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", 0x1000}, {&(0x7f0000000f40)="65d492be33034e9bc28608b37392fc9a40dd72b8bd8fbce4f6f99dc8d468e0eeeb938fef3d1e807f7cecba6c028bab2e7dbfce120cb7cafd9fe5fc8ee2af5c4601d69b9b947e0f3f44f9f1ea7319eafbcf9c8111e1dbd1acfc9f8e8e48e8133ebc5f7011f0157f9a7cf9fb364ffd7d76c2dd37bc575a5e8dfaf6bb1c9b308774b851fb9634768d7f4a4b2f8525550e568fa115bc5a2f77cbcbf04b00c8ef92be9305cbf43e49e2310442f4091a3b2533691df40e4349edf56f1f721441f4f9f75fd0463a616fdfe082449797180b202af8c4d06ab7ad3d1c2590d47ed8e35bf70d120f62f403d7dd5ae97e5e6affbe", 0xef}, {&(0x7f0000001040)="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", 0xfa}], 0x3, 0x0, 0x0, 0x4000080}], 0x4, 0x40) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r14 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) linkat(r14, &(0x7f0000000180)='./file0\x00', r14, &(0x7f0000000280)='./file0\x00', 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x8001000000000002, 0x0) r15 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000240)=0x4) pwritev(r15, &(0x7f0000001880)=[{&(0x7f0000001300)="c722e682e5e10a7baa4e3d7ef3be3c14e49e1d09d223511305f4973d5e0bec704f29eaaeb03e838b5d824fa6e456943f05ee1cd631bdfca789d1c2b63b2f6dacf757036338f7409cbee109287cad21ab415353819730794214acfde5be38a84488b7c90c10f223bddf3811bab2f1d32b01457eaaffd2e0a67950521cf5abd63998b39672947dd3c2022c1ddfd78bcd8b8bf2ee01c7e16eb63d9fa74c18caaaabb4b6df28da09907d4547d0813cdb4ed700", 0xb1}, {&(0x7f00000014c0)="12f6d8c91392b57f695b325a032e6d8abd1876a3da651a8087b4aaa3697c36cf2954d7df8f8f125d85ecfed060d6b25a3efd26237988ae7d30624413bb86b0f646fcc47980205a472aee", 0x4a}, {&(0x7f0000001600)="f343", 0x2}, {&(0x7f00000016c0)="44e282b22864e3fff4fbf61101aaa9bb18e923f3c9b1ac6acf44e177050f7a8551a1ad75dd1ae72cddd417dc326bcd377b2eb494f47097b03534a69aad8b4ba662a2229aa6762474b603c3c2f5ea2aa67410aa67bb3d08de718238d6725066e2c8ccebb586e1b5138f4b38de3c2903df0df17aefa6a48d68e27256", 0x7b}], 0x4, 0x0) 2018/06/05 23:26:22 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:22 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) linkat(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x8001000000000002, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) pwritev(r1, &(0x7f0000001880)=[{&(0x7f0000001300)="c722e682e5e10a7baa4e3d7ef3be3c14e49e1d09d223511305f4973d5e0bec704f29eaaeb03e838b5d824fa6e456943f05ee1cd631bdfca789d1c2b63b2f6dacf757036338f7409cbee109287cad21ab415353819730794214acfde5be38a84488b7c90c10f223bddf3811bab2f1d32b01457eaaffd2e0a67950521cf5abd63998b39672947dd3c2022c1ddfd78bcd8b8bf2ee01c7e16eb63d9fa74c18caaaabb4b6df28da09907d4547d0813cdb4ed700", 0xb1}, {&(0x7f00000014c0)="12f6d8c91392b57f695b325a032e6d8abd1876a3da651a8087b4aaa3697c36cf2954d7df8f8f125d85ecfed060d6b25a3efd26237988ae7d30624413bb86b0f646fcc47980205a472aee", 0x4a}, {&(0x7f0000001600)="f343", 0x2}, {&(0x7f00000016c0)="44e282b22864e3fff4fbf61101aaa9bb18e923f3c9b1ac6acf44e177050f7a8551a1ad75dd1ae72cddd417dc326bcd377b2eb494f47097b03534a69aad8b4ba662a2229aa6762474b603c3c2f5ea2aa67410aa67bb3d08de718238d6725066e2c8ccebb586e1b5138f4b38de3c2903df0df17aefa6a48d68e27256", 0x7b}], 0x4, 0x0) 2018/06/05 23:26:22 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:23 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x49000000000000]}, 0x6) 2018/06/05 23:26:23 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:23 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:23 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:23 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)='B', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:24 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:24 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:24 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:24 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x20e4150000000000]}, 0x6) 2018/06/05 23:26:24 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:24 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:24 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:24 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:24 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:25 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:25 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:25 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xc0ffffff00000000]}, 0x6) 2018/06/05 23:26:25 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:25 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:25 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)='B', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e6673f6", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:26 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:26 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:26 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:26 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x11]}, 0x6) 2018/06/05 23:26:26 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:26 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:26 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e66730e", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:27 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:27 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:27 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:27 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:27 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:27 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) [ 2065.484516] device bridge_slave_1 left promiscuous mode [ 2065.490145] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.570330] device bridge_slave_0 left promiscuous mode [ 2065.575975] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.926342] team0 (unregistering): Port device team_slave_1 removed [ 2065.948242] team0 (unregistering): Port device team_slave_0 removed [ 2065.978350] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2066.017960] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2066.055355] bond0 (unregistering): Released all slaves 2018/06/05 23:26:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18ee86609d49e4fdf4bcaeec54a5f4e8f3be97b0f96a73f6e00ac89f0cbcc8e1f8fb7380a8", 0x69, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:28 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e6673ff", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:28 