99530e2bd04a63e39752a6e21056cd4ff57b6f7426e6e3b9446154f42daae9370635713004d895f33372c2e661951bc69f6b89d57f322279ec66b93802d6768e2eb10d"]}, 0x17d0}, 0x1, 0x0, 0x0, 0x400c001}, 0x4) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:59:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x40081) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000100)="91064213b9359d6afcbcd311f910aaa0211eadb168a00f22e459fdac7267d92b9fd624b1caf11b1d37d8a7f99bd0cc1a27fa535b5d2c7229120582ef4e1bd0cc74a372c7c5220d802845468b12918625233a54347978781570b247e12e3b3bb9c7ed0c42daf993d7dd8e2a6a3edf0eaa966177edf178c6ad46bf0585a45ad071dde67db28585f37780bd0c61405e7b69b7f2d09a80ba52891b7b07f2254654565e03e6b32b422cbf009625ba") 2018/04/02 19:59:10 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={r1, 0x0, r2}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r3, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:59:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:10 executing program 4 (fault-call:2 fault-nth:23): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000089b617b2b985374afb0bf220e4e49d070492c6cd17e43b4ec53a38a3450b7217ab67fedacb24e01610f52f32cb4a6128da5a7d8976df945932774077a4f2f6863b8bec249fbd7e1019c1ef06e71341905e56574a7ded270d117afa87acb15ddfa4f2a3c59a4fb8a27c2d7376873e71daf97abca24e53c11ff769dc4d3cc8413fae6f70"], &(0x7f0000000280)=0x8) sysfs$3(0x3) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(r1, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000180)={'bcsf0\x00', 0x3}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x208100, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x3, 0x2}) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:59:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = semget(0x3, 0x4, 0x400) semctl$GETVAL(r1, 0x5, 0xc, &(0x7f0000000080)=""/13) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:59:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10}, 0x341, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100000c3007000000f049000000000000a200000000000000"], 0x1}, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') pselect6(0x40, &(0x7f0000000240)={0x9, 0x3d07a870, 0x6, 0x8, 0x5, 0x7, 0x7a1d, 0x3ff}, &(0x7f0000000280)={0x5, 0x3, 0xd0, 0x6, 0x0, 0x0, 0x5, 0x1ff}, &(0x7f0000000300)={0xf46, 0x7fff, 0x1ff, 0x7, 0x7, 0x6, 0x0, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={0x6}, 0x8}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x100, 0x6, 0x25dfdbfb, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7600}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x84c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x12}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4) socketpair(0x9, 0x6, 0x7, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) pread64(r2, &(0x7f00000004c0)=""/221, 0xdd, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000440)) ioctl$sock_netrom_TIOCINQ(r4, 0x541b, &(0x7f0000000480)) 2018/04/02 19:59:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) [ 753.461132] FAULT_INJECTION: forcing a failure. [ 753.461132] name failslab, interval 1, probability 0, space 0, times 0 [ 753.472555] CPU: 0 PID: 14485 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 753.479577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.488922] Call Trace: [ 753.491505] dump_stack+0x1a7/0x27d [ 753.495125] ? arch_local_irq_restore+0x53/0x53 [ 753.499787] ? __save_stack_trace+0x7e/0xd0 [ 753.504104] should_fail+0x914/0xae0 [ 753.507811] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 753.512903] ? kasan_kmalloc+0xad/0xe0 [ 753.516776] ? kmem_cache_alloc_trace+0x136/0x740 [ 753.521606] ? __memcg_init_list_lru_node+0x169/0x270 [ 753.526789] ? __list_lru_init+0x544/0x750 [ 753.531011] ? sget_userns+0x6c2/0xe60 [ 753.534885] ? mount_fs+0x66/0x2d0 [ 753.538426] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 753.543170] ? do_mount+0xea4/0x2bb0 [ 753.546869] ? SyS_mount+0xab/0x120 [ 753.550486] ? do_syscall_64+0x281/0x940 [ 753.554534] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 753.559893] ? find_held_lock+0x35/0x1d0 [ 753.563947] ? __lock_is_held+0xb6/0x140 [ 753.568007] ? check_same_owner+0x320/0x320 [ 753.572328] ? rcu_note_context_switch+0x710/0x710 [ 753.577253] should_failslab+0xec/0x120 [ 753.581220] kmem_cache_alloc_trace+0x4b/0x740 [ 753.585786] ? __kmalloc_node+0x33/0x70 [ 753.589745] ? __kmalloc_node+0x33/0x70 [ 753.593708] ? rcu_read_lock_sched_held+0x108/0x120 [ 753.598725] __memcg_init_list_lru_node+0x169/0x270 [ 753.603731] ? list_lru_add+0x7c0/0x7c0 [ 753.607695] ? __kmalloc_node+0x47/0x70 [ 753.611661] __list_lru_init+0x544/0x750 [ 753.615718] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 753.621595] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 753.626606] ? lockdep_init_map+0x9/0x10 [ 753.630657] sget_userns+0x6c2/0xe60 [ 753.634357] ? get_anon_bdev+0x2a0/0x2a0 [ 753.638416] ? destroy_unused_super.part.7+0xf0/0xf0 [ 753.643503] ? rcu_read_lock_sched_held+0x108/0x120 [ 753.648507] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 753.653340] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 753.658344] ? rcu_is_watching+0x85/0x130 [ 753.662491] ? trace_hardirqs_off+0x10/0x10 [ 753.666797] ? trace_hardirqs_off+0xd/0x10 [ 753.671024] ? cap_capable+0x1b5/0x230 [ 753.674900] ? security_capable+0x8e/0xc0 [ 753.679038] ? get_anon_bdev+0x2a0/0x2a0 [ 753.683087] ? ns_capable_common+0xcf/0x160 [ 753.687416] ? get_anon_bdev+0x2a0/0x2a0 [ 753.691476] sget+0xd2/0x120 [ 753.694488] ? __get_fs_type+0x8a/0xc0 [ 753.698366] ? shmem_remount_fs+0x750/0x750 [ 753.702679] mount_nodev+0x37/0x100 [ 753.706298] shmem_mount+0x2c/0x40 [ 753.709825] mount_fs+0x66/0x2d0 [ 753.713181] vfs_kern_mount.part.26+0xc6/0x4a0 [ 753.718692] ? may_umount+0xa0/0xa0 [ 753.722309] ? _raw_read_unlock+0x22/0x30 [ 753.726444] ? __get_fs_type+0x8a/0xc0 [ 753.730326] do_mount+0xea4/0x2bb0 [ 753.733859] ? copy_mount_string+0x40/0x40 [ 753.738081] ? rcu_pm_notify+0xc0/0xc0 [ 753.741966] ? copy_mount_options+0x5f/0x2e0 [ 753.746364] ? rcu_read_lock_sched_held+0x108/0x120 [ 753.751373] ? kmem_cache_alloc_trace+0x459/0x740 [ 753.756210] ? kasan_check_write+0x14/0x20 [ 753.760433] ? _copy_from_user+0x99/0x110 [ 753.764576] ? copy_mount_options+0x1f7/0x2e0 [ 753.769064] SyS_mount+0xab/0x120 [ 753.772503] ? copy_mnt_ns+0xb40/0xb40 [ 753.776388] do_syscall_64+0x281/0x940 [ 753.780263] ? vmalloc_sync_all+0x30/0x30 [ 753.784411] ? _raw_spin_unlock_irq+0x27/0x70 [ 753.788895] ? finish_task_switch+0x1c1/0x810 [ 753.793386] ? syscall_return_slowpath+0x550/0x550 [ 753.798306] ? syscall_return_slowpath+0x2ac/0x550 [ 753.803226] ? prepare_exit_to_usermode+0x350/0x350 [ 753.808230] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 753.813583] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 753.818419] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 753.823594] RIP: 0033:0x4552d9 [ 753.826772] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 753.834467] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 753.841725] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 753.848979] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 2018/04/02 19:59:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x428480, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x2, @loopback={0x0, 0x1}, 0xd4b3}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x7fffffff, 0x7}, &(0x7f0000000180)=0x8) [ 753.856233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 753.863488] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000017 2018/04/02 19:59:11 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x500, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xa4dd, 0x40a00) bind$ipx(r0, &(0x7f00000000c0)={0x4, 0x2, 0x36, "3ba69ac50d0d", 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x80801, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f0000000180)=0x81) vmsplice(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)="1e5095832cb0f60303d3864fc3c471afd77712ca24e4c597cafe294af0277a2353df2f824a905fd28efe9ca7848cc952ade8177e1cae50ca5008a88bfdced580270aac93b1083b8ed29126f9fa5abaeb384d730bb3bb5e0430d17feaa019cf97f53b5b3cbed27d46b59aa0bfb548d37f7dc4490402c5ff533a96952da08c23611256f0c83069664f24c0b63a607e4bd28130bcdea0", 0x95}, {&(0x7f0000000280)="525443025bdfdfb4c04717f08205fc63b29988b2dcede952ed76062fbd6cda309b8fc4cf3b9dc59f947300b06677de236f2f5e7689d511a9dd34d4e81ab6de819ee9d9480072cb2a51912d810d921b90ec6adf026c5d98083002f96e6cae969bff99d9d492a54ec9a54ca43249242dac56abc2f6a2557138c7c15731d29921aa3ba1069339cd039fae19cc191c2c81af6d329d476ecfeedb083413288e4d76e0c5136ce37680bb315f4ef297a758d6df4f2e242c6b27cdca189583f116fda27b88eeff22963630b9b9", 0xc9}, {&(0x7f0000000380)="be11f01c4a2174b3d49a22e9741bf09af7c13152816d39c6bdb59c157ef5e9b621f2cf28bb378ae8ace6509b2e3a962549eda27edd7c0c65bc415acbfc45bc7168704a7e98467be0e035774b93c25c833e9d455b7a1e28b3b51ed98c0b3082fbe6d95cf09ca16258ca011d9af5fdbcc7f5e1ea305f3a0514335438c4eec8012e3eef6c8553f35c414711325ce937adde3a", 0x91}, {&(0x7f0000000440)="33f61a5e74005de833fad83321f96a4d13f60d0987b30b40e61fc11ca8a5fd4472483684fbca245577d570c8588dcfe2c00fb42adf29719bfda31bfaa5a613233b52e2eef81165d705b881b1630a4a94113e00f76e71c1a4b44f036973494bba21de2a1e5f6cf4a08a63e9692a071ec6f4a57f5c744eed5aa7df9031fb5be2f5b6b415209dfec4c19c0dc8", 0x8b}, {&(0x7f0000000500)="1d415291240f6cd66e414265672bdd00343ea11ff20c403373a9b5251b5545", 0x1f}, {&(0x7f0000000540)="fbf6dd0caf0d325eb69c14b73592307d1b2ca882c817facb804f47e388feb8c0fd70c2a230b9c9736a67ad0b89f4cbffe89f5b44d637f7866a8e41fc0854ad8f264a508084efbc4e94d283976ff8bd0cde9e36d7a7365e9c26f1e61d314e9d613f4aeee590a31050ee473a2071df63df66457daf85d1d9c350d1df7b93c1cd0e1cdb67e17894fa849f36ff540a45b07243ad645ff98e73e09b3cc54f35497bb3392fb328bcc1f0646efddf36ba7b1fcfb9e02f11d8dacc00", 0xb8}], 0x6, 0x5) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x2, 0xae, 0x5}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000006c0)={0x13, 0x3f, &(0x7f0000000680)="712f4785efae1cf0fa55f95d4a178764a523e6b2670cceb39da441db24ae6ab83257377c4f4deefd74c5b51e75a88c14806e21306d9e9a77803db0d93758b5"}) 2018/04/02 19:59:11 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") socketpair(0xb, 0x0, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x19) 2018/04/02 19:59:11 executing program 4 (fault-call:2 fault-nth:24): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) [ 754.190299] FAULT_INJECTION: forcing a failure. [ 754.190299] name failslab, interval 1, probability 0, space 0, times 0 [ 754.201595] CPU: 0 PID: 14525 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 754.208596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.217936] Call Trace: [ 754.220515] dump_stack+0x1a7/0x27d [ 754.224136] ? arch_local_irq_restore+0x53/0x53 [ 754.228793] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 754.233707] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 754.238633] should_fail+0x914/0xae0 [ 754.242341] ? is_bpf_text_address+0xa4/0x120 [ 754.246826] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 754.251916] ? __kernel_text_address+0xd/0x40 [ 754.256397] ? unwind_get_return_address+0x61/0xa0 [ 754.261324] ? find_held_lock+0x35/0x1d0 [ 754.265381] ? __lock_is_held+0xb6/0x140 [ 754.269439] ? check_same_owner+0x320/0x320 [ 754.273748] ? rcu_note_context_switch+0x710/0x710 [ 754.278671] should_failslab+0xec/0x120 [ 754.282632] kmem_cache_alloc_trace+0x4b/0x740 [ 754.287202] ? __kmalloc_node+0x33/0x70 [ 754.291165] ? __kmalloc_node+0x33/0x70 [ 754.295124] ? rcu_read_lock_sched_held+0x108/0x120 [ 754.300129] __memcg_init_list_lru_node+0x169/0x270 [ 754.305137] ? list_lru_add+0x7c0/0x7c0 [ 754.309098] ? __kmalloc_node+0x47/0x70 [ 754.313067] __list_lru_init+0x544/0x750 [ 754.317121] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 754.322996] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 754.328004] ? lockdep_init_map+0x9/0x10 [ 754.332053] sget_userns+0x6c2/0xe60 [ 754.335752] ? get_anon_bdev+0x2a0/0x2a0 [ 754.339807] ? destroy_unused_super.part.7+0xf0/0xf0 [ 754.344897] ? rcu_read_lock_sched_held+0x108/0x120 [ 754.349900] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 754.354733] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 754.359747] ? rcu_is_watching+0x85/0x130 [ 754.363891] ? trace_hardirqs_off+0x10/0x10 [ 754.368208] ? trace_hardirqs_off+0xd/0x10 [ 754.372444] ? cap_capable+0x1b5/0x230 [ 754.376334] ? security_capable+0x8e/0xc0 [ 754.380483] ? get_anon_bdev+0x2a0/0x2a0 [ 754.384540] ? ns_capable_common+0xcf/0x160 [ 754.388854] ? get_anon_bdev+0x2a0/0x2a0 [ 754.392902] sget+0xd2/0x120 [ 754.395908] ? __get_fs_type+0x8a/0xc0 [ 754.399781] ? shmem_remount_fs+0x750/0x750 [ 754.404088] mount_nodev+0x37/0x100 [ 754.407702] shmem_mount+0x2c/0x40 [ 754.411230] mount_fs+0x66/0x2d0 [ 754.414586] vfs_kern_mount.part.26+0xc6/0x4a0 [ 754.419155] ? may_umount+0xa0/0xa0 [ 754.422768] ? _raw_read_unlock+0x22/0x30 [ 754.426903] ? __get_fs_type+0x8a/0xc0 [ 754.430782] do_mount+0xea4/0x2bb0 [ 754.434309] ? kasan_check_read+0x11/0x20 [ 754.438444] ? do_raw_spin_unlock+0x9e/0x310 [ 754.442842] ? copy_mount_string+0x40/0x40 [ 754.447063] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 