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:28 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:28 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:28 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x8000000000000000]}, 0x6) 2018/06/05 23:26:28 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 2066.307279] IPVS: ftp: loaded support on port[0] = 21 2018/06/05 23:26:28 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:29 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:29 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:29 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x9405000000000000]}, 0x6) 2018/06/05 23:26:29 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e6673ff", 0x0, &(0x7f000000a000)) [ 2068.184571] bridge0: port 1(bridge_slave_0) entered blocking state [ 2068.191078] bridge0: port 1(bridge_slave_0) entered disabled state [ 2068.198518] device bridge_slave_0 entered promiscuous mode [ 2068.238321] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.244733] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.252159] device bridge_slave_1 entered promiscuous mode [ 2068.289611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2068.327145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2068.465753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2068.498371] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2068.654837] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2068.662237] team0: Port device team_slave_0 added [ 2068.688317] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2068.695452] team0: Port device team_slave_1 added [ 2068.720170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2068.745794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2068.772405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2068.799149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2069.023097] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.029486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2069.036164] bridge0: port 1(bridge_slave_0) entered blocking state [ 2069.042525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2069.049748] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2069.838181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2069.915972] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2069.922165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2069.998755] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2070.004932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2070.012137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2070.084579] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:26:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)='B', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:32 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:32 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/06/05 23:26:32 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x6000000]}, 0x6) 2018/06/05 23:26:32 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:32 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:32 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:32 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:33 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:33 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:33 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:33 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:33 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:34 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe8030000]}, 0x6) 2018/06/05 23:26:34 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:34 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfsl', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)='B', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:35 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:35 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:35 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:35 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:35 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x49]}, 0x6) 2018/06/05 23:26:35 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:35 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:35 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:35 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:35 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e66738f", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:35 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:35 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:35 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)='B', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:36 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1f4]}, 0x6) 2018/06/05 23:26:36 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:36 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:36 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:36 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:36 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:36 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:36 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:36 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:36 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:36 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:36 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:36 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:36 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:36 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b543", 0x35, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:37 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:37 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:37 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/06/05 23:26:37 executing program 7: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) 2018/06/05 23:26:37 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:37 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:37 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x15e40f]}, 0x6) 2018/06/05 23:26:37 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667301", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:38 executing program 7: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) 2018/06/05 23:26:38 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:38 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e6673ba", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:38 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x15e420]}, 0x6) 2018/06/05 23:26:38 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667392", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:38 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:38 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e6673fe", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b543", 0x35, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:39 executing program 7: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) 2018/06/05 23:26:39 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:39 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e6673f4", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:39 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xa00000000000000]}, 0x6) 2018/06/05 23:26:39 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:39 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:39 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667389", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:39 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:39 executing program 7: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:40 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e6673f5", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:40 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:40 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:40 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:40 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:41 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b543", 0x35, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:41 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:41 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xffffffff00000000]}, 0x6) 2018/06/05 23:26:41 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:41 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:41 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:41 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:26:41 executing program 1: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:42 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:42 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:42 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:42 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xf401]}, 0x6) 2018/06/05 23:26:42 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:42 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:42 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:42 executing program 5: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000200)={0xf20, 0x0, 0x5}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="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", 0xd01, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18ee86609d49e4fdf4bcae", 0x4f, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:44 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e6673ff", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:44 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:44 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/06/05 23:26:44 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:44 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:44 executing program 5: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000200)={0xf20, 0x0, 0x5}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18ee86609d49e4fdf4bcaeec54a5f4e8f3be97b0f96a73f6e00ac89f0cbcc8e1f8fb7380a8772b69d829a458c166acc6ad4df97716d8dcceaf324965a5bf53e9812a19fcc7b8886a6879f8253a4b1414b204126ad91f400dfe1091bbf7d9fb5f2741bbb2d6806b0349ec2c6315ad3c6b9a17d3bdf8a30587fa9bce0e37d796fcc6304a484e6b744484056e79163620615350b24ffb941286ad725a83ee44bb68e35935e696030e78962ca5ea4ed32cdcf4fd0bced743008557d582035fd57588b47ec9a2c895b4205d473c11d440f7dd4208a22838b71e25774c22f76ebb4e449e59ab675bf800f8cd8678b14bf85ed4f39c2debc089914c4c766499849826d24fbcfbd078f836c717cd70bc6b3426e433d3bd3314bdae15f792f6cae19b569e3e569426300157c950637f389e05826ba8209dee509c4424f8d3eabd235fd0d8c43e9c50893f6a16e4c793fd6659def43ffeaa45409fc20079b761b71db4ca1b79a78ccefb7dc222142a41693087f7c6557935422a2d0b5dd39d8a1a1d59a01047aaed6ab4e6a94d4022c4ed579090dd4e54a48b22268c55f3d652a1b491f63ae73ada9bd45effb0eebd330daf9e2be2fc560a5e42ac876ef21ac6184363dfb5e61333384876362707b8bb6e6b9d540d8c8e2053837f1e857001a95d9f269f350b84ed78740048bec56191baff3637254309fba6c367005ad527895f633e00b28fef2b61d316bc7479eaa753a128ca49950935895c69eaf4b1e1d6b2bdcf9affb75bceffab5a84dbbbc6f1916820c8630a30a8b0bdd6448bd9794d1de7c01cc3cc9438ddb2c72ee248019f1e50c41414156a2048090dc01aa7ad749deaee74f7e3c65f478e259db7bc27a4b55c119dbdda115886386e74a32cdcc94d25f969f0c1c8f9ddba5697e38777f54c80ca1f4e5d4022034290b5597f8a8869acaa7a120868516b43aa91f5ceecfb8decc8a6a83ffaa5b3bb156bfec080782ae6aafd5223b709e1deaeafd15b1f7edcc67fcf79cdb9d12cdc4dfe31c2d5c7f346019a1b3dd7d76ebff7c4a38bde7bbf93bf87f386bed3e80c8687f53120e480ffbb9e1b7f78f091a9d2e097877b12d833901bf4af9abd02a4d39b144afbed072816b17fc75facfd1e1089473ceef2aaf3b4addd07598406b7ca7ffc28ddbe5f4cb66467bdb69804a9becf1112522a981546940f60fa7ff86643147b59ad9b24b7779764d0113a98413fd5d7e81869dfd210d2a7cba1f973053d3b9449b3f18550b3b0db136e3789879038c407ac146853a86411105fb74979fe7b8fb6713518ab50a3e38dfa91ab43ada699201287eec28b9fba11b2ad920b06aa0aac30a31942b7e32050ccc8a0317e377f2802e9a9b2de7152cb58fa340ee90c826ee6399b3567901624ba248512869b3f5486c21e84d6dfe970e162f9954c4cb779de802f5189fa6f2d605aa8460c3676b2642e941e2a9d9a718ad6333d3140d3b14d93553c13460208e3d30579dbfaa2cc066a59a57d233d0ee8b2307d3d96f949e54b91d093eab961f5d2f807ff89455db998bd9584dca770b85c5b6ba918a5399cb18ed715f824fe8b5b520f23b88d6501003c4c81c12d6e069a96022b3487b8becb27ae6c10890399a1a5cd8919f65b3b445aa51917ba0bbc1ff560cb1b113d54c9fc286f6b31a6493d6a11a8e0c490569085ddc065b94ead439ab903c74e4694b072dc3683838070fa3cb7a8bd673150e5002adf74bd31a952010fa521645cf24f0fa21bcf331bc535b48aa6cd93fa6432ba6654b5ee5647be6715c7df1bc9dcf06fc9fee8e851c24da5a326411ba3756b6df7f7323a69d21415bdb20af7f62b8f153f1c7dc0527b6bb4e1ed029cf3302a59d50b8d13bbd90fb053770dbd7893fab05b3f996115e557722741e022d8c4a4df515886707734dddf7e8ff4ba6642399779349f5b1f614a062d4c409f204c74e41ff20aa8bebc8e0026aa38038953082952fd00898c1b04b8a78b737075ab69bedc5c4a17e287a0586f4d8641