754.452065] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 754.456809] ? retint_kernel+0x10/0x10 [ 754.460687] ? copy_mount_options+0x149/0x2e0 [ 754.465171] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 754.470000] ? copy_mount_options+0x1f7/0x2e0 [ 754.474485] SyS_mount+0xab/0x120 [ 754.477925] ? copy_mnt_ns+0xb40/0xb40 [ 754.481800] do_syscall_64+0x281/0x940 [ 754.485674] ? vmalloc_sync_all+0x30/0x30 [ 754.489811] ? _raw_spin_unlock_irq+0x27/0x70 [ 754.494292] ? finish_task_switch+0x1c1/0x810 [ 754.498780] ? syscall_return_slowpath+0x550/0x550 [ 754.503696] ? syscall_return_slowpath+0x2ac/0x550 [ 754.508614] ? prepare_exit_to_usermode+0x350/0x350 [ 754.513618] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 754.518971] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 754.523803] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 754.528977] RIP: 0033:0x4552d9 [ 754.532150] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 754.539845] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 754.547101] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 754.554355] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 754.561611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 754.568869] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000018 2018/04/02 19:59:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x3f, 0x8000, 0x1000, 0x62561181, 0x6, 0x0, 0xffffffffffff8000, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)={r2, 0x54, "0264576f972845cade5d347100ec11a8d1dd3c42270f69c2fc55f58368b55e28d3d582c7648f287c11ce1fa8b84c25f911fe6d99b4e2a2f0f0e0fc5f93729bd8805c1898c56b7fbe29b75a937815603ff4f9253a"}, &(0x7f0000000240)=0x5c) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:59:12 executing program 4 (fault-call:2 fault-nth:25): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = geteuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="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") ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 2018/04/02 19:59:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000eb2000), &(0x7f0000000600)=[&(0x7f0000000540)='\x00', &(0x7f0000000580)='-eth0\x00', &(0x7f00000005c0)='/dev/snd/pcmC#D#c\x00']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x10000) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f00000004c0)={{0xc8, 0xffffffffffff0001, 0xfffffffffffffff9, 0xcd87, 0x3, 0x80000000}, 0x200}) sysfs$3(0x3) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000500)={@broadcast=0xffffffff, @empty, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) connect$packet(r2, &(0x7f00000001c0)={0x11, 0x5, r3, 0x1, 0x5, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}, 0x2}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x5f, 0x27fff) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000080)=""/217) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff9}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2989}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6721}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x80}, 0x1}, 0x844) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:59:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002700638100050000000000f04900b55d33c7dbea237e0da733758aac69"], 0x1}, 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x4, @tick=0x2, 0x4, {0x8001, 0x8}, 0x7, 0x0, 0x8}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e24, @loopback=0x7f000001}], 0x173) 2018/04/02 19:59:12 executing program 6: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x200) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000100)={0xa, 0xfffffffffffff800}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x3, &(0x7f00000000c0)="60bc836ead2c9193cf") 2018/04/02 19:59:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\x00') ioctl$TCSBRKP(r1, 0x5425, 0x8) 2018/04/02 19:59:13 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)) [ 755.517248] FAULT_INJECTION: forcing a failure. [ 755.517248] name failslab, interval 1, probability 0, space 0, times 0 [ 755.528534] CPU: 0 PID: 14538 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 755.535535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.544875] Call Trace: [ 755.547467] dump_stack+0x1a7/0x27d [ 755.551090] ? arch_local_irq_restore+0x53/0x53 [ 755.555748] ? __save_stack_trace+0x7e/0xd0 [ 755.560069] should_fail+0x914/0xae0 [ 755.563778] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 755.568872] ? kasan_kmalloc+0xad/0xe0 [ 755.572745] ? kmem_cache_alloc_trace+0x136/0x740 [ 755.577578] ? __memcg_init_list_lru_node+0x169/0x270 [ 755.582754] ? __list_lru_init+0x544/0x750 [ 755.586974] ? sget_userns+0x6c2/0xe60 [ 755.590848] ? mount_fs+0x66/0x2d0 [ 755.594380] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 755.599120] ? do_mount+0xea4/0x2bb0 [ 755.602818] ? SyS_mount+0xab/0x120 [ 755.606434] ? do_syscall_64+0x281/0x940 [ 755.610483] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 755.615843] ? find_held_lock+0x35/0x1d0 [ 755.619896] ? __lock_is_held+0xb6/0x140 [ 755.623957] ? check_same_owner+0x320/0x320 [ 755.628269] ? rcu_note_context_switch+0x710/0x710 [ 755.633194] should_failslab+0xec/0x120 [ 755.637163] kmem_cache_alloc_trace+0x4b/0x740 [ 755.641730] ? __kmalloc_node+0x33/0x70 [ 755.645693] ? __kmalloc_node+0x33/0x70 [ 755.649654] ? rcu_read_lock_sched_held+0x108/0x120 [ 755.654664] __memcg_init_list_lru_node+0x169/0x270 [ 755.659672] ? list_lru_add+0x7c0/0x7c0 [ 755.663632] ? __kmalloc_node+0x47/0x70 [ 755.667600] __list_lru_init+0x544/0x750 [ 755.671656] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 755.677528] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 755.682538] ? lockdep_init_map+0x9/0x10 [ 755.686594] sget_userns+0x6c2/0xe60 [ 755.690297] ? get_anon_bdev+0x2a0/0x2a0 [ 755.694353] ? destroy_unused_super.part.7+0xf0/0xf0 [ 755.699440] ? rcu_read_lock_sched_held+0x108/0x120 [ 755.704443] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 755.709288] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 755.715019] ? rcu_is_watching+0x85/0x130 [ 755.719166] ? trace_hardirqs_off+0x10/0x10 [ 755.723484] ? trace_hardirqs_off+0xd/0x10 [ 755.727720] ? cap_capable+0x1b5/0x230 [ 755.731603] ? security_capable+0x8e/0xc0 [ 755.735746] ? get_anon_bdev+0x2a0/0x2a0 [ 755.739801] ? ns_capable_common+0xcf/0x160 [ 755.744119] ? get_anon_bdev+0x2a0/0x2a0 [ 755.748172] sget+0xd2/0x120 [ 755.751181] ? __get_fs_type+0x8a/0xc0 [ 755.755068] ? shmem_remount_fs+0x750/0x750 [ 755.759386] mount_nodev+0x37/0x100 [ 755.763009] shmem_mount+0x2c/0x40 [ 755.766544] mount_fs+0x66/0x2d0 [ 755.769912] vfs_kern_mount.part.26+0xc6/0x4a0 [ 755.774489] ? may_umount+0xa0/0xa0 [ 755.778106] ? _raw_read_unlock+0x22/0x30 [ 755.782245] ? __get_fs_type+0x8a/0xc0 [ 755.786125] do_mount+0xea4/0x2bb0 [ 755.789651] ? kasan_check_read+0x11/0x20 [ 755.793786] ? do_raw_spin_unlock+0x9e/0x310 [ 755.798184] ? copy_mount_string+0x40/0x40 [ 755.802412] ? rcu_pm_notify+0xc0/0xc0 [ 755.806306] ? copy_mount_options+0x5f/0x2e0 [ 755.810702] ? rcu_read_lock_sched_held+0x108/0x120 [ 755.815704] ? kmem_cache_alloc_trace+0x459/0x740 [ 755.820537] ? kasan_check_write+0x14/0x20 [ 755.824765] ? copy_mount_options+0x1f7/0x2e0 [ 755.829249] SyS_mount+0xab/0x120 [ 755.832688] ? copy_mnt_ns+0xb40/0xb40 [ 755.836566] do_syscall_64+0x281/0x940 [ 755.840444] ? vmalloc_sync_all+0x30/0x30 [ 755.844581] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 755.850104] ? syscall_return_slowpath+0x550/0x550 [ 755.855019] ? syscall_return_slowpath+0x2ac/0x550 [ 755.859940] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 755.865295] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 755.870131] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 755.875304] RIP: 0033:0x4552d9 [ 755.878478] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 755.886173] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 755.893428] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 755.900683] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 755.907942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 2018/04/02 19:59:13 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000000040)="60bc836ead2c9193cf") 2018/04/02 19:59:13 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)) [ 755.915203] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000019 2018/04/02 19:59:13 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x88000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:13 executing program 4 (fault-call:2 fault-nth:26): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:13 executing program 6: r0 = request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='/dev/ion\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f00000002c0)='blacklist\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x20104, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0xc0184900, &(0x7f0000d68f5d)='`\x00\x00\x00Q\x00\x00\x00\x00') r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c, 0x800) getsockopt$inet6_dccp_int(r3, 0x21, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/04/02 19:59:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000270063810004fffb000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) [ 756.236744] FAULT_INJECTION: forcing a failure. [ 756.236744] name failslab, interval 1, probability 0, space 0, times 0 [ 756.248060] CPU: 0 PID: 14574 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 756.255062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.264410] Call Trace: [ 756.266992] dump_stack+0x1a7/0x27d [ 756.270611] ? arch_local_irq_restore+0x53/0x53 [ 756.275271] ? __save_stack_trace+0x7e/0xd0 [ 756.279595] should_fail+0x914/0xae0 [ 756.283303] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 756.288397] ? kasan_kmalloc+0xad/0xe0 [ 756.292270] ? kmem_cache_alloc_trace+0x136/0x740 [ 756.297099] ? __memcg_init_list_lru_node+0x169/0x270 [ 756.302276] ? __list_lru_init+0x544/0x750 [ 756.306497] ? sget_userns+0x6c2/0xe60 [ 756.310373] ? mount_fs+0x66/0x2d0 [ 756.313904] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 756.318644] ? do_mount+0xea4/0x2bb0 [ 756.322346] ? SyS_mount+0xab/0x120 [ 756.325960] ? do_syscall_64+0x281/0x940 [ 756.330006] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 756.335364] ? find_held_lock+0x35/0x1d0 [ 756.339419] ? __lock_is_held+0xb6/0x140 [ 756.343482] ? check_same_owner+0x320/0x320 [ 756.347794] ? rcu_note_context_switch+0x710/0x710 [ 756.352715] should_failslab+0xec/0x120 [ 756.356680] kmem_cache_alloc_trace+0x4b/0x740 [ 756.361250] ? __kmalloc_node+0x33/0x70 [ 756.365214] ? __kmalloc_node+0x33/0x70 [ 756.369178] ? rcu_read_lock_sched_held+0x108/0x120 [ 756.374192] __memcg_init_list_lru_node+0x169/0x270 [ 756.379200] ? list_lru_add+0x7c0/0x7c0 [ 756.383167] ? __kmalloc_node+0x47/0x70 [ 756.387133] __list_lru_init+0x544/0x750 [ 756.391192] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 756.397067] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 756.402078] ? lockdep_init_map+0x9/0x10 [ 756.406129] sget_userns+0x6c2/0xe60 [ 756.409832] ? get_anon_bdev+0x2a0/0x2a0 [ 756.413890] ? destroy_unused_super.part.7+0xf0/0xf0 [ 756.418982] ? rcu_read_lock_sched_held+0x108/0x120 [ 756.423984] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 756.428817] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 756.433823] ? rcu_is_watching+0x85/0x130 [ 756.437973] ? trace_hardirqs_off+0x10/0x10 [ 756.442288] ? trace_hardirqs_off+0xd/0x10 [ 756.446520] ? cap_capable+0x1b5/0x230 [ 756.450405] ? security_capable+0x8e/0xc0 [ 756.454551] ? get_anon_bdev+0x2a0/0x2a0 [ 756.458606] ? ns_capable_common+0xcf/0x160 [ 756.462931] ? get_anon_bdev+0x2a0/0x2a0 [ 756.466979] sget+0xd2/0x120 [ 756.469984] ? __get_fs_type+0x8a/0xc0 [ 756.473859] ? shmem_remount_fs+0x750/0x750 [ 756.478170] mount_nodev+0x37/0x100 [ 756.481787] shmem_mount+0x2c/0x40 [ 756.485317] mount_fs+0x66/0x2d0 [ 756.488673] vfs_kern_mount.part.26+0xc6/0x4a0 [ 756.493244] ? may_umount+0xa0/0xa0 [ 756.496862] ? _raw_read_unlock+0x22/0x30 [ 756.500994] ? __get_fs_type+0x8a/0xc0 [ 756.504873] do_mount+0xea4/0x2bb0 [ 756.508400] ? kasan_check_read+0x11/0x20 [ 756.512537] ? do_raw_spin_unlock+0x9e/0x310 [ 756.516937] ? copy_mount_string+0x40/0x40 [ 756.521163] ? rcu_pm_notify+0xc0/0xc0 [ 756.525045] ? copy_mount_options+0x5f/0x2e0 [ 756.529441] ? rcu_read_lock_sched_held+0x108/0x120 [ 756.534448] ? kmem_cache_alloc_trace+0x459/0x740 [ 756.539276] ? kasan_check_write+0x14/0x20 [ 756.543503] ? copy_mount_options+0x1f7/0x2e0 [ 756.547989] SyS_mount+0xab/0x120 [ 756.551425] ? copy_mnt_ns+0xb40/0xb40 [ 756.555299] do_syscall_64+0x281/0x940 [ 756.559177] ? vmalloc_sync_all+0x30/0x30 [ 756.563310] ? _raw_spin_unlock_irq+0x27/0x70 [ 756.567795] ? finish_task_switch+0x1c1/0x810 [ 756.572282] ? syscall_return_slowpath+0x550/0x550 [ 756.577197] ? syscall_return_slowpath+0x2ac/0x550 [ 756.582121] ? prepare_exit_to_usermode+0x350/0x350 [ 756.587130] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 756.592490] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 756.597326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 756.602501] RIP: 0033:0x4552d9 [ 