d3199a90100980d470a3c0c8b32fdd2e6468ecdf43bd7ecb2b2542a4ae25233a712b7a47fd752436ca894684d98edaaf66b0748282afde4e2479e3ff7af23d071a23d636b4dabb882c6932d991476a2910715aa3b7062ddf92d30eafb2063583052f7cdd0b093842e8e7f20114bb61002d51cbb2fb69b8f99aff5459ac4e31ee4b478eae24db17820631734594f43232f9dfd441f4b06f48194caf7a9eed6f71822ccb5fc06622b1cee05e2236efb761433bb27e873a28094377deecbe74f85a0058f3f6684cc7b4d1d1dc24ebb505a71e94d658c116ce11e5f69487376e1ff2edb4a2b1f766f4138b92c208dc204d0509f4acada7763b0e723f4b81f53e84bc56c13d3952c715ab0db580a757f892e3fa6bd73014edb1f18dcdff2c71ccd417cb15f7c4f43be17d57877851c766b2893b7267c7c9bfa2933c642048b00d15936e32d723ef9238e1e8c51eb18993e998425f7d7b50cb95c7444b5e92a5ad59a87dda6e82122338d329d03d205893cac5d995b55a9d70c286f02b82ac04dc0aa795dec3a8e97eec3869953c0c0269b6633e3148b98d9899492c583282ebb6588e2448ef775dc3e38b0e4f0039206b816ad5b5e632b4765479f98c4774ea160a803e33ab7b7d6f227acc901d8213008f9ccf6cc6ebee9a863086e5e79ad7f6acfcd2aea915753ed7218c50ab76743a0b1222170d77bc847ab0ec9b431680e9ddc59803a507ed40d750f4c9b273c2d5615d81faa08e92d9388ce0ea94ff374cb2f92534035064b448d153d8d32d78b26cf56340fa17b6ffe3a03ae6889ffc006a3cdd439cbac5ca482fae401dc7d3237e8b3ed7f0b47f39aa1b69891d8dfe0fd4bdb2ddef8e85d1a0066a041312c283dcbd106ab9b13f91ef63f96b74eb457ccd3cf154dcb3d0c2a78c1037af5b3bdf8b705809614657c7cd11b24d94b6ff3f71d0861567fc944920c5b25f32c3ca55df69007feca67e8ba3755e1cffb24055ef869a5292f13becb93c61eb8d5b304b1738d209e6a6e43569bd7920eac9d144eedae45e1aeac6061d8d61fa2b7b8e0928a5dba7f09dc5e487f06d3cca4963e4ab8e3fee77cedddf3648904bbd7905374b21014b822c42154a1ac8d3b671e7bb3061b675f108db598d095ebd0f80b43cf4d18dfc8dc46733c52ec7e75f0b9b98a45aa905f1f27dab126f32fcee64bf4905743089f1433000d9ba6ffac2120658e0d44c7b10437b94e5b7d0e931758691f3cf29890e047b37c22ed36a3085de979aa7d3082eaeec200e46ea72bc3c52f80608af591ba5727356e4f1307f5f695172faa2302c50d890a8b6d6d1fe1e49e8d8b42f0490b8c82a10651111f2d87023fe5d446e01fecab65fcc469c3d58450a1bc81b4fad3062fe73a967e39892373af3ac1696b2cf25d16ed352b52cec3387a72d0b2c18a883604f4ae6947d1631e7984deecb1f4d61a86f95406e76ebb4e54f814326202b4431582fd4d8bfa8900fb88955acc6ff9c659016abe555ca71765700ce7c60dfa3618914ef4557e6766038c67f371102033e54527f725ed445a7aac772b77dae77f75cff0a75126f4e9d0f9e78d591de840851cd84216d84e867b661cfed0aa21cb421c5a265e868c2388a19042cda73b9c4081606a797a9374a8cfee7ce1fe5aed0c0492d7211b93cbc35e34c4b13e170bba205250ef75383e8dcb1d193e4ab8a83ab123ff45ffc2d1ea58a921f92168968307a6a2523b45b4ce10fc7fd1f418fb9195937ba8883d513460c1df7037df3098b83e1173fd371c3ab4bb577dc0996f3e22121e76b2b2ca5572e427329adf1a42502a91857476c105198ccda729dd9041eceb23f21b640a36be9d3d6185c17fd6eb91b6133eff3a8488a933c53ab340623093795af270f60513c5ee86627e5c1eeeb0e1ac1e6f09f06146e6fd5d6e68b2fc28e4abbc2b9f135eab5e9855b8dae3fed4bc8ef18a699bf10e9fa02d4f4ce221aa03b92554018c96cd7c0f6e5fca9bd8083b1e59da4b60a181591f141a67ef2d0fe66b23341dca53603d9c09d91c13ff3451bd7d1024130656d3d8f44e1497612ffe721feac63bc292de2d76040703a7cfc706ae58d21edce14a1240e4d4c9604e59aaa024cf5f4b517f6ac0c629e0004cbf4f6da7bdb1bf566399d76f049ed7cb36176a924e3bd4e7be1c8b59a3fa9b9f21f05b51304598732d32bf1d7010937139bf1c86b6a6d9506ced93c5338d0646bef9766c05c6c863980067a5a8ba7d59db4f36b2ae6545e21450b787ca3d976be6382e2aeb68d5c687791ea87340bd57f8b31f2ce88ecf5df8dbd367f56216f30043570a708727810d614ca8de6de14c50a7180285e2315bdb0f99e3984e5ce00f60504cb981897e8379f994786bdadc5da985cfedd7c894f2693f480fbd171425c3af8daeca417ed81873895edc04a69588a256e12dfa93bff1b134d3316fb336d6c096563c58c163785f3146135dde1e4d82c1e183af1faef14ddd255629cab7c44e24dd9f4dc8337dc5adc23e72d77ddad3397b1bf67417a1a0d32934e128babb4fa9101958ee1608d53394551e9ae511c33d3b98feca7c5e9b45a", 0xd01, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:44 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe803]}, 0x6) 2018/06/05 23:26:44 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e66739c", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:44 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:44 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/06/05 23:26:44 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:44 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfsL', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:44 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:44 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:44 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b543", 0x35, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:45 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:45 executing program 5: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000200)={0xf20, 0x0, 0x5}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="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", 0xd01, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:45 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1010000]}, 0x6) 2018/06/05 23:26:45 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:45 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:45 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:45 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/06/05 23:26:45 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:45 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:45 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:45 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:46 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:46 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:46 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:46 executing program 5: 2018/06/05 23:26:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b543", 0x35, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:46 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:46 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xf401000000000000]}, 0x6) 2018/06/05 23:26:46 executing program 5: 2018/06/05 23:26:46 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:46 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/06/05 23:26:46 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:46 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:46 executing program 5: 2018/06/05 23:26:46 executing program 5: 2018/06/05 23:26:47 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:47 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/06/05 23:26:47 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:47 executing program 