756.605676] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 756.613370] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 756.620624] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 756.627880] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 756.635133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 756.642395] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001a 2018/04/02 19:59:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x10100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x2, 0x8001}, {0x4, 0x25cb}, 0x3f, 0x3, 0x80000001}) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) set_robust_list(&(0x7f0000000280)={&(0x7f0000000200)={&(0x7f0000000180)}, 0x3, &(0x7f0000000240)}, 0x18) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x101) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x62e, @local={0xfe, 0x80, [], 0xaa}, 0x8}, 0x1c) fdatasync(r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:59:14 executing program 4 (fault-call:2 fault-nth:27): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:14 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000080)={{0x401, 0x6, 0xffffffffffffffc0, 0x6, "b084c0c36423ccf2d684f88c9e74668cc20258a677a187d0c88b3865cf7b03fee44fac556d1562b547dcf54e"}, 0x40, [0x5, 0xd5, 0x4, 0x401, 0x7cf, 0x7ff, 0xffffffff852fe81a, 0x6f, 0x1, 0x80000001, 0xffffffffffffffff, 0xc8d, 0x8000, 0x1, 0x1, 0x7, 0x1, 0x40, 0x8, 0xc85, 0x3, 0xa9, 0x3f, 0x7fff, 0x5, 0x5, 0x100, 0x4, 0xd2fe, 0x6, 0xff, 0x6, 0x0, 0x1, 0x4, 0xfffffffffffffffb, 0x5, 0x4, 0x56f0f8ef, 0x1f, 0x101, 0x4, 0x0, 0x9, 0x8001, 0x7, 0x8898, 0x2, 0x401, 0x9, 0x0, 0x2, 0x9b8, 0x8ed6, 0x200, 0xdc8a, 0x2152, 0x3109, 0x6, 0x80000000, 0x3, 0x5, 0x8, 0x7, 0x4, 0x3, 0x1000, 0x6, 0x40, 0xfffffffffffffffb, 0x8, 0x3, 0x9d, 0x0, 0x0, 0x40, 0x40, 0x7, 0x6, 0x8, 0x3f, 0x117e, 0x0, 0x800, 0x5, 0x7fffffff, 0x24a2, 0x0, 0xffffffffffff0f56, 0x80000000, 0x7, 0x10000, 0x4, 0xffff, 0x10001, 0x0, 0x5, 0xc698, 0x100000000, 0x3, 0x6, 0x1, 0x1ff, 0xffffffffffffff29, 0x10001, 0x10001, 0x6, 0x3ff, 0xffff, 0x96a, 0x0, 0x2, 0x20, 0x4, 0xd70, 0x0, 0x9, 0x80, 0x7fff, 0x3, 0x686ebe7d, 0x2b6, 0x9, 0x4, 0x1000, 0xffffffff, 0x1, 0x5], {0x0, 0x989680}}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:59:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f00004fc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x9) 2018/04/02 19:59:14 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x800, 0x10000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000180)=0x6cd, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffff, 0x800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x8, 0x100000001, 0xe8c}) 2018/04/02 19:59:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000180)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a2004b9a75c4142d51b6719781b09587c26998cdbbdbcf9a7d5c0ef322dea82079c3f043526a756ac23930f60a5770578d458ec9f0131744c048b4ce064a9d0f68c960cc523d8deeeb724801c30a259a7673a04f718dcf0d1ba605215e"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:14 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:14 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:14 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) [ 757.521338] FAULT_INJECTION: forcing a failure. [ 757.521338] name failslab, interval 1, probability 0, space 0, times 0 [ 757.532842] CPU: 0 PID: 14600 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 757.539854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.549207] Call Trace: [ 757.551790] dump_stack+0x1a7/0x27d [ 757.555409] ? arch_local_irq_restore+0x53/0x53 [ 757.560072] ? __save_stack_trace+0x7e/0xd0 [ 757.564393] should_fail+0x914/0xae0 [ 757.568102] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 757.573194] ? kasan_kmalloc+0xad/0xe0 [ 757.577073] ? kmem_cache_alloc_trace+0x136/0x740 [ 757.581904] ? __memcg_init_list_lru_node+0x169/0x270 [ 757.587078] ? __list_lru_init+0x544/0x750 [ 757.591298] ? sget_userns+0x6c2/0xe60 [ 757.595174] ? mount_fs+0x66/0x2d0 [ 757.598703] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 757.603445] ? do_mount+0xea4/0x2bb0 [ 757.607144] ? SyS_mount+0xab/0x120 [ 757.610762] ? do_syscall_64+0x281/0x940 [ 757.614811] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 757.620170] ? find_held_lock+0x35/0x1d0 [ 757.624223] ? __lock_is_held+0xb6/0x140 [ 757.628286] ? check_same_owner+0x320/0x320 [ 757.632597] ? rcu_note_context_switch+0x710/0x710 [ 757.637520] should_failslab+0xec/0x120 [ 757.641489] kmem_cache_alloc_trace+0x4b/0x740 [ 757.646064] ? __kmalloc_node+0x33/0x70 [ 757.650023] ? __kmalloc_node+0x33/0x70 [ 757.653992] ? rcu_read_lock_sched_held+0x108/0x120 [ 757.659002] __memcg_init_list_lru_node+0x169/0x270 [ 757.664011] ? list_lru_add+0x7c0/0x7c0 [ 757.667974] ? __kmalloc_node+0x47/0x70 [ 757.671941] __list_lru_init+0x544/0x750 [ 757.675998] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 757.681876] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 757.686886] ? lockdep_init_map+0x9/0x10 [ 757.690937] sget_userns+0x6c2/0xe60 [ 757.694639] ? get_anon_bdev+0x2a0/0x2a0 [ 757.698699] ? destroy_unused_super.part.7+0xf0/0xf0 [ 757.703787] ? rcu_read_lock_sched_held+0x108/0x120 [ 757.708789] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 757.714505] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 757.719509] ? rcu_is_watching+0x85/0x130 [ 757.723642] ? trace_hardirqs_off+0x10/0x10 [ 757.727947] ? trace_hardirqs_off+0xd/0x10 [ 757.732172] ? cap_capable+0x1b5/0x230 [ 757.736056] ? security_capable+0x8e/0xc0 [ 757.740192] ? get_anon_bdev+0x2a0/0x2a0 [ 757.744241] ? ns_capable_common+0xcf/0x160 [ 757.748558] ? get_anon_bdev+0x2a0/0x2a0 [ 757.752611] sget+0xd2/0x120 [ 757.755623] ? __get_fs_type+0x8a/0xc0 [ 757.759505] ? shmem_remount_fs+0x750/0x750 [ 757.763823] mount_nodev+0x37/0x100 [ 757.767452] shmem_mount+0x2c/0x40 [ 757.770986] mount_fs+0x66/0x2d0 [ 757.774358] vfs_kern_mount.part.26+0xc6/0x4a0 [ 757.778934] ? may_umount+0xa0/0xa0 [ 757.782548] ? _raw_read_unlock+0x22/0x30 [ 757.786687] ? __get_fs_type+0x8a/0xc0 [ 757.790567] do_mount+0xea4/0x2bb0 [ 757.794101] ? copy_mount_string+0x40/0x40 [ 757.798327] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 757.803331] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 757.808077] ? retint_kernel+0x10/0x10 [ 757.811959] ? copy_mount_options+0x149/0x2e0 [ 757.816444] ? __sanitizer_cov_trace_pc+0x20/0x50 [ 757.821278] ? copy_mount_options+0x1f7/0x2e0 [ 757.825764] SyS_mount+0xab/0x120 [ 757.829202] ? copy_mnt_ns+0xb40/0xb40 [ 757.833080] do_syscall_64+0x281/0x940 [ 757.836955] ? vmalloc_sync_all+0x30/0x30 [ 757.841093] ? _raw_spin_unlock_irq+0x27/0x70 [ 757.845574] ? finish_task_switch+0x1c1/0x810 [ 757.850058] ? syscall_return_slowpath+0x550/0x550 [ 757.854973] ? syscall_return_slowpath+0x2ac/0x550 [ 757.859888] ? prepare_exit_to_usermode+0x350/0x350 [ 757.864891] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 757.870247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 757.875081] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 757.880254] RIP: 0033:0x4552d9 [ 757.883431] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 757.891127] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 757.898384] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 757.905637] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 757.912890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 2018/04/02 19:59:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = shmget(0x2, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/63) [ 757.920146] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001b 2018/04/02 19:59:15 executing program 4 (fault-call:2 fault-nth:28): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000280)=0x14) fstat(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x4e21, 0xfffffffffffff980, 0x4e21, 0x1, 0x2, 0x80, 0x80, 0x2f, r2, r3}, {0x2d95, 0x20, 0x10001, 0x1, 0x5, 0x4, 0x4, 0x1000}, {0x4, 0x6, 0x8000, 0x81}, 0x3ff, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in=@rand_addr=0x100000001, 0x4d2, 0x6f}, 0xa, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x3504, 0x4, 0x1, 0x40, 0x0, 0x9, 0x1}}, 0xe8) ppoll(&(0x7f0000000100)=[{r1, 0x60}, {r1}, {r0, 0x8000}, {r0, 0x5005}, {r1}, {r0, 0x2010}, {r1, 0xa}], 0x7, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={0x3}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20300700e0cd000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:15 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = msgget$private(0x0, 0x42) msgrcv(r1, &(0x7f0000000040)={0x0, ""/5}, 0xd, 0x2, 0x3000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") [ 758.036125] FAULT_INJECTION: forcing a failure. [ 758.036125] name failslab, interval 1, probability 0, space 0, times 0 [ 758.047419] CPU: 0 PID: 14637 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 758.054427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.063776] Call Trace: [ 758.066360] dump_stack+0x1a7/0x27d [ 758.069981] ? arch_local_irq_restore+0x53/0x53 [ 758.074640] ? __save_stack_trace+0x7e/0xd0 [ 758.078961] should_fail+0x914/0xae0 [ 758.082664] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 758.087754] ? kasan_kmalloc+0xad/0xe0 [ 758.091628] ? kmem_cache_alloc_trace+0x136/0x740 [ 758.096458] ? __memcg_init_list_lru_node+0x169/0x270 [ 758.101629] ? __list_lru_init+0x544/0x750 [ 758.105852] ? sget_userns+0x6c2/0xe60 [ 758.109723] ? mount_fs+0x66/0x2d0 [ 758.113250] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 758.117990] ? do_mount+0xea4/0x2bb0 [ 758.121694] ? SyS_mount+0xab/0x120 [ 758.125305] ? do_syscall_64+0x281/0x940 [ 758.129352] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 758.134705] ? find_held_lock+0x35/0x1d0 [ 758.138757] ? __lock_is_held+0xb6/0x140 [ 758.142815] ? check_same_owner+0x320/0x320 [ 758.147128] ? rcu_note_context_switch+0x710/0x710 [ 758.152049] should_failslab+0xec/0x120 [ 758.156013] kmem_cache_alloc_trace+0x4b/0x740 [ 758.160580] ? __kmalloc_node+0x33/0x70 [ 758.164537] ? __kmalloc_node+0x33/0x70 [ 758.168497] ? rcu_read_lock_sched_held+0x108/0x120 [ 758.173505] __memcg_init_list_lru_node+0x169/0x270 [ 758.178507] ? list_lru_add+0x7c0/0x7c0 [ 758.182466] ? __kmalloc_node+0x47/0x70 [ 758.186430] __list_lru_init+0x544/0x750 [ 758.190485] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 758.196358] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 758.201366] ? lockdep_init_map+0x9/0x10 [ 758.205419] sget_userns+0x6c2/0xe60 [ 758.209116] ? get_anon_bdev+0x2a0/0x2a0 [ 758.213174] ? destroy_unused_super.part.7+0xf0/0xf0 [ 758.218265] ? rcu_read_lock_sched_held+0x108/0x120 [ 758.223267] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 758.228099] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 758.233100] ? rcu_is_watching+0x85/0x130 [ 758.237248] ? trace_hardirqs_off+0x10/0x10 [ 758.241558] ? trace_hardirqs_off+0xd/0x10 [ 758.245794] ? cap_capable+0x1b5/0x230 [ 758.249682] ? security_capable+0x8e/0xc0 [ 758.253820] ? get_anon_bdev+0x2a0/0x2a0 [ 758.257865] ? ns_capable_common+0xcf/0x160 [ 758.262173] ? get_anon_bdev+0x2a0/0x2a0 [ 758.266217] sget+0xd2/0x120 [ 758.269222] ? __get_fs_type+0x8a/0xc0 [ 758.273095] ? shmem_remount_fs+0x750/0x750 [ 758.277405] mount_nodev+0x37/0x100 [ 758.281025] shmem_mount+0x2c/0x40 [ 758.284549] mount_fs+0x66/0x2d0 [ 758.287903] vfs_kern_mount.part.26+0xc6/0x4a0 [ 758.292470] ? may_umount+0xa0/0xa0 [ 758.296089] ? _raw_read_unlock+0x22/0x30 [ 758.300220] ? __get_fs_type+0x8a/0xc0 [ 758.304099] do_mount+0xea4/0x2bb0 [ 758.307632] ? copy_mount_string+0x40/0x40 [ 758.311853] ? rcu_pm_notify+0xc0/0xc0 [ 758.315728] ? copy_mount_options+0x5f/0x2e0 [ 758.320121] ? rcu_read_lock_sched_held+0x108/0x120 [ 758.325121] ? kmem_cache_alloc_trace+0x459/0x740 [ 758.329959] ? copy_mount_options+0x1f7/0x2e0 [ 758.334440] SyS_mount+0xab/0x120 [ 758.337876] ? copy_mnt_ns+0xb40/0xb40 [ 758.341749] do_syscall_64+0x281/0x940 [ 758.345622] ? vmalloc_sync_all+0x30/0x30 [ 758.349757] ? _raw_spin_unlock_irq+0x27/0x70 [ 758.354237] ? finish_task_switch+0x1c1/0x810 [ 758.358719] ? syscall_return_slowpath+0x550/0x550 [ 758.363638] ? syscall_return_slowpath+0x2ac/0x550 [ 758.368556] ? prepare_exit_to_usermode+0x350/0x350 [ 758.373563] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 758.378914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 758.383746] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 758.388923] RIP: 0033:0x4552d9 [ 758.392094] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 758.399787] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 758.407047] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 758.414304] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 758.421557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 758.428816] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001c 2018/04/02 19:59:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) socketpair(0x0, 0x0, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:59:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x260832fee5caf189, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x33, @broadcast=0xffffffff, 0x4e20, 0x2, 'sh\x00', 0x2, 0x7fff, 0x63}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x2000, 0x81, 0x3, 0x5}}, 0x44) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'dummy0\x00', 0x800}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2018/04/02 19:59:16 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") ioctl$KVM_RUN(r1, 0xae80, 0x0) 2018/04/02 19:59:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xc4, "826482859cd10136b28c5c83b1c352d3420be78fce681199a0b03725b23f2e980886ea9485709f4da2546706b82ae0f6c374a7e67dc12b965b85c912591a59ff52a9abbdfb692f0824bae419972c1343bdebcf2bea82bc9b52799b077d157db780d7d852783596190ca74e322748f0596e8dc3fba22d6b02b76faf799c6c95aeb18734dd57c0ad5af536e84827f5aefbd1ee4155b5b73f44f8721e4ef4eccd33ad6cefcad5d9248e289469f967df2821854be4df1f036aea3d9d36cbaccf1bd2089678d9"}, &(0x7f0000000200)=0xcc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x8) r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) keyctl$set_timeout(0xf, r3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 2018/04/02 19:59:16 executing program 4 (fault-call:2 fault-nth:29): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r0 = semget(0x2, 0x7, 0x12e) semctl$GETNCNT(r0, 0x5, 0xe, &(0x7f0000000040)=""/4) 2018/04/02 19:59:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) fadvise64(r0, 0x0, 0x684000000000000, 0x5) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x2, 0x40000000}) [ 759.498410] FAULT_INJECTION: forcing a failure. [ 759.498410] name failslab, interval 1, probability 0, space 0, times 0 [ 759.509698] CPU: 0 PID: 14676 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 759.516701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.526055] Call Trace: [ 759.528641] dump_stack+0x1a7/0x27d [ 759.532265] ? arch_local_irq_restore+0x53/0x53 [ 759.536922] ? __save_stack_trace+0x7e/0xd0 [ 759.541239] should_fail+0x914/0xae0 [ 759.544944] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 759.550051] ? kasan_kmalloc+0xad/0xe0 [ 759.553927] ? kmem_cache_alloc_trace+0x136/0x740 [ 759.558783] ? __memcg_init_list_lru_node+0x169/0x270 [ 759.563960] ? __list_lru_init+0x544/0x750 [ 759.568181] ? sget_userns+0x6c2/0xe60 [ 759.572060] ? mount_fs+0x66/0x2d0 [ 759.575586] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 759.580325] ? do_mount+0xea4/0x2bb0 [ 759.584025] ? SyS_mount+0xab/0x120 [ 759.587644] ? do_syscall_64+0x281/0x940 [ 759.591691] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 759.597049] ? find_held_lock+0x35/0x1d0 [ 759.601102] ? __lock_is_held+0xb6/0x140 [ 759.605167] ? check_same_owner+0x320/0x320 [ 759.609481] ? rcu_note_context_switch+0x710/0x710 [ 759.614409] should_failslab+0xec/0x120 [ 759.618375] kmem_cache_alloc_trace+0x4b/0x740 [ 759.622947] ? __kmalloc_node+0x33/0x70 [ 759.626921] ? __kmalloc_node+0x33/0x70 [ 759.630892] ? rcu_read_lock_sched_held+0x108/0x120 [ 759.635905] __memcg_init_list_lru_node+0x169/0x270 [ 759.640911] ? list_lru_add+0x7c0/0x7c0 [ 759.644876] ? __kmalloc_node+0x47/0x70 [ 759.648846] __list_lru_init+0x544/0x750 [ 759.652907] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 759.658781] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 759.663791] ? lockdep_init_map+0x9/0x10 [ 759.667847] sget_userns+0x6c2/0xe60 [ 759.671549] ? get_anon_bdev+0x2a0/0x2a0 [ 759.675606] ? destroy_unused_super.part.7+0xf0/0xf0 [ 759.680700] ? rcu_read_lock_sched_held+0x108/0x120 [ 759.685708] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 759.690543] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 759.695565] ? rcu_is_watching+0x85/0x130 [ 759.699725] ? trace_hardirqs_off+0x10/0x10 [ 759.704045] ? trace_hardirqs_off+0xd/0x10 [ 759.708285] ? cap_capable+0x1b5/0x230 [ 759.712173] ? security_capable+0x8e/0xc0 [ 759.717094] ? get_anon_bdev+0x2a0/0x2a0 [ 759.721152] ? ns_capable_common+0xcf/0x160 [ 759.725477] ? get_anon_bdev+0x2a0/0x2a0 [ 759.729534] sget+0xd2/0x120 [ 759.732551] ? __get_fs_type+0x8a/0xc0 [ 759.736434] ? shmem_remount_fs+0x750/0x750 [ 759.740748] mount_nodev+0x37/0x100 [ 759.744359] shmem_mount+0x2c/0x40 [ 759.747880] mount_fs+0x66/0x2d0 [ 759.751231] vfs_kern_mount.part.26+0xc6/0x4a0 [ 759.755790] ? may_umount+0xa0/0xa0 [ 759.759398] ? _raw_read_unlock+0x22/0x30 [ 759.763521] ? __get_fs_type+0x8a/0xc0 [ 759.767477] do_mount+0xea4/0x2bb0 [ 759.771004] ? copy_mount_string+0x40/0x40 [ 759.775223] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 759.780237] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 759.784988] ? retint_kernel+0x10/0x10 [ 759.788863] ? copy_mount_options+0x149/0x2e0 [ 759.793343] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 759.798166] ? copy_mount_options+0x1f7/0x2e0 [ 759.802646] SyS_mount+0xab/0x120 [ 759.806077] ? copy_mnt_ns+0xb40/0xb40 [ 759.809945] do_syscall_64+0x281/0x940 [ 759.813812] ? vmalloc_sync_all+0x30/0x30 [ 759.817935] ? _raw_spin_unlock_irq+0x27/0x70 [ 759.822408] ? finish_task_switch+0x1c1/0x810 [ 759.826886] ? syscall_return_slowpath+0x550/0x550 [ 759.831794] ? syscall_return_slowpath+0x2ac/0x550 [ 759.836704] ? prepare_exit_to_usermode+0x350/0x350 [ 759.841699] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 759.847049] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 759.851877] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 759.857046] RIP: 0033:0x4552d9 [ 759.860211] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 759.867904] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 759.875159] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 759.882408] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 759.889655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 759.896903] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001d 2018/04/02 19:59:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20546d6475f0a7e93e211eb5bf3e24c54039002cdec8ff7dca1fbb000027006381000500008cbcae000c"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:17 executing program 4 (fault-call:2 fault-nth:30): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:17 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x4, 0x40000) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000080)=""/114, &(0x7f0000000100)=0x72) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") modify_ldt$read_default(0x2, &(0x7f0000000040)=""/57, 0x39) getsockopt(r1, 0x101, 0xfffffffffffffffe, &(0x7f00000001c0)=""/4096, &(0x7f0000000140)=0x1000) write$evdev(r1, &(0x7f0000000040), 0x0) 2018/04/02 19:59:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) [ 760.133870] FAULT_INJECTION: forcing a failure. [ 760.133870] name failslab, interval 1, probability 0, space 0, times 0 [ 760.145386] CPU: 0 PID: 14701 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 760.152400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.161747] Call Trace: [ 760.164349] dump_stack+0x1a7/0x27d [ 760.167972] ? arch_local_irq_restore+0x53/0x53 [ 760.172636] ? __save_stack_trace+0x7e/0xd0 [ 760.176960] should_fail+0x914/0xae0 [ 760.180663] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 760.185756] ? kasan_kmalloc+0xad/0xe0 [ 760.189631] ? kmem_cache_alloc_trace+0x136/0x740 [ 760.194468] ? __memcg_init_list_lru_node+0x169/0x270 [ 760.199642] ? __list_lru_init+0x544/0x750 [ 760.203879] ? sget_userns+0x6c2/0xe60 [ 760.207755] ? mount_fs+0x66/0x2d0 [ 760.211286] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 760.216026] ? do_mount+0xea4/0x2bb0 [ 760.219725] ? SyS_mount+0xab/0x120 [ 760.223346] ? do_syscall_64+0x281/0x940 [ 760.227394] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 760.232761] ? find_held_lock+0x35/0x1d0 [ 760.236822] ? __lock_is_held+0xb6/0x140 [ 760.240886] ? check_same_owner+0x320/0x320 [ 760.245203] ? rcu_note_context_switch+0x710/0x710 [ 760.250152] should_failslab+0xec/0x120 [ 760.254116] kmem_cache_alloc_trace+0x4b/0x740 [ 760.258687] ? __kmalloc_node+0x33/0x70 [ 760.262654] ? __kmalloc_node+0x33/0x70 [ 760.266620] ? rcu_read_lock_sched_held+0x108/0x120 [ 760.271628] __memcg_init_list_lru_node+0x169/0x270 [ 760.276638] ? list_lru_add+0x7c0/0x7c0 [ 760.280612] ? __kmalloc_node+0x47/0x70 [ 760.284580] __list_lru_init+0x544/0x750 [ 760.288638] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 760.294532] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 760.299541] ? lockdep_init_map+0x9/0x10 [ 760.303596] sget_userns+0x6c2/0xe60 [ 760.307295] ? get_anon_bdev+0x2a0/0x2a0 [ 760.311351] ? destroy_unused_super.part.7+0xf0/0xf0 [ 760.316447] ? rcu_read_lock_sched_held+0x108/0x120 [ 760.321473] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 760.326325] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 760.331329] ? rcu_is_watching+0x85/0x130 [ 760.335467] ? trace_hardirqs_off+0x10/0x10 [ 760.339783] ? trace_hardirqs_off+0xd/0x10 [ 760.344008] ? cap_capable+0x1b5/0x230 [ 760.347891] ? security_capable+0x8e/0xc0 [ 760.352031] ? get_anon_bdev+0x2a0/0x2a0 [ 760.356080] ? ns_capable_common+0xcf/0x160 [ 760.360390] ? get_anon_bdev+0x2a0/0x2a0 [ 760.364436] sget+0xd2/0x120 [ 760.367456] ? __get_fs_type+0x8a/0xc0 [ 760.371349] ? shmem_remount_fs+0x750/0x750 [ 760.375672] mount_nodev+0x37/0x100 [ 760.379301] shmem_mount+0x2c/0x40 [ 760.382841] mount_fs+0x66/0x2d0 [ 760.386206] vfs_kern_mount.part.26+0xc6/0x4a0 [ 760.390790] ? may_umount+0xa0/0xa0 [ 760.394429] ? _raw_read_unlock+0x22/0x30 [ 760.398573] ? __get_fs_type+0x8a/0xc0 [ 760.402456] do_mount+0xea4/0x2bb0 [ 760.405974] ? kasan_check_read+0x11/0x20 [ 760.410114] ? do_raw_spin_unlock+0x9e/0x310 [ 760.414520] ? copy_mount_string+0x40/0x40 [ 760.418733] ? rcu_pm_notify+0xc0/0xc0 [ 760.422603] ? copy_mount_options+0x5f/0x2e0 [ 760.426987] ? rcu_read_lock_sched_held+0x108/0x120 [ 760.432038] ? kmem_cache_alloc_trace+0x459/0x740 [ 760.436871] ? kasan_check_write+0x14/0x20 [ 760.441094] ? copy_mount_options+0x1f7/0x2e0 [ 760.445568] SyS_mount+0xab/0x120 [ 760.449000] ? copy_mnt_ns+0xb40/0xb40 [ 760.452873] do_syscall_64+0x281/0x940 [ 760.456736] ? vmalloc_sync_all+0x30/0x30 [ 760.460862] ? _raw_spin_unlock_irq+0x27/0x70 [ 760.465334] ? finish_task_switch+0x1c1/0x810 [ 760.469806] ? syscall_return_slowpath+0x550/0x550 [ 760.474724] ? syscall_return_slowpath+0x2ac/0x550 [ 760.479629] ? prepare_exit_to_usermode+0x350/0x350 [ 760.484622] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 760.490064] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 760.494890] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 760.500069] RIP: 0033:0x4552d9 [ 760.503250] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 760.510938] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 760.518184] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 760.525430] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 760.532675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 760.539932] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001e 2018/04/02 19:59:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x1, 0x0, 0x0, @time, {0x0, 0x1f}, {}, @addr={0x6, 0x9}}], 0x30) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"503c7e6e5e3212ca720c9191356a0078183314026893f6141b18d32eac77e2a954b0a527aa97548f52ede5fe8ff447360f35e71555cf8778003620b0fc36fa8e98c7a4f07e1a86794a13f6b7448451eb4c80efb8e6660b5392f1ab82ad8ea9b81a163e2d49fe572d2005d4980fa38afbb8ad9c00934da5b61502c64b902d5dd6c5eff11084e4c78958df167d5e2c200c358381e79893ce32589dd558a119d0289cbddeaccec92dff65b81b6f65973ac4b06d65cc27141351c064c06e7b2941d8221b1fdd0a43c9faa0fec31c5b8bafc9475b0eaf1c27a954edc801afaf4ea330dc185522906c7f9bef78b57dd608fd798c13159396282d09af8872440769e0b28eaa7bcea37668d0d25f717f372039c69252a85d743e1f88ed76dd0c62a0e490a5996daface2be71698359d03ed9414ffe5715fc9742bf995a304b196f8fe059dfe11324587ddff03bfd8b163365eb58b76c9c26b8e3aaaff55ce1165ffcd077e55d7f5c519b48ad4383d1a8e1400045909b7356c50e69d7ec49bc2f2c88b8ea3bada7c13a30413661497a809f01569bc8e29439d145e14143905b60226e702a0ccc2cf72a35a01ee657453b60b629d21ab22aff7423952fdd929238cb4d58386d567a84a14642092ab7f64940dd574d932b8a40fc460ba6c125018a4a3a28df3c0323571a6be8f4836358c4b189f5e69f14bf386cd68dd6616aafa3ce62b3356d29365112f4b51f0636a2076b18ed904896358c75252a01dab6b926b87139e3c69a9f37e381409bc4631658c7db4aca2fd65281efbc6a9cf34ab2e49900bbe98ab22f2211dc6b1006246ca56e47843c1b694ef8457e1dca13bc96f62b7e543c9536dafb59cbad1dbc87ee17806075e9abf95fe7f048af64c517b17d20c4ea55f635c21eed199ebcc4d1474c2374bec82022c3fc91c1a8416c82f977b69990ee626cd3135458be2b543a489fe4745abcaafc84135d3689330f92d9f2ca0a6e43e958df73fdcb51b634b12ba2dc564811e609560ed146fc580cf10286769eb31d3d853c0e25c3cf6385d8a260b76a475e63bdebbceae99e419158bcfade81b291a37dc08d019ad5f38e7cd9143b082663a2d2f65e6525457684c7a41e31adf010ac68733fd03f1fcbff9dd214b1683a803ed449bc5f8dd52e64c613c6a76b0b26e285f8e2ee6e575a15a8c888ed967a48fc9f46c64b3ee61a997968740f4efa13e79637f26ead4ef02a843ccd166544e68f3d934f3a78539b949a9350b765f11a8219a90ccaafba19e71fe7f0566114e9ad0b325a61adb3f8ec0febb7dc04cd9daa34461b7a71b1e33ff8992ddca2f2485bff928cf6ff08b4883650a89cb5eb3f192958d5aea6e4ccb7e03abb33cb50fedf5daea58267a23dfff1e1582a944183be8dcb913f127c5ea18671a288cc397b00d1be0e53060513f4e138c5cf279553"}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x0, 0x0) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x7ff, 0x80, 0x8, 0xfffffffffffff801, 0x6, 