5: 2018/06/05 23:26:47 executing program 5: 2018/06/05 23:26:47 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b543", 0x35, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:47 executing program 5: 2018/06/05 23:26:47 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:47 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x300000000000000]}, 0x6) 2018/06/05 23:26:47 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:47 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/06/05 23:26:47 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:47 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:47 executing program 5: 2018/06/05 23:26:48 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:48 executing program 5: 2018/06/05 23:26:48 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\t', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:48 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:48 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:48 executing program 5: 2018/06/05 23:26:48 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed", 0x42, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:48 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667303", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:48 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:48 executing program 5: 2018/06/05 23:26:48 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:48 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x490000]}, 0x6) 2018/06/05 23:26:48 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:48 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:48 executing program 5: 2018/06/05 23:26:48 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfsh', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:49 executing program 5: 2018/06/05 23:26:49 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:49 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:49 executing program 5: 2018/06/05 23:26:49 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:49 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed", 0x42, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:50 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:50 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:50 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:50 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:50 executing program 5: 2018/06/05 23:26:50 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:50 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x9405]}, 0x6) 2018/06/05 23:26:50 executing program 5: 2018/06/05 23:26:50 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:50 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:50 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:51 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:51 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:51 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:51 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed", 0x42, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:51 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:51 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:51 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:51 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:51 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x3]}, 0x6) 2018/06/05 23:26:51 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:51 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:52 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:52 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:52 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e6673ff", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:52 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:52 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:52 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:53 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x15e40e]}, 0x6) 2018/06/05 23:26:53 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18ee86609d", 0x49, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:54 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:54 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4002000000000000]}, 0x6) 2018/06/05 23:26:54 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x8001000000000002, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x100) pwritev(r0, &(0x7f0000001880)=[{&(0x7f0000001400)="1c", 0x1}, {&(0x7f0000001540)="072f7002f685aa245099e1a525690134ff85b7ca07e14e794762835f5ea9ca0b5e4fdc0827e50bbe4732deb93fd50e06bb5509cffccb6fbed6dbe8b8646de45ea48e6d8b6d6607939da4602c6e16edf2d0773b7dab4d5b68aa983bb7104e3a246e4c13bcfaed0f1161cb534c571dceba82cd401fe9dc9b141204", 0x7a}, {&(0x7f0000001640)}, {&(0x7f0000001780)}], 0x4, 0x0) 2018/06/05 23:26:54 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:54 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:54 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:54 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:54 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:54 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:54 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:54 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:54 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:54 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:54 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:55 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x2000000]}, 0x6) 2018/06/05 23:26:56 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x10000000]}, 0x6) 2018/06/05 23:26:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed87", 0x43, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:56 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:56 executing program 5: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000200)={0xf20, 0x0, 