0x1ff, 0x2, 0x1, 0x1, 0x0, 0x100000000, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:59:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:19 executing program 4 (fault-call:2 fault-nth:31): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:19 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x121000) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000080)={0x4, {{0x2, 0x4e22, @multicast2=0xe0000002}}, {{0x2, 0x4e24, @broadcast=0xffffffff}}}, 0x108) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x7, {{0x2, 0x4e22, @multicast2=0xe0000002}}}, 0x88) 2018/04/02 19:59:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000300)=""/191) dup2(r0, r0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x6) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:59:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000005053000000000000f5042cf380521e0e4522e6490e4ec78bacc298a6c7ead83b780fd3e276d46e4891cbc3b78d99c1755e0b4c092df5a4aa7d4a12a5121342d86f5a845dd4e49c972fb1b10cb30894942ef1e14516caeda81d4107ed6aa80485b198367dd4158b4df3699ea9ab29495bce559561a575f53449f8165927aa6db30bdb1e0e8d1efe8c511206131e695dbb88007fca9d197882d1787734e983906e4a29809cd03af646e7baca49ea74197d107394c56fa489be2a5d272be0cf7e725a2a27477497494992268551bc52ee67c1fc5240fc25792435bfc4bd3ec89a59e8020d00a40c17a2a1075a6acdfec5e4188b3e813595c891386c3bd0a9e36e214e6687ae827519987e255557b1368be4124b4962e04cfb97df5d6bf15726d0a4f85ed16c772d0ff8c26bc254facb210cc4aa1f5c24"], 0x1) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x4, 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000340)={0x9, 0x0, 'client0\x00', 0xffffffff80000007, "6a25e79cc2b50d79", "8ddf019c23f0ff2c51cad288728fa0a2d8d7dfb3a9cb8d46eac0f93954d2e7f4", 0xeb6, 0x3}) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a2004000009039d0f701566cffac206d45953edfecadd45a86ebeb1cd60adb8458ee7a61d5d7f6fc63ec3343fe3b07939ac7133cbf96db15691d0134004beacd8d347135398fade11a74c43d9f5c1a97ca1e27e9426b70c86b691bef276c"], 0x1}, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x807, 0x1f) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xfc, "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"}, &(0x7f0000000080)=0x104) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r3, 0x5, 0x6c}, &(0x7f0000000280)=0xc) 2018/04/02 19:59:19 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x9) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)=""/61, &(0x7f0000000080)=0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:59:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x55, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000100)={r0, 0x81}) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) [ 761.926957] FAULT_INJECTION: forcing a failure. [ 761.926957] name failslab, interval 1, probability 0, space 0, times 0 [ 761.938254] CPU: 0 PID: 14740 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 761.945256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.954592] Call Trace: [ 761.957172] dump_stack+0x1a7/0x27d [ 761.960795] ? arch_local_irq_restore+0x53/0x53 [ 761.965449] ? __save_stack_trace+0x7e/0xd0 [ 761.969766] should_fail+0x914/0xae0 [ 761.973473] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 761.978563] ? kasan_kmalloc+0xad/0xe0 [ 761.982441] ? kmem_cache_alloc_trace+0x136/0x740 [ 761.987269] ? __memcg_init_list_lru_node+0x169/0x270 [ 761.992442] ? __list_lru_init+0x544/0x750 [ 761.996664] ? sget_userns+0x6c2/0xe60 [ 762.000541] ? mount_fs+0x66/0x2d0 [ 762.004071] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 762.008810] ? do_mount+0xea4/0x2bb0 [ 762.012507] ? SyS_mount+0xab/0x120 [ 762.016120] ? do_syscall_64+0x281/0x940 [ 762.020172] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 762.025526] ? find_held_lock+0x35/0x1d0 [ 762.029580] ? __lock_is_held+0xb6/0x140 [ 762.033639] ? check_same_owner+0x320/0x320 [ 762.037957] ? rcu_note_context_switch+0x710/0x710 [ 762.042882] should_failslab+0xec/0x120 [ 762.046848] kmem_cache_alloc_trace+0x4b/0x740 [ 762.051415] ? __kmalloc_node+0x33/0x70 [ 762.055373] ? __kmalloc_node+0x33/0x70 [ 762.059338] ? rcu_read_lock_sched_held+0x108/0x120 [ 762.064348] __memcg_init_list_lru_node+0x169/0x270 [ 762.069355] ? list_lru_add+0x7c0/0x7c0 [ 762.073317] ? __kmalloc_node+0x47/0x70 [ 762.077286] __list_lru_init+0x544/0x750 [ 762.081340] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 762.087214] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 762.092226] ? lockdep_init_map+0x9/0x10 [ 762.096282] sget_userns+0x6c2/0xe60 [ 762.099980] ? get_anon_bdev+0x2a0/0x2a0 [ 762.104040] ? destroy_unused_super.part.7+0xf0/0xf0 [ 762.109127] ? rcu_read_lock_sched_held+0x108/0x120 [ 762.114140] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 762.118976] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 762.123996] ? rcu_is_watching+0x85/0x130 [ 762.128144] ? trace_hardirqs_off+0x10/0x10 [ 762.132464] ? trace_hardirqs_off+0xd/0x10 [ 762.136703] ? cap_capable+0x1b5/0x230 [ 762.140588] ? security_capable+0x8e/0xc0 [ 762.144734] ? get_anon_bdev+0x2a0/0x2a0 [ 762.148791] ? ns_capable_common+0xcf/0x160 [ 762.153114] ? get_anon_bdev+0x2a0/0x2a0 [ 762.157169] sget+0xd2/0x120 [ 762.160182] ? __get_fs_type+0x8a/0xc0 [ 762.164065] ? shmem_remount_fs+0x750/0x750 [ 762.168385] mount_nodev+0x37/0x100 [ 762.172012] shmem_mount+0x2c/0x40 [ 762.175548] mount_fs+0x66/0x2d0 [ 762.178915] vfs_kern_mount.part.26+0xc6/0x4a0 [ 762.183492] ? may_umount+0xa0/0xa0 [ 762.187115] ? _raw_read_unlock+0x22/0x30 [ 762.191255] ? __get_fs_type+0x8a/0xc0 [ 762.195131] do_mount+0xea4/0x2bb0 [ 762.198648] ? kasan_check_read+0x11/0x20 [ 762.202781] ? do_raw_spin_unlock+0x9e/0x310 [ 762.207165] ? copy_mount_string+0x40/0x40 [ 762.211375] ? rcu_pm_notify+0xc0/0xc0 [ 762.215243] ? copy_mount_options+0x5f/0x2e0 [ 762.219624] ? rcu_read_lock_sched_held+0x108/0x120 [ 762.224617] ? kmem_cache_alloc_trace+0x459/0x740 [ 762.229463] ? kasan_check_write+0x14/0x20 [ 762.233679] ? copy_mount_options+0x1f7/0x2e0 [ 762.238151] SyS_mount+0xab/0x120 [ 762.241578] ? copy_mnt_ns+0xb40/0xb40 [ 762.245443] do_syscall_64+0x281/0x940 [ 762.249307] ? vmalloc_sync_all+0x30/0x30 [ 762.253428] ? _raw_spin_unlock_irq+0x27/0x70 [ 762.257898] ? finish_task_switch+0x1c1/0x810 [ 762.262367] ? syscall_return_slowpath+0x550/0x550 [ 762.267272] ? syscall_return_slowpath+0x2ac/0x550 [ 762.272175] ? prepare_exit_to_usermode+0x350/0x350 [ 762.277165] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 762.282505] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 762.287327] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 762.292493] RIP: 0033:0x4552d9 [ 762.295660] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 762.303342] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 762.310585] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 762.317827] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 2018/04/02 19:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x22, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:19 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8bc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8240, 0x0) accept4$netrom(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) [ 762.325071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 762.332315] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001f 2018/04/02 19:59:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:20 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000040)=""/22) 2018/04/02 19:59:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a2005a16371d90550250c36e27cfc347550025c643953ad3fe3f23862fe361b6a00bf613dd5ec4f31de924b0353aeaa9879e588e93fb556de397f8b512c70a2c75f786b5c3a159585bac9edb482e68c84b72c1a826648e97deeb24b97fc967a1f948bc1b556fbb7f9d88607c4f13099a6cd0efa8f6ac3db21ea76f8f1083211c956f24eba395a3e1b59f214fac76c3313efa5a4ac76a2374abe3fcb502abd2e2810b0d45926cb82eb846c4ead73f7267584435cf04c0e470351a26f883a1e04531ae5892093c8383d0cb097cec626a112c1288d26f9002588ceb0b51738fbe3f57f2a2fc61dca7629397d29ba32acc5d1a4ccd1f85bdedc7645a790ca8ec0e77276a2035cc097cc4afafa00d67613c65da286ac0464f674861dcba5b6bd314bacc4d59924cbe9265a2a4"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:21 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x747, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x8, [0x7, 0x0, 0x428f, 0x8, 0x5, 0x7f, 0xfff, 0x40]}, 0x14) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r1}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:59:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) 2018/04/02 19:59:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x7, 0x101000) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 2018/04/02 19:59:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) r1 = dup(r0) accept$alg(r1, 0x0, 0x0) r2 = dup2(r0, r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2200fddbdf250d000000a6d3adcca6608568a349aee2af94f90be63ac8b111825555b1ba508115c53d3ed8cb86a36e372215e207268bde9acc1fde0e25f0b904ff7d633cc00000acea1051dfb0c7fe"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000fdffff7f80d3bca9f995517e45850dba5c74a1efbef113f06a121bd401d3795db8b3c627a13bd618f6fc7436d677e8765d530803f96dfa75e73204e1547efcdf4dc1018687e7c18011608abdd73cd5afe597d68c33891dcd727d04c47db1427d71d15c5742b0a636eacf7900f80500000000000000bb9687ceee78d5a0fa5871564c07fc7a6e0f62190329ee93f25400000000000000d4fe07fa483750a78e1082a45a06862a44fd9c9bdf1859733f6064abb233fc05efa4a61f27a85304170f7e1c5a096631d5cced0666813a16fc349812f78727b20b31addcd1cc74e441fab4ff0000000000000000000023341fc46150ba1e2b63240eecbeee3a370bbb9c39b31e6a8ec001e1c85da7045e6d8aaca62d7ccbf9c634892db1482421509731d14904d9280895849c332c9c7f8718f931b87311be76a0521f3a44519423a63e03ec365ca6bfae7ac0f11a5fb34dec19d47be0a7c5c207b3018ab4e8d44ddc6c3f1fb1e4234a1785746dd48387f6ffab9678ce0f1881a5b00a966cad87d235710e87161c240f47b3dcb773384e1644bb085803df2bda2d083bbab301adef2d5d47b82b806b7eb16c0842d78c0b41dffe6aa53431699159b32b6971efdcdf82ed231496c8bbb9"], &(0x7f0000000280)=0x8) sysfs$3(0x3) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) fcntl$getown(r4, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) futimesat(r2, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000640)={{0x0, 0x2710}, {r5, r6/1000+30000}}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) bind$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000680)={&(0x7f00001c5000/0x4000)=nil, 0x4000}) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:21 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x1f, 0x10000) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000180)={0x0, 0xffffffffffffff00, 0x4, 0x0, 0x10000}) ioctl(r0, 0xc0184901, &(0x7f0000000080)="4f3d742fcd23cf000000000000000000000000") r2 = syz_open_dev$midi(&(0x7f0000000780)='/dev/midi#\x00', 0x2, 0x40000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="99000600057891a2"], 0x18) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x800, 0x0) 2018/04/02 19:59:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x4240, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)=0x80) 2018/04/02 19:59:21 executing program 4 (fault-call:2 fault-nth:32): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c30070000000500000000000000a200"], 0x1}, 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x151fca0a51dd9087, r0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000100)=0x1e) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000140)={0xd785, 0x1, 0x800, 0x2, [], [], [], 0x20, 0x80000001, 0x7, 0x2, "384f458c3b046c05de7bb064d86f4fb4"}) [ 763.886386] FAULT_INJECTION: forcing a failure. [ 763.886386] name failslab, interval 1, probability 0, space 0, times 0 [ 763.897955] CPU: 0 PID: 14808 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 763.904961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.914300] Call Trace: [ 763.916884] dump_stack+0x1a7/0x27d [ 763.920503] ? arch_local_irq_restore+0x53/0x53 [ 763.925174] should_fail+0x914/0xae0 [ 763.928882] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 763.933977] ? down_read+0x1b0/0x1b0 [ 763.937695] ? find_held_lock+0x35/0x1d0 [ 763.941754] ? __lock_is_held+0xb6/0x140 [ 763.945814] ? check_same_owner+0x320/0x320 [ 763.950127] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 763.954958] ? rcu_note_context_switch+0x710/0x710 [ 763.959881] should_failslab+0xec/0x120 [ 763.963846] kmem_cache_alloc_trace+0x4b/0x740 [ 763.968417] ? cap_capable+0x1b5/0x230 [ 763.972299] shmem_fill_super+0x9a/0xa10 [ 763.976346] ? get_anon_bdev+0x2a0/0x2a0 [ 763.980393] ? shmem_remount_fs+0x750/0x750 [ 763.984705] ? get_anon_bdev+0x2a0/0x2a0 [ 763.988752] ? sget+0xda/0x120 [ 763.991930] ? __get_fs_type+0x8a/0xc0 [ 763.995805] ? shmem_remount_fs+0x750/0x750 [ 764.000117] mount_nodev+0x59/0x100 [ 764.003734] shmem_mount+0x2c/0x40 [ 764.007265] mount_fs+0x66/0x2d0 [ 764.010627] vfs_kern_mount.part.26+0xc6/0x4a0 [ 764.015200] ? may_umount+0xa0/0xa0 [ 764.018819] ? _raw_read_unlock+0x22/0x30 [ 764.022957] ? __get_fs_type+0x8a/0xc0 [ 764.026839] do_mount+0xea4/0x2bb0 [ 764.030376] ? copy_mount_string+0x40/0x40 [ 764.034598] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 764.039603] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 