0x5}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18ee86609d49e4fdf4bcaeec54a5f4e8f3be97b0f96a73f6e00ac89f0cbcc8e1f8fb7380a8772b69d829a458c166acc6ad4df97716d8dcceaf324965a5bf53e9812a19fcc7b8886a6879f8253a4b1414b204126ad91f400dfe1091bbf7d9fb5f2741bbb2d6806b0349ec2c6315ad3c6b9a17d3bdf8a30587fa9bce0e37d796fcc6304a484e6b744484056e79163620615350b24ffb941286ad725a83ee44bb68e35935e696030e78962ca5ea4ed32cdcf4fd0bced743008557d582035fd57588b47ec9a2c895b4205d473c11d440f7dd4208a22838b71e25774c22f76ebb4e449e59ab675bf800f8cd8678b14bf85ed4f39c2debc089914c4c766499849826d24fbcfbd078f836c717cd70bc6b3426e433d3bd3314bdae15f792f6cae19b569e3e569426300157c950637f389e05826ba8209dee509c4424f8d3eabd235fd0d8c43e9c50893f6a16e4c793fd6659def43ffeaa45409fc20079b761b71db4ca1b79a78ccefb7dc222142a41693087f7c6557935422a2d0b5dd39d8a1a1d59a01047aaed6ab4e6a94d4022c4ed579090dd4e54a48b22268c55f3d652a1b491f63ae73ada9bd45effb0eebd330daf9e2be2fc560a5e42ac876ef21ac6184363dfb5e61333384876362707b8bb6e6b9d540d8c8e2053837f1e857001a95d9f269f350b84ed78740048bec56191baff3637254309fba6c367005ad527895f633e00b28fef2b61d316bc7479eaa753a128ca49950935895c69eaf4b1e1d6b2bdcf9affb75bceffab5a84dbbbc6f1916820c8630a30a8b0bdd6448bd9794d1de7c01cc3cc9438ddb2c72ee248019f1e50c41414156a2048090dc01aa7ad749deaee74f7e3c65f478e259db7bc27a4b55c119dbdda115886386e74a32cdcc94d25f969f0c1c8f9ddba5697e38777f54c80ca1f4e5d4022034290b5597f8a8869acaa7a120868516b43aa91f5ceecfb8decc8a6a83ffaa5b3bb156bfec080782ae6aafd5223b709e1deaeafd15b1f7edcc67fcf79cdb9d12cdc4dfe31c2d5c7f346019a1b3dd7d76ebff7c4a38bde7bbf93bf87f386bed3e80c8687f53120e480ffbb9e1b7f78f091a9d2e097877b12d833901bf4af9abd02a4d39b144afbed072816b17fc75facfd1e1089473ceef2aaf3b4addd07598406b7ca7ffc28ddbe5f4cb66467bdb69804a9becf1112522a981546940f60fa7ff86643147b59ad9b24b7779764d0113a98413fd5d7e81869dfd210d2a7cba1f973053d3b9449b3f18550b3b0db136e3789879038c407ac146853a86411105fb74979fe7b8fb6713518ab50a3e38dfa91ab43ada699201287eec28b9fba11b2ad920b06aa0aac30a31942b7e32050ccc8a0317e377f2802e9a9b2de7152cb58fa340ee90c826ee6399b3567901624ba248512869b3f5486c21e84d6dfe970e162f9954c4cb779de802f5189fa6f2d605aa8460c3676b2642e941e2a9d9a718ad6333d3140d3b14d93553c13460208e3d30579dbfaa2cc066a59a57d233d0ee8b2307d3d96f949e54b91d093eab961f5d2f807ff89455db998bd9584dca770b85c5b6ba918a5399cb18ed715f824fe8b5b520f23b88d6501003c4c81c12d6e069a96022b3487b8becb27ae6c10890399a1a5cd8919f65b3b445aa51917ba0bbc1ff560cb1b113d54c9fc286f6b31a6493d6a11a8e0c490569085ddc065b94ead439ab903c74e4694b072dc3683838070fa3cb7a8bd673150e5002adf74bd31a952010fa521645cf24f0fa21bcf331bc535b48aa6cd93fa6432ba6654b5ee5647be6715c7df1bc9dcf06fc9fee8e851c24da5a326411ba3756b6df7f7323a69d21415bdb20af7f62b8f153f1c7dc0527b6bb4e1ed029cf3302a59d50b8d13bbd90fb053770dbd7893fab05b3f996115e557722741e022d8c4a4df515886707734dddf7e8ff4ba6642399779349f5b1f614a062d4c409f204c74e41ff20aa8bebc8e0026aa38038953082952fd00898c1b04b8a78b737075ab69bedc5c4a17e287a0586f4d8641d3199a90100980d470a3c0c8b32fdd2e6468ecdf43bd7ecb2b2542a4ae25233a712b7a47fd752436ca894684d98edaaf66b0748282afde4e2479e3ff7af23d071a23d636b4dabb882c6932d991476a2910715aa3b7062ddf92d30eafb2063583052f7cdd0b093842e8e7f20114bb61002d51cbb2fb69b8f99aff5459ac4e31ee4b478eae24db17820631734594f43232f9dfd441f4b06f48194caf7a9eed6f71822ccb5fc06622b1cee05e2236efb761433bb27e873a28094377deecbe74f85a0058f3f6684cc7b4d1d1dc24ebb505a71e94d658c116ce11e5f69487376e1ff2edb4a2b1f766f4138b92c208dc204d0509f4acada7763b0e723f4b81f53e84bc56c13d3952c715ab0db580a757f892e3fa6bd73014edb1f18dcdff2c71ccd417cb15f7c4f43be17d57877851c766b2893b7267c7c9bfa2933c642048b00d15936e32d723ef9238e1e8c51eb18993e998425f7d7b50cb95c7444b5e92a5ad59a87dda6e82122338d329d03d205893cac5d995b55a9d70c286f02b82ac04dc0aa795dec3a8e97eec3869953c0c0269b6633e3148b98d9899492c583282ebb6588e2448ef775dc3e38b0e4f0039206b816ad5b5e632b4765479f98c4774ea160a803e33ab7b7d6f227acc901d8213008f9ccf6cc6ebee9a863086e5e79ad7f6acfcd2aea915753ed7218c50ab76743a0b1222170d77bc847ab0ec9b431680e9ddc59803a507ed40d750f4c9b273c2d5615d81faa08e92d9388ce0ea94ff374cb2f92534035064b448d153d8d32d78b26cf56340fa17b6ffe3a03ae6889ffc006a3cdd439cbac5ca482fae401dc7d3237e8b3ed7f0b47f39aa1b69891d8dfe0fd4bdb2ddef8e85d1a0066a041312c283dcbd106ab9b13f91ef63f96b74eb457ccd3cf154dcb3d0c2a78c1037af5b3bdf8b705809614657c7cd11b24d94b6ff3f71d0861567fc944920c5b25f32c3ca55df69007feca67e8ba3755e1cffb24055ef869a5292f13becb93c61eb8d5b304b1738d209e6a6e43569bd7920eac9d144eedae45e1aeac6061d8d61fa2b7b8e0928a5dba7f09dc5e487f06d3cca4963e4ab8e3fee77cedddf3648904bbd7905374b21014b822c42154a1ac8d3b671e7bb3061b675f108db598d095ebd0f80b43cf4d18dfc8dc46733c52ec7e75f0b9b98a45aa905f1f27dab126f32fcee64bf4905743089f1433000d9ba6ffac2120658e0d44c7b10437b94e5b7d0e931758691f3cf29890e047b37c22ed36a3085de979aa7d3082eaeec200e46ea72bc3c52f80608af591ba5727356e4f1307f5f695172faa2302c50d890a8b6d6d1fe1e49e8d8b42f0490b8c82a10651111f2d87023fe5d446e01fecab65fcc469c3d58450a1bc81b4fad3062fe73a967e39892373af3ac1696b2cf25d16ed352b52cec3387a72d0b2c18a883604f4ae6947d1631e7984deecb1f4d61a86f95406e76ebb4e54f814326202b4431582fd4d8bfa8900fb88955acc6ff9c659016abe555ca71765700ce7c60dfa3618914ef4557e6766038c67f371102033e54527f725ed445a7aac772b77dae77f75cff0a75126f4e9d0f9e78d591de840851cd84216d84e867b661cfed0aa21cb421c5a265e868c2388a19042cda73b9c4081606a797a9374a8cfee7ce1fe5aed0c0492d7211b93cbc35e34c4b13e170bba205250ef75383e8dcb1d193e4ab8a83ab123ff45ffc2d1ea58a921f92168968307a6a2523b45b4ce10fc7fd1f418fb9195937ba8883d513460c1df7037df3098b83e1173fd371c3ab4bb577dc0996f3e22121e76b2b2ca5572e427329adf1a42502a91857476c105198ccda729dd9041eceb23f21b640a36be9d3d6185c17fd6eb91b6133eff3a8488a933c53ab340623093795af270f60513c5ee86627e5c1eeeb0e1ac1e6f09f06146e6fd5d6e68b2fc28e4abbc2b9f135eab5e9855b8dae3fed4bc8ef18a699bf10e9fa02d4f4ce221aa03b92554018c96cd7c0f6e5fca9bd8083b1e59da4b60a181591f141a67ef2d0fe66b23341dca53603d9c09d91c13ff3451bd7d1024130656d3d8f44e1497612ffe721feac63bc292de2d76040703a7cfc706ae58d21edce14a1240e4d4c9604e59aaa024cf5f4b517f6ac0c629e0004cbf4f6da7bdb1bf566399d76f049ed7cb36176a924e3bd4e7be1c8b59a3fa9b9f21f05b51304598732d32bf1d7010937139bf1c86b6a6d9506ced93c5338d0646bef9766c05c6c863980067a5a8ba7d59db4f36b2ae6545e21450b787ca3d976be6382e2aeb68d5c687791ea87340bd57f8b31f2ce88ecf5df8dbd367f56216f30043570a708727810d614ca8de6de14c50a7180285e2315bdb0f99e3984e5ce00f60504cb981897e8379f994786bdadc5da985cfedd7c894f2693f480fbd171425c3af8daeca417ed81873895edc04a69588a256e12dfa93bff1b134d3316fb336d6c096563c58c163785f3146135dde1e4d82c1e183af1faef14ddd255629cab7c44e24dd9f4dc8337dc5adc23e72d77ddad3397b1bf67417a1a0d32934e128babb4fa9101958ee1608d53394551e9ae511c33d3b98feca7c5e9b45a", 0xd01, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:56 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667311", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:56 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:56 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/06/05 23:26:56 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:56 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfsc', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:56 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:56 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/06/05 23:26:56 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667397", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:56 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:56 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667312", 0x0, &(0x7f000000a000)) 2018/06/05 23:26:56 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:26:56 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 2094.847626] device bridge_slave_1 left promiscuous mode [ 2094.853243] bridge0: port 2(bridge_slave_1) entered disabled state [ 2094.887989] device bridge_slave_0 left promiscuous mode [ 2094.893564] bridge0: port 1(bridge_slave_0) entered disabled state 2018/06/05 23:26:57 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xf4010000]}, 0x6) 2018/06/05 23:26:57 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:26:57 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed87", 0x43, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:57 executing program 5: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000200)={0xf20, 0x0, 0x5}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="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", 0xd01, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:26:57 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:57 executing program 7: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:26:57 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2094.973828] team0 (unregistering): Port device team_slave_1 removed [ 2094.990112] team0 (unregistering): Port device team_slave_0 removed [ 2095.002813] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2095.076855] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2095.138652] bond0 (unregistering): Released all slaves [ 2095.193590] IPVS: ftp: loaded support on port[0] = 21 2018/06/05 23:26:57 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:26:58 executing program 5: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000200)={0xf20, 0x0, 0x5}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="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", 0xd01, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 2096.642194] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.648622] bridge0: port 1(bridge_slave_0) entered disabled state [ 2096.656846] device bridge_slave_0 entered promiscuous mode [ 2096.697233] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.703639] bridge0: port 2(bridge_slave_1) entered disabled state [ 2096.710927] device bridge_slave_1 entered promiscuous mode [ 2096.751382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2096.791180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2096.905146] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2096.946793] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2097.122366] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2097.129816] team0: Port device team_slave_0 added [ 2097.165564] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2097.173679] team0: Port device team_slave_1 added [ 2097.209708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2097.247472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2097.283504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2097.290659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2097.305847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2097.338356] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2097.345559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2097.353569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2097.602643] bridge0: port 2(bridge_slave_1) entered blocking state [ 2097.609070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2097.615689] bridge0: port 1(bridge_slave_0) entered blocking state [ 2097.622129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2097.629399] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2097.680317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2098.420757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2098.500857] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2098.576347] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2098.582530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2098.589609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2098.661998] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:27:01 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe41b]}, 0x6) 2018/06/05 23:27:01 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:27:01 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:01 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed87", 0x43, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:27:01 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:01 executing program 5: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:27:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:27:02 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:02 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:02 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:27:02 executing program 5: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:27:02 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:02 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x10]}, 0x6) 2018/06/05 23:27:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18ee", 0x46, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:03 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfsz', 0x0, &(0x7f000000a000)) 2018/06/05 23:27:03 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:27:03 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667314", 0x0, &(0x7f000000a000)) 2018/06/05 23:27:03 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e6673ff", 0x0, &(0x7f000000a000)) 2018/06/05 23:27:03 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:03 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xffffffc0]}, 0x6) 2018/06/05 23:27:03 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:27:03 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:04 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:04 executing program 5: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:27:04 