764.044353] ? retint_kernel+0x10/0x10 [ 764.048233] ? copy_mount_options+0x18b/0x2e0 [ 764.052722] ? __sanitizer_cov_trace_pc+0x4b/0x50 [ 764.057557] ? copy_mount_options+0x1f7/0x2e0 [ 764.062046] SyS_mount+0xab/0x120 [ 764.065485] ? copy_mnt_ns+0xb40/0xb40 [ 764.069365] do_syscall_64+0x281/0x940 [ 764.073237] ? vmalloc_sync_all+0x30/0x30 [ 764.077371] ? kasan_check_write+0x14/0x20 [ 764.081606] ? syscall_return_slowpath+0x550/0x550 [ 764.086537] ? syscall_return_slowpath+0x2ac/0x550 [ 764.091462] ? prepare_exit_to_usermode+0x350/0x350 [ 764.096475] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 764.101843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 764.106684] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 764.111871] RIP: 0033:0x4552d9 [ 764.115052] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 764.122756] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 764.130015] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 2018/04/02 19:59:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x2, 0xa906, 0x6, 0xbb5}, 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x2, {{0x2, 0x4e22, @multicast2=0xe0000002}}}, 0x88) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) connect(r1, &(0x7f0000000380)=@ethernet={0x306, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80) ioctl(r1, 0x9, &(0x7f0000000280)="c0df16f2333c875f10014156000da83dfc43fb8b368b0a") ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000340)={0x4, 0x1}) 2018/04/02 19:59:21 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x20, 0x80001) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xc6, "3bb0327c2313a543c61c3bf617c684e98a87ea3165afd3f7896ae704b949e980cd021a43673500ea8a53eaa17887607a477f507662b39a8cc771e1432e7dabccfe39eb03cfbcdedc87d6aa414c0350ebf54c5e4c73248fa80995e37061aadcd660f7c6c8a0a6ddd0f0801c9706062fac2b1bbac8f3a68308409cb2ef6d9f679faf2904425dcafed6abcc4de4eb006e659a6b813a2f768790a17fa33330956e1d5db74fb44caa9c7fce8c45927543378b8c19bc8d87e43bdf4ccfcb8215962f6f27955375b6da"}, &(0x7f0000000180)=0xce) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x7}, &(0x7f0000000200)=0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") [ 764.137280] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 764.144541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 764.151803] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000020 2018/04/02 19:59:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000027000000000000000c2100000c3005000000f04900000000156d9955c1100000a2003e35c0915d251a075e2e78b13bfce47c7057779217918dc056"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:23 executing program 5: r0 = getpid() clock_settime(0x3, &(0x7f0000000080)={0x77359400}) wait4(r0, &(0x7f0000000000), 0x3, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) sync_file_range(r1, 0x2, 0x3, 0x4) ppoll(&(0x7f0000103ff8)=[{r1}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) r2 = syz_open_procfs(r0, &(0x7f0000000140)='ns/ipc\x00') ioctl$KVM_SMI(r2, 0xaeb7) 2018/04/02 19:59:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="04ca7693978cc9b2e9b9c577684e9224", 0x10) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000040)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) accept$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x14) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f00000011c0)=[{&(0x7f0000000140)="eb6b38a10ff1c2518b036a975a5027b3f721497f4756b4f04e063e4fb26adf77a0b2b4307251b9c69b429a54c8705d276aa621d303f1f52196d447b073e71aecb855508db0f02bdedc4c3665e656b517077ec787d258317f8b9cc7a5e976311f662f92f019c48f130eefba6d5264dc", 0x6f, 0x1}, {&(0x7f00000001c0)="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", 0x1000, 0x7}], 0x8, 0x0) 2018/04/02 19:59:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000000, 0x10001) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x1f, 0x3}, {0x3b, 0x5}, 0x10001, 0x1, 0x4}) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:59:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x80100, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x56400, 0x100) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000400)={0x0, r2}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x100, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1, &(0x7f0000000300)=""/155, 0x9b, 0xb4}, 0x40010000) 2018/04/02 19:59:23 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = memfd_create(&(0x7f0000000040)='lo^-ppp1^procnodev\x00', 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x2e1f, 0x4) 2018/04/02 19:59:23 executing program 4 (fault-call:2 fault-nth:33): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:23 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x8, 0x4424188f7b3731d8, 0x9) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x202020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x20a, 0x70bd26, 0x25dfdbfc, {0xa}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x91) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:59:23 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000180)={0x2f, &(0x7f0000000140)=""/47}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0xffffffff}, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20001700000000000c3007000000f04949294bccbe26e5c80000000000000000"], 0x1}, 0x1}, 0x0) [ 766.145057] FAULT_INJECTION: forcing a failure. [ 766.145057] name failslab, interval 1, probability 0, space 0, times 0 [ 766.156314] CPU: 0 PID: 14870 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 766.163321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.172664] Call Trace: [ 766.175248] dump_stack+0x1a7/0x27d [ 766.178870] ? arch_local_irq_restore+0x53/0x53 [ 766.183542] should_fail+0x914/0xae0 [ 766.187251] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 766.192349] ? down_read+0x1b0/0x1b0 [ 766.196065] ? find_held_lock+0x35/0x1d0 [ 766.200121] ? __lock_is_held+0xb6/0x140 [ 766.204180] ? check_same_owner+0x320/0x320 [ 766.208490] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 766.213327] ? rcu_note_context_switch+0x710/0x710 [ 766.218248] should_failslab+0xec/0x120 [ 766.222215] kmem_cache_alloc_trace+0x4b/0x740 [ 766.226786] ? cap_capable+0x1b5/0x230 [ 766.230669] shmem_fill_super+0x9a/0xa10 [ 766.234720] ? get_anon_bdev+0x2a0/0x2a0 [ 766.238774] ? shmem_remount_fs+0x750/0x750 [ 766.243082] ? get_anon_bdev+0x2a0/0x2a0 [ 766.247132] ? sget+0xda/0x120 [ 766.250314] ? __get_fs_type+0x8a/0xc0 [ 766.254196] ? shmem_remount_fs+0x750/0x750 [ 766.258507] mount_nodev+0x59/0x100 [ 766.262127] shmem_mount+0x2c/0x40 [ 766.265656] mount_fs+0x66/0x2d0 [ 766.269016] vfs_kern_mount.part.26+0xc6/0x4a0 [ 766.273586] ? may_umount+0xa0/0xa0 [ 766.277204] ? _raw_read_unlock+0x22/0x30 [ 766.281342] ? __get_fs_type+0x8a/0xc0 [ 766.285221] do_mount+0xea4/0x2bb0 [ 766.288752] ? copy_mount_string+0x40/0x40 [ 766.292978] ? rcu_pm_notify+0xc0/0xc0 [ 766.296860] ? copy_mount_options+0x5f/0x2e0 [ 766.301257] ? rcu_read_lock_sched_held+0x108/0x120 [ 766.306263] ? kmem_cache_alloc_trace+0x459/0x740 [ 766.311099] ? kasan_check_write+0x14/0x20 [ 766.315349] ? _copy_from_user+0x99/0x110 [ 766.319486] ? copy_mount_options+0x1f7/0x2e0 [ 766.323974] SyS_mount+0xab/0x120 [ 766.327415] ? copy_mnt_ns+0xb40/0xb40 [ 766.331292] do_syscall_64+0x281/0x940 [ 766.335171] ? vmalloc_sync_all+0x30/0x30 [ 766.339306] ? _raw_spin_unlock_irq+0x27/0x70 [ 766.343796] ? finish_task_switch+0x1c1/0x810 [ 766.348285] ? syscall_return_slowpath+0x550/0x550 [ 766.353220] ? syscall_return_slowpath+0x2ac/0x550 [ 766.358150] ? prepare_exit_to_usermode+0x350/0x350 [ 766.363167] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 766.368528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 766.373370] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 766.378536] RIP: 0033:0x4552d9 [ 766.381704] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2018/04/02 19:59:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountstats\x00') getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x18}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r1, 0x400}, &(0x7f00000002c0)=0x8) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff9, 0x5210c1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r3, 0xc7c}, 0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000080)={0x200}, 0x4) 2018/04/02 19:59:24 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400, 0x0) connect$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") [ 766.389393] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 766.396641] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 766.403886] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 766.411131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 766.418377] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000021 2018/04/02 19:59:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:24 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x28080, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x10001, 0xfff, 0xd0}, &(0x7f00000001c0)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002700638100050000000000000c3007000000f049000000000000a200"], 0x1}, 0x1}, 0x0) 2018/04/02 19:59:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:25 executing program 3: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x4, 0x4800000000000, 0x3ff, 0x0, 0x4, 0x4, 0x0, 0x5, 0x6, 0x7}) 2018/04/02 19:59:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:25 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2100) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='posix_acl_access+-\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) 2018/04/02 19:59:25 executing program 4 (fault-call:2 fault-nth:34): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:25 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x220}) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:59:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) set_tid_address(&(0x7f0000000340)) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000240)={0x7, 0x10001, 0x80000001, 0x7, 0x2327, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)={0x27a8, 0x1, {0x0, 0x0, 0x80000001, 0x3, 0x8}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x1, 0x401, 0x2, 0xfffffffffffffe01, 0x0, 0xfffffffffffffffe}) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080)=0xe020000000000000, 0x4) [ 768.252994] FAULT_INJECTION: forcing a failure. [ 768.252994] name failslab, interval 1, probability 0, space 0, times 0 [ 768.264293] CPU: 0 PID: 14934 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 768.271301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.280651] Call Trace: [ 768.283245] dump_stack+0x1a7/0x27d [ 768.286876] ? arch_local_irq_restore+0x53/0x53 [ 768.291555] should_fail+0x914/0xae0 [ 768.295269] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 768.300373] ? trace_hardirqs_off+0x10/0x10 [ 768.304695] ? perf_trace_lock+0xd6/0x900 [ 768.308840] ? trace_hardirqs_off+0x10/0x10 [ 768.313166] ? print_irqtrace_events+0x270/0x270 [ 768.317920] ? find_held_lock+0x35/0x1d0 [ 768.321982] ? __lock_is_held+0xb6/0x140 [ 768.326052] ? check_same_owner+0x320/0x320 [ 768.330367] ? lock_downgrade+0x980/0x980 [ 768.334512] ? rcu_note_context_switch+0x710/0x710 [ 768.339438] ? find_held_lock+0x35/0x1d0 [ 768.343501] should_failslab+0xec/0x120 [ 768.347476] __kmalloc+0x63/0x760 [ 768.350923] ? lock_downgrade+0x980/0x980 [ 768.355065] ? do_raw_spin_lock+0xc1/0x230 [ 768.359303] ? register_shrinker+0x10e/0x2d0 [ 768.363708] ? trace_event_raw_event_module_request+0x320/0x320 [ 768.369770] register_shrinker+0x10e/0x2d0 [ 768.374001] ? prepare_kswapd_sleep+0x1f0/0x1f0 [ 768.378669] ? memcpy+0x45/0x50 [ 768.381951] sget_userns+0xbdd/0xe60 [ 768.385661] ? get_anon_bdev+0x2a0/0x2a0 [ 768.389726] ? destroy_unused_super.part.7+0xf0/0xf0 [ 768.394829] ? rcu_read_lock_sched_held+0x108/0x120 [ 768.399845] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 768.404689] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 768.409703] ? rcu_is_watching+0x85/0x130 [ 768.413851] ? trace_hardirqs_off+0x10/0x10 [ 768.418168] ? trace_hardirqs_off+0xd/0x10 [ 768.422402] ? cap_capable+0x1b5/0x230 [ 768.426286] ? security_capable+0x8e/0xc0 [ 768.430427] ? get_anon_bdev+0x2a0/0x2a0 [ 768.434478] ? ns_capable_common+0xcf/0x160 [ 768.438787] ? get_anon_bdev+0x2a0/0x2a0 [ 768.442834] sget+0xd2/0x120 [ 768.445844] ? __get_fs_type+0x8a/0xc0 [ 768.449723] ? shmem_remount_fs+0x750/0x750 [ 768.454031] mount_nodev+0x37/0x100 [ 768.457647] shmem_mount+0x2c/0x40 [ 768.461174] mount_fs+0x66/0x2d0 [ 768.464532] vfs_kern_mount.part.26+0xc6/0x4a0 [ 768.469105] ? may_umount+0xa0/0xa0 [ 768.472729] ? _raw_read_unlock+0x22/0x30 [ 768.476866] ? __get_fs_type+0x8a/0xc0 [ 768.480748] do_mount+0xea4/0x2bb0 [ 768.484278] ? kasan_check_read+0x11/0x20 [ 768.488412] ? do_raw_spin_unlock+0x9e/0x310 [ 768.492813] ? copy_mount_string+0x40/0x40 [ 768.497038] ? rcu_pm_notify+0xc0/0xc0 [ 768.500918] ? copy_mount_options+0x5f/0x2e0 [ 768.505310] ? rcu_read_lock_sched_held+0x108/0x120 [ 768.510312] ? kmem_cache_alloc_trace+0x459/0x740 [ 768.515151] ? kasan_check_write+0x14/0x20 [ 768.519379] ? copy_mount_options+0x1f7/0x2e0 [ 768.523865] SyS_mount+0xab/0x120 [ 768.527307] ? copy_mnt_ns+0xb40/0xb40 [ 768.531182] do_syscall_64+0x281/0x940 [ 768.535056] ? vmalloc_sync_all+0x30/0x30 [ 768.539190] ? _raw_spin_unlock_irq+0x27/0x70 [ 768.543671] ? finish_task_switch+0x1c1/0x810 [ 768.548156] ? syscall_return_slowpath+0x550/0x550 [ 768.553076] ? syscall_return_slowpath+0x2ac/0x550 [ 768.557991] ? prepare_exit_to_usermode+0x350/0x350 [ 768.562995] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 768.568346] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 768.573182] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 768.578359] RIP: 0033:0x4552d9 [ 768.581537] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 768.589233] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 768.596497] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 2018/04/02 19:59:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x3, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x9, 0x80200) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0x8) sysfs$3(0x3) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0xffffffffffffffff, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e21, 0x8, @empty, 0xdb}}, 0x20, 0x4}, &(0x7f0000000180)=0x90) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r2 = dup2(r0, r1) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x34, @loopback={0x0, 0x1}, 0xfffffffffffffe00}, {0xa, 0x4e20, 0xfffffffffffffffe, @loopback={0x0, 0x1}}, 0x200, [0xf7f, 0x3, 0x0, 0x40, 0x3, 0x3, 0x200, 0x2]}, 0x5c) 2018/04/02 19:59:26 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4, 0x1) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) ioctl(0xffffffffffffffff, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x5, 0x1, 0xf93, 0x401}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="bd00000071e4f91402b0bd4bf3bcc1d21ab0c3eb7863604225ea14c3e17976815a5ee92d3753cbd01554e4238ecf0b4241a6a98c24afc919f5f2b0671cbb7be0a20f830a9addec4ce97aea2c1245a66447f2180d23ba0100000000000000e81e076eb30fa011266373f920c0a1acb10c86c58bdcf6678c9811023300094ec33354cccff6894cefd1c4a6d78607d38072e327d7ce5c40ae73f11ec7b0abb529f72e8619cb735e47b98fcd6a828528dcc198198c8d469ec8620e22bd4dd6fac52bfadca000fc4353745f4c698a88b54e192b0b8f49486db96c468f38fbf65f512e57f8"], &(0x7f0000000380)=0xc5) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='vcan0\x00') 2018/04/02 19:59:26 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000021) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)="cc6d1547927e5080a468905dd179f2d154392ee2cf026d156813eae183c0d98e996d49a7", 0x24, 0xfffffffffffffff8) keyctl$describe(0x6, r1, &(0x7f0000000100)=""/255, 0xff) 2018/04/02 19:59:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) [ 768.603761] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 768.611020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 768.618281] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000022 2018/04/02 19:59:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffff, 0x400) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000280)={{r2, r3+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000440)) r4 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x57154717, 0x10}, &(0x7f0000000540)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={r5, @in6={{0xa, 0x4e21, 0x75d, @empty, 0xff}}, 0x0, 0x8, 0x100, 0x65, 0x80}, 0x98) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000480)=""/107) write(r4, &(0x7f0000000400)="5e1860416963a72c1718673e35425ae9eca8779df268aa55a0e94ae9a1f4ed99af4f1abd648c26c85eab0d7b10d59c2804", 0x31) recvmsg(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/237, 0xed}], 0x1, &(0x7f0000000300)=""/149, 0x95}, 0x0) 2018/04/02 19:59:27 executing program 4 (fault-call:2 fault-nth:35): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:27 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") 2018/04/02 19:59:27 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@mcast1={0xff, 0x1, [], 0x1}, 0x7b, r1}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x210, 0x70bd26, 0x25dfdbfb, {0x8}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff8948d98e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40811}, 0x40081) 2018/04/02 19:59:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) clock_nanosleep(0x7, 0x1, &(0x7f0000000000)={0x77359400}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x1) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000140)) 2018/04/02 19:59:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KDENABIO(r0, 0x4b36) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/02 19:59:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="00009c7d"], &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x15102, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)) [ 769.835590] FAULT_INJECTION: forcing a failure. [ 769.835590] name failslab, interval 1, probability 0, space 0, times 0 [ 769.846878] CPU: 0 PID: 14985 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 769.853895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.863247] Call Trace: [ 769.865833] dump_stack+0x1a7/0x27d [ 769.869454] ? arch_local_irq_restore+0x53/0x53 [ 769.874123] should_fail+0x914/0xae0 [ 769.877834] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 769.882926] ? down_read+0x1b0/0x1b0 [ 769.886643] ? find_held_lock+0x35/0x1d0 [ 769.890698] ? __lock_is_held+0xb6/0x140 [ 769.894760] ? check_same_owner+0x320/0x320 [ 769.899075] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 769.903910] ? rcu_note_context_switch+0x710/0x710 [ 769.908835] should_failslab+0xec/0x120 [ 769.912802] kmem_cache_alloc_trace+0x4b/0x740 [ 769.917378] ? cap_capable+0x1b5/0x230 [ 769.921260] shmem_fill_super+0x9a/0xa10 [ 769.925312] ? get_anon_bdev+0x2a0/0x2a0 [ 769.929362] ? shmem_remount_fs+0x750/0x750 [ 769.933675] ? get_anon_bdev+0x2a0/0x2a0 [ 769.937721] ? sget+0xda/0x120 [ 769.940910] ? __get_fs_type+0x8a/0xc0 [ 769.944792] ? shmem_remount_fs+0x750/0x750 [ 769.949105] mount_nodev+0x59/0x100 [ 769.952725] shmem_mount+0x2c/0x40 [ 769.956255] mount_fs+0x66/0x2d0 [ 769.959618] vfs_kern_mount.part.26+0xc6/0x4a0 [ 769.964194] ? may_umount+0xa0/0xa0 [ 769.967810] ? _raw_read_unlock+0x22/0x30 [ 769.971948] ? __get_fs_type+0x8a/0xc0 [ 769.975831] do_mount+0xea4/0x2bb0 [ 769.979364] ? kasan_check_read+0x11/0x20 [ 769.983500] ? do_raw_spin_unlock+0x9e/0x310 [ 769.987902] ? copy_mount_string+0x40/0x40 [ 769.992124] ? rcu_pm_notify+0xc0/0xc0 [ 769.996014] ? copy_mount_options+0x5f/0x2e0 [ 770.000415] ? rcu_read_lock_sched_held+0x108/0x120 [ 770.005424] ? kmem_cache_alloc_trace+0x459/0x740 [ 770.010257] ? kasan_check_write+0x14/0x20 [ 770.014486] ? copy_mount_options+0x1f7/0x2e0 [ 770.018973] SyS_mount+0xab/0x120 [ 770.022419] ? copy_mnt_ns+0xb40/0xb40 [ 770.026297] do_syscall_64+0x281/0x940 [ 770.030176] ? vmalloc_sync_all+0x30/0x30 [ 770.034316] ? _raw_spin_unlock_irq+0x27/0x70 [ 770.038812] ? finish_task_switch+0x1c1/0x810 [ 770.043297] ? syscall_return_slowpath+0x550/0x550 [ 770.048214] ? syscall_return_slowpath+0x2ac/0x550 [ 770.053131] ? prepare_exit_to_usermode+0x350/0x350 [ 770.058136] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 770.063494] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 770.068343] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 770.073531] RIP: 0033:0x4552d9 [ 770.076715] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 770.084421] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 770.091691] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 770.098964] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 770.106223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 770.113482] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000023 2018/04/02 19:59:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='ifb0\x00') setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0xff, 0x4}}, 0x10) shmget(0x3, 0x3000, 0x54000a2d, &(0x7f0000ffc000/0x3000)=nil) restart_syscall() 2018/04/02 19:59:29 executing program 1: keyctl$set_reqkey_keyring(0xe, 0x1) 2018/04/02 19:59:29 executing program 4 (fault-call:2 fault-nth:36): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/02 19:59:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f000024bff8), 0x8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9b4, 0x28400) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7e}) 2018/04/02 19:59:29 executing program 2 (fault-call:6 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2018/04/02 19:59:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {{}, 0x2}], 0x30) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200), &(0x7f0000000280)=0x8) sysfs$3(0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x0, 0x0, "0be47daea147"}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) connect$ax25(0xffffffffffffffff, &(0x7f00000002c0)={0x3, {"20ada8787a1d43"}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/118, 0x76, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)='_', 0x1}], 0x1, &(0x7f0000000640)}, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000400)=""/124, &(0x7f0000000480)=0x7c) perf_event_open(&(0x7f000001d000)={0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/02 19:59:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x8000, 0x4, 0x8}) socketpair$inet6(0xa, 0x5, 0x282800, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e22, 0xfa61755, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x4e23, 0x9, @loopback={0x0, 0x1}, 0x6b5}, 0x6, [0x1, 0x1, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9]}, 0x5c) init_module(&(0x7f0000000040)='/dev/ptmx\x00', 0xa, &(0x7f0000000080)='ppp0trusted\'\x00') 2018/04/02 19:59:29 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000180)=0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, [0x3, 0x7fffffff, 0x8, 0x100000001, 0x5, 0x9, 0x1, 0x5, 0x8a3, 0x5, 0x40, 0x9, 0x2c, 0xc00000, 0x4]}, &(0x7f00000007c0)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000800)={r4, 0x2}, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x4) sched_setscheduler(r3, 0x0, &(0x7f0000000880)=0x18fff) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xf2, "45ffa87bebc2889802d9ccde4618529fb0e99a7774abc82af9b09262ed0a2698cf01ca592c8ef798ea5d10ae70c70453dbae1fff3d8580a6d1a0db0077dc0ab978f0d81e67e085ca50a6950b24ffb5ccb13f7ad5dc188f269beb53b4fb811819d135d43f82aca94a3034205eea4bc6a45cc2deb84903077455223c2c2694f3946a0d4e08c488ad96c9be17f5baf1b7856671868b8adeb5ff8abf970cc7ad338e31dc44db8f0a920a758307949e28f3d689d73481fec4b32fa7168dc6e67d8f015e1a813f1e9c43af26fdf91e98c0ea960870a9f891ac044e853b6c2d52a847bad206794630868d2a42601b6fb624135c4fd7"}, &(0x7f0000000140)=0xfa) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000002c0)={r7, 0x2}, &(0x7f0000000300)=0x8) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000680)={0x0, r2}) pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000340)="5a9d5507ee51a02cb48af64eb956f2c7554c51599376beca8c0e454f180555f2544ed7ad044becafe04a6e97f7001ca70975bb30078185aeb31fa4b25e35a4af8f852d42b1b2cb9dbed6b75b043d0fb5eb1e10892ca726d1adb503e6dc4a0a1e24864993e27b8caff2e06947282e18f35207287653a5c54e6abeaacb33919e6ca0c461e1cee94ef86515eaaba8ccb52c91f6c3dd5c3d68755e5a47e338ea785cdf17e4e15ac1042130c11d6fb49d1d6a2877dcb1700d0f355870f2d3c7aab62e1430a734808451a4260378c297d3c6ab0ebc76", 0xd3}, {&(0x7f0000000440)="eed16678da72a1a9cd7467ead37bf479f53370e87fdb954772611ec8e1f110e4e7868ba58fe4231dc617f72b721c1ce34404149887f59c0811518ef6e88a4cf286083cff89a6d477547aaa2709c417af5f1733281d664ba52ac43271e184fbee34553498d1daa85d4cc412aa", 0x6c}, {&(0x7f00000004c0)="23c9362b59486a25ec570fd2f42d9caf52e800c65597b01bb7047f29d13e8421ea550aed3e234c66ec8053bfb6e64f7ffa25456896d68aaf6a12815aa6ebebf1858601158c53be9958ea33ce23ec479601bcce612a021f8edb83c73395b25b4669736761672b2a0b875e0dc690ec06b3d0350ebd863a49925344f420c91373a810d1cff75afcfcccb5b180f3ba368885c970acaae597bb6d8511a0974f59a486359261a8c21dfd41e3273457521de95e3b8c85bce1a377", 0xb7}, {&(0x7f0000000580)="d923016bb1d25774177886ae7e7c18bb579ec4dbaa5b1a32a9aa2a81a499e60f1d4730eed1a60f8845111ec9279592167d6fe527ae768e0083ddb1bf7ae2ef6cc5eb5a4bbf9b23e5165dea7a48f520b19cb46ef28b325bd74cfa7e62ba29bef4970be32d9183a39da4882c7be08dffd40df6477e1e8fddb56014d5794d689c7ef2d6461404befc834511f448e04521a76b2f29641ba61cf9070cb0c9acf870f78e8fe35ea91a8a47b4876b1f00ba7a9219927c1fb4c3e4", 0xb7}], 0x4, 0x0) [ 771.886377] FAULT_INJECTION: forcing a failure. [ 771.886377] name failslab, interval 1, probability 0, space 0, times 0 [ 771.897669] CPU: 0 PID: 15026 Comm: syz-executor4 Not tainted 4.16.0+ #376 [ 771.904683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.914028] Call Trace: [ 771.916617] dump_stack+0x1a7/0x27d [ 771.920254] ? arch_local_irq_restore+0x53/0x53 [ 771.924935] should_fail+0x914/0xae0 [ 771.928655] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/04/02 19:59:29 executing program 1: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) r1 = syz_open_dev$audion(&(0x7f0000001080)='/dev/audio#\x00', 0x32, 0x80) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000010c0)={0x3, 0x1, 0x9, 0xfff, 0x10001}, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000001100)) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0xfffffffffffffead) 2018/04/02 19:59:29 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x4000, 0x54000a10, &(0x7f0000ffb000/0x4000)=nil) r1 = geteuid() fgetxattr(r0, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)=""/155, 0x9b) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, r1, r2, 0xff, 0x1256060) [ 771.933758] ? print_irqtrace_events+0x270/0x270 [ 771.938520] ? perf_trace_lock+0xd6/0x900 [ 771.942674] ? find_held_lock+0x35/0x1d0 [ 771.946738] ? __lock_is_held+0xb6/0x140 [ 771.950809] ? check_same_owner+0x320/0x320 [ 771.955136] ? rcu_note_context_switch+0x710/0x710 [ 771.960068] should_failslab+0xec/0x120 [ 771.964040] kmem_cache_alloc+0x47/0x760 [ 771.968098] ? shmem_reserve_inode+0xbf/0x100 [ 771.972596] ? lock_downgrade+0x980/0x980 [ 771.976742] ? print_irqtrace_events+0x270/0x270 [ 771.981497] ? shmem_destroy_callback+0xa0/0xa0 2018/04/02 19:59:29 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x406040, 0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000200)=0x84) sched_setaffinity(0x0, 0x8, &(0x7f00008aaff8)=0x8000000075) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x80, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000ebdff4)) r5 = socket$inet(0x2, 0xa, 0xe3d2) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@dev}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) close(r2) [ 771.986168] shmem_alloc_inode+0x1b/0x40 [ 771.990228] alloc_inode+0x65/0x180 [ 771.993862] new_inode_pseudo+0x69/0x190 [ 771.997924] ? prune_icache_sb+0x1a0/0x1a0 [ 772.002150] ? kasan_check_write+0x14/0x20 [ 772.006382] ? do_raw_spin_lock+0xc1/0x230 [ 772.010619] new_inode+0x1c/0x40 [ 772.013983] shmem_get_inode+0xe1/0x930 [ 772.017954] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 772.022967] ? shmem_fh_to_dentry+0x150/0x150 [ 772.027466] ? mark_held_locks+0xaf/0x100 [ 772.031699] ? __raw_spin_lock_init+0x1c/0x100 [ 772.036338] ? prandom_u32_state+0x13/0x180 [ 772.040662] ? prandom_bytes_state+0x89/0x120 [ 772.045146] ? __lockdep_init_map+0xe4/0x650 [ 772.049542] shmem_fill_super+0x6ae/0xa10 [ 772.053674] ? shmem_remount_fs+0x750/0x750 [ 772.057977] ? get_anon_bdev+0x2a0/0x2a0 [ 772.062021] ? sget+0xda/0x120 [ 772.065196] ? __get_fs_type+0x8a/0xc0 [ 772.069063] ? shmem_remount_fs+0x750/0x750 [ 772.073361] mount_nodev+0x59/0x100 [ 772.076970] shmem_mount+0x2c/0x40 [ 772.080490] mount_fs+0x66/0x2d0 [ 772.083842] vfs_kern_mount.part.26+0xc6/0x4a0 [ 772.088403] ? may_umount+0xa0/0xa0 [ 772.092011] ? _raw_read_unlock+0x22/0x30 [ 772.096144] ? __get_fs_type+0x8a/0xc0 [ 772.100018] do_mount+0xea4/0x2bb0 [ 772.103541] ? kasan_check_read+0x11/0x20 [ 772.107665] ? do_raw_spin_unlock+0x9e/0x310 [ 772.112059] ? copy_mount_string+0x40/0x40 [ 772.116273] ? rcu_pm_notify+0xc0/0xc0 [ 772.120145] ? copy_mount_options+0x5f/0x2e0 [ 772.124528] ? rcu_read_lock_sched_held+0x108/0x120 [ 772.129521] ? kmem_cache_alloc_trace+0x459/0x740 [ 772.134342] ? kasan_check_write+0x14/0x20 [ 772.138563] ? copy_mount_options+0x1f7/0x2e0 [ 772.143044] SyS_mount+0xab/0x120 [ 772.146472] ? copy_mnt_ns+0xb40/0xb40 [ 772.150338] do_syscall_64+0x281/0x940 [ 772.154204] ? vmalloc_sync_all+0x30/0x30 [ 772.158331] ? _raw_spin_unlock_irq+0x27/0x70 [ 772.162806] ? finish_task_switch+0x1c1/0x810 [ 772.167287] ? syscall_return_slowpath+0x550/0x550 [ 772.172195] ? syscall_return_slowpath+0x2ac/0x550 [ 772.177102] ? prepare_exit_to_usermode+0x350/0x350 [ 772.182098] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 772.187445] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 772.192278] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 772.197447] RIP: 0033:0x4552d9 [ 772.200612] RSP: 002b:00007f0aa515fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 772.208301] RAX: ffffffffffffffda RBX: 00007f0aa51606d4 RCX: 00000000004552d9 [ 772.215547] RDX: 0000000020001700 RSI: 00000000200016c0 RDI: 0000000020001680 [ 772.222792] RBP: 000000000072bea0 R08: 0000000020001740 R09: 0000000000000000 [ 772.230042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 772.237291] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000024 [ 772.261842] kasan: CONFIG_KASAN_INLINE enabled [ 772.266871] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 772.270437] kasan: CONFIG_KASAN_INLINE enabled [ 772.274359] general protection fault: 0000 [#1] SMP KASAN [ 772.278901] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 772.284393] Dumping ftrace buffer: [ 772.284397] (ftrace buffer empty) [ 772.284399] Modules linked in: [ 772.284408] CPU: 0 PID: 15045 Comm: syz-executor7 Not tainted 4.16.0+ #376 [ 772.284413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.284431] RIP: 0010:shmem_unused_huge_count+0x8e/0x100 [ 772.323812] RSP: 0018:ffff8801c0faf498 EFLAGS: 00010206 [ 772.329147] RAX: dffffc0000000000 RBX: 1ffff100381f5e94 RCX: ffffffff8193da77 [ 772.336388] RDX: 0000000000000021 RSI: ffff8801c0faf7b0 RDI: 0000000000000108 [ 772.343631] RBP: ffff8801c0faf518 R08: ffffed003ae9a2c1 R09: ffffed003ae9a2c1 [ 772.350872] R10: 0000000000000001 R11: ffffed003ae9a2c0 R12: 0000000000000000 [ 772.358114] R13: dffffc0000000000 R14: ffff8801913ce770 R15: 0000000000000000 [ 772.365358] FS: 0000000001a05940(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 772.373555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.379408] CR2: 00007f1655bd7330 CR3: 00000001d8d16003 CR4: 00000000001626f0 [ 772.386652] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 772.393894] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 772.401136] Call Trace: [ 772.403699] ? shmem_free_inode+0xc0/0xc0 [ 772.407824] ? _raw_spin_unlock+0x22/0x30 [ 772.411946] ? list_lru_count_one+0x163/0x1f0 [ 772.416415] ? shmem_free_inode+0xc0/0xc0 [ 772.420538] super_cache_count+0x96/0x280 [ 772.424660] shrink_slab.part.46+0x38b/0xe90 [ 772.429040] ? throttle_direct_reclaim+0x890/0x890 [ 772.433946] ? current_may_throttle+0x210/0x210 [ 772.438592] ? mem_cgroup_iter+0x2d0/0xc10 [ 772.442804] ? shrink_active_list+0x1600/0x1600 [ 772.447452] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 772.452180] ? print_irqtrace_events+0x270/0x270 [ 772.456919] shrink_slab+0x9d/0xb0 [ 772.460433] shrink_node+0x51e/0xf90 [ 772.464129] ? shrink_node_memcg+0x1690/0x1690 [ 772.468693] ? get_monotonic_coarse64+0x470/0x470 [ 772.473509] ? __queue_work+0x5b4/0x1230 [ 772.477541] ? lock_downgrade+0x980/0x980 [ 772.481662] ? kasan_check_read+0x11/0x20 [ 772.485785] do_try_to_free_pages+0x383/0x1020 [ 772.490350] ? rcu_pm_notify+0xc0/0xc0 [ 772.494209] ? shrink_node+0xf90/0xf90 [ 772.498073] try_to_free_mem_cgroup_pages+0x44d/0xb40 [ 772.503235] ? try_to_free_pages+0x9c0/0x9c0 [ 772.507619] ? cgroup_file_notify+0x5e/0x70 [ 772.511911] ? lock_downgrade+0x980/0x980 [ 772.516032] ? lock_release+0xa40/0xa40 [ 772.519979] ? kasan_check_read+0x11/0x20 [ 772.524100] ? do_raw_spin_unlock+0x9e/0x310 [ 772.528479] ? kasan_check_read+0x11/0x20 [ 772.532597] ? do_raw_spin_unlock+0x9e/0x310 [ 772.536978] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 772.541535] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 772.546614] ? trace_hardirqs_on+0xd/0x10 [ 772.550738] reclaim_high.constprop.64+0x1f0/0x370 [ 772.555640] ? mem_cgroup_from_task+0x1e0/0x1e0 [ 772.560281] ? mm_fault_error+0x2c0/0x2c0 [ 772.564404] ? kernel_write+0x120/0x120 [ 772.568351] ? exit_to_usermode_loop+0x8c/0x2f0 [ 772.572992] mem_cgroup_handle_over_high+0x8d/0x130 [ 772.577980] exit_to_usermode_loop+0x242/0x2f0 [ 772.582540] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 772.588049] ? syscall_return_slowpath+0x550/0x550 [ 772.592950] ? syscall_return_slowpath+0x2ac/0x550 [ 772.597854] prepare_exit_to_usermode+0x2d9/0x350 [ 772.602669] ? perf_trace_sys_enter+0xcb0/0xcb0 [ 772.607311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 772.612126] ? page_fault+0x2f/0x50 [ 772.615725] retint_user+0x8/0x18 [ 772.619151] RIP: 0033:0x408120 [ 772.622316] RSP: 002b:0000000000a3e970 EFLAGS: 00010287 [ 772.627649] RAX: 0000001b9bc20000 RBX: 00000000000005eb RCX: 000000000040f330 [ 772.634892] RDX: 0000001b9bc20004 RSI: 0000000000a3f930 RDI: 0000000000000000 [ 772.642134] RBP: 0000000000000013 R08: 0000000000000000 R09: 0000000001a05940 [ 772.649377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 772.656618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001380 [ 772.663865] Code: c1 e8 03 42 80 3c 28 00 75 6f 4d 8b a4 24 80 06 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 08 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 5e 48 8d 7d a8 48 ba 00 00 00 00 00 fc ff df 49 [ 772.682992] RIP: shmem_unused_huge_count+0x8e/0x100 RSP: ffff8801c0faf498 [ 772.689899] general protection fault: 0000 [#2] SMP KASAN [ 772.689946] ---[ end trace b0efecc26bf929c2 ]--- [ 772.695416] Dumping ftrace buffer: [ 772.695420] (ftrace buffer empty) [ 772.695423] Modules linked in: [ 772.695434] CPU: 1 PID: 15049 Comm: syz-executor0 Tainted: G D 4.16.0+ #376 [ 772.700166] Kernel panic - not syncing: Fatal exception [ 772.703667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.733437] RIP: 0010:shmem_unused_huge_count+0x8e/0x100 [ 772.738855] RSP: 0018:ffff8801c3e37498 EFLAGS: 00010206 [ 772.744190] RAX: dffffc0000000000 RBX: 1ffff100387c6e94 RCX: ffffffff8193da77 [ 772.751432] RDX: 0000000000000021 RSI: ffff8801c3e377b0 RDI: 0000000000000108 [ 772.758674] RBP: ffff8801c3e37518 R08: ffffed003ae9a2c1 R09: ffffed003ae9a2c1 [ 772.765915] R10: 0000000000000001 R11: ffffed003ae9a2c0 R12: 0000000000000000 [ 772.773159] R13: dffffc0000000000 R14: ffff8801913ce770 R15: 0000000000000000 [ 772.780404] FS: 0000000002741940(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 772.788600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.794452] CR2: 0000000000728030 CR3: 00000001c2f8f001 CR4: 00000000001626e0 [ 772.801699] DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 [ 772.808942] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 772.816186] Call Trace: [ 772.818749] ? shmem_free_inode+0xc0/0xc0 [ 772.822873] ? _raw_spin_unlock+0x22/0x30 [ 772.826993] ? list_lru_count_one+0x163/0x1f0 [ 772.831458] ? shmem_free_inode+0xc0/0xc0 [ 772.835579] super_cache_count+0x96/0x280 [ 772.839699] shrink_slab.part.46+0x38b/0xe90 [ 772.844081] ? throttle_direct_reclaim+0x890/0x890 [ 772.848988] ? current_may_throttle+0x210/0x210 [ 772.853636] ? mem_cgroup_iter+0x2d0/0xc10 [ 772.857843] ? shrink_active_list+0x1600/0x1600 [ 772.862484] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 772.867215] ? print_irqtrace_events+0x270/0x270 [ 772.872140] shrink_slab+0x9d/0xb0 [ 772.875655] shrink_node+0x51e/0xf90 [ 772.879346] ? shrink_node_memcg+0x1690/0x1690 [ 772.883902] ? get_monotonic_coarse64+0x470/0x470 [ 772.888719] ? kasan_check_read+0x11/0x20 [ 772.892840] ? do_raw_spin_unlock+0x9e/0x310 [ 772.897225] do_try_to_free_pages+0x383/0x1020 [ 772.901784] ? rcu_pm_notify+0xc0/0xc0 [ 772.905642] ? shrink_node+0xf90/0xf90 [ 772.909505] try_to_free_mem_cgroup_pages+0x44d/0xb40 [ 772.914667] ? try_to_free_pages+0x9c0/0x9c0 [ 772.919052] ? cgroup_file_notify+0x5e/0x70 [ 772.923348] ? lock_downgrade+0x980/0x980 [ 772.927465] ? lock_release+0xa40/0xa40 [ 772.931412] ? kasan_check_read+0x11/0x20 [ 772.935530] ? do_raw_spin_unlock+0x9e/0x310 [ 772.939913] ? kasan_check_read+0x11/0x20 [ 772.944030] ? do_raw_spin_unlock+0x9e/0x310 [ 772.948411] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 772.952963] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 772.958038] ? trace_hardirqs_on+0xd/0x10 [ 772.962163] reclaim_high.constprop.64+0x1f0/0x370 [ 772.967067] ? mem_cgroup_from_task+0x1e0/0x1e0 [ 772.971711] ? mm_fault_error+0x2c0/0x2c0 [ 772.975832] ? SyS_clock_settime+0x190/0x190 [ 772.980214] ? exit_to_usermode_loop+0x8c/0x2f0 [ 772.984856] mem_cgroup_handle_over_high+0x8d/0x130 [ 772.989847] exit_to_usermode_loop+0x242/0x2f0 [ 772.994403] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 772.999914] ? syscall_return_slowpath+0x550/0x550 [ 773.004816] ? syscall_return_slowpath+0x2ac/0x550 [ 773.009720] prepare_exit_to_usermode+0x2d9/0x350 [ 773.014533] ? perf_trace_sys_enter+0xcb0/0xcb0 [ 773.019176] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 773.023995] ? page_fault+0x2f/0x50 [ 773.027594] retint_user+0x8/0x18 [ 773.031018] RIP: 0033:0x43c6e1 [ 773.034189] RSP: 002b:0000000000a3e978 EFLAGS: 00010202 [ 773.039526] RAX: 00000000201f0000 RBX: 0000000000000000 RCX: 000000000000642f [ 773.046768] RDX: 000000000000000a RSI: 0000000000730020 RDI: 00000000201f0000 [ 773.054011] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000002741940 [ 773.061255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.068498] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000bcbc3 [ 773.075744] Code: c1 e8 03 42 80 3c 28 00 75 6f 4d 8b a4 24 80 06 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 08 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 5e 48 8d 7d a8 48 ba 00 00 00 00 00 fc ff df 49 [ 773.094866] RIP: shmem_unused_huge_count+0x8e/0x100 RSP: ffff8801c3e37498 [ 773.102249] Dumping ftrace buffer: [ 773.105767] (ftrace buffer empty) [ 773.109447] Kernel Offset: disabled [ 773.113045] Rebooting in 86400 seconds..