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/06/05 23:27:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed87", 0x43, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:04 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e66739e", 0x0, &(0x7f000000a000)) 2018/06/05 23:27:04 executing program 2: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000200)={0xf20, 0x0, 0x5}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="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", 0xd01, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:27:05 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) linkat(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x8001000000000002, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f0000000140)=0x2) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) setns(r0, 0xa000000) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x1) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)="608ac0511c014cbd2f008ef07d113fbc02157b5078e6e67c2533df4e8ef0c08856ad213a65cdc13a30eebd0b13278ad8928640750f98e1aa39a2a3f64526f0b767091b45d0743a6402a98da995a42711ceb93fd0a8db25a2de3254faac40195c3d94eaf0d7c1d5cf896a77f2", 0x6c}, {&(0x7f0000000300)="99aa63a0e492f9e3b46e3a382f782c9cf8650338b8a43d468112baad111ef10f65a8b6449dedff7a35e416aa5ae6f7822022ce0d192dc679850665b760845e32f64fd590effaa4444b5bcad4191018edfa1922c0188517649252948e8f5df4518ea45bdb2f384ca24c433459652c5a473fa948c92f6656e76a629f8b2739ab750217e05c111885de57ecf5d6ad71ed51f03f92e2dd43a0b393fa21da85c56cd83c5d107c4825d15fb89df79148576203ac916fe324a57f43b6f3ab1876375813131bf9fe8edfebf3b882a26f8db8b4ef5d64c84a7be1cbef897269d92db67b10a5846a0bcf9c50f146e9f453", 0xec}, {&(0x7f0000000400)="261504cb5209d89c646e51b0d0fc33e1e2289f577c023c3a1a8f8ff44a49f857ae74908cc08bb6c74215d9b710866fb779ea75d4d0743d656253d222f4c04a784f848cba693c96542193b59f0c2103b3befe4196023ca80ee9e3b4dee2997cedbab69274de24bf752fa7624c7b0ca327389c76d0c2edbdbcce14b951bec26ba5043f39caf73f05931018cb4a323e0a991dcd4a69e32ebef85897cffb8128799a05bc1715e2f57d490f63dfc05cfec70980f57fb9eb82ca5bbd8f9024b55ca38d4a", 0xc1}, {&(0x7f00000000c0)="cb475ebad6450fd8f33ad3ee43331fb913400d87", 0x14}], 0x4, 0x0) 2018/06/05 23:27:05 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x20e41500]}, 0x6) 2018/06/05 23:27:05 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x8001000000000002, 0x0) sysfs$3(0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x80000000, 0x6, 0x4, 0x4, 0x9}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={r3, 0x800}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) pwritev(r2, &(0x7f0000001880)=[{&(0x7f0000001400)="1c", 0x1}, {&(0x7f0000001540)="072f7002f685aa245099e1a525690134ff85b7ca07e14e794762835f5ea9ca0b5e4fdc0827e50bbe4732deb93fd50e06bb5509cffccb6fbed6dbe8b8646de45ea48e6d8b6d6607939da4602c6e16edf2d0773b7dab4d5b68aa983bb7104e3a246e4c13bcfaed0f1161cb534c571dceba82cd401fe9dc9b141204", 0x7a}, {&(0x7f0000001640)}, {&(0x7f0000001780)}], 0x4, 0x0) 2018/06/05 23:27:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667301", 0x0, &(0x7f000000a000)) 2018/06/05 23:27:05 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed87", 0x43, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:05 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) linkat(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x8001000000000002, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) pwritev(r2, &(0x7f0000001880)=[{&(0x7f0000001300)="c722e682e5e10a7baa4e3d7ef3be3c14e49e1d09d223511305f4973d5e0bec704f29eaaeb03e838b5d824fa6e456943f05ee1cd631bdfca789d1c2b63b2f6dacf757036338f7409cbee109287cad21ab415353819730794214acfde5be38a84488b7c90c10f223bddf3811bab2f1d32b01457eaaffd2e0a67950521cf5abd63998b39672947dd3c2022c1ddfd78bcd8b8bf2ee01c7e16eb63d9fa74c18caaaabb4b6df28da09907d4547d0813cdb4ed700", 0xb1}, {&(0x7f00000014c0)="12f6d8c91392b57f695b325a032e6d8abd1876a3da651a8087b4aaa3697c36cf2954d7df8f8f125d85ecfed060d6b25a3efd26237988ae7d30624413bb86b0f646fcc47980205a472aee", 0x4a}, {&(0x7f0000001600)="f343", 0x2}, {&(0x7f00000016c0)="44e282b22864e3fff4fbf61101aaa9bb18e923f3c9b1ac6acf44e177050f7a8551a1ad75dd1ae72cddd417dc326bcd377b2eb494f47097b03534a69aad8b4ba662a2229aa6762474b603c3c2f5ea2aa67410aa67bb3d08de718238d6725066e2c8ccebb586e1b5138f4b38de3c2903df0df17aefa6a48d68e27256", 0x7b}], 0x4, 0x0) 2018/06/05 23:27:05 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:05 executing program 2: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000200)={0xf20, 0x0, 0x5}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18ee86609d49e4fdf4bcaeec54a5f4e8f3be97b0f96a73f6e00ac89f0cbcc8e1f8fb7380a8772b69d829a458c166acc6ad4df97716d8dcceaf324965a5bf53e9812a19fcc7b8886a6879f8253a4b1414b204126ad91f400dfe1091bbf7d9fb5f2741bbb2d6806b0349ec2c6315ad3c6b9a17d3bdf8a30587fa9bce0e37d796fcc6304a484e6b744484056e79163620615350b24ffb941286ad725a83ee44bb68e35935e696030e78962ca5ea4ed32cdcf4fd0bced743008557d582035fd57588b47ec9a2c895b4205d473c11d440f7dd4208a22838b71e25774c22f76ebb4e449e59ab675bf800f8cd8678b14bf85ed4f39c2debc089914c4c766499849826d24fbcfbd078f836c717cd70bc6b3426e433d3bd3314bdae15f792f6cae19b569e3e569426300157c950637f389e05826ba8209dee509c4424f8d3eabd235fd0d8c43e9c50893f6a16e4c793fd6659def43ffeaa45409fc20079b761b71db4ca1b79a78ccefb7dc222142a41693087f7c6557935422a2d0b5dd39d8a1a1d59a01047aaed6ab4e6a94d4022c4ed579090dd4e54a48b22268c55f3d652a1b491f63ae73ada9bd45effb0eebd330daf9e2be2fc560a5e42ac876ef21ac6184363dfb5e61333384876362707b8bb6e6b9d540d8c8e2053837f1e857001a95d9f269f350b84ed78740048bec56191baff3637254309fba6c367005ad527895f633e00b28fef2b61d316bc7479eaa753a128ca49950935895c69eaf4b1e1d6b2bdcf9affb75bceffab5a84dbbbc6f1916820c8630a30a8b0bdd6448bd9794d1de7c01cc3cc9438ddb2c72ee248019f1e50c41414156a2048090dc01aa7ad749deaee74f7e3c65f478e259db7bc27a4b55c119dbdda115886386e74a32cdcc94d25f969f0c1c8f9ddba5697e38777f54c80ca1f4e5d4022034290b5597f8a8869acaa7a120868516b43aa91f5ceecfb8decc8a6a83ffaa5b3bb156bfec080782ae6aafd5223b709e1deaeafd15b1f7edcc67fcf79cdb9d12cdc4dfe31c2d5c7f346019a1b3dd7d76ebff7c4a38bde7bbf93bf87f386bed3e80c8687f53120e480ffbb9e1b7f78f091a9d2e097877b12d833901bf4af9abd02a4d39b144afbed072816b17fc75facfd1e1089473ceef2aaf3b4addd07598406b7ca7ffc28ddbe5f4cb66467bdb69804a9becf1112522a981546940f60fa7ff86643147b59ad9b24b7779764d0113a98413fd5d7e81869dfd210d2a7cba1f973053d3b9449b3f18550b3b0db136e3789879038c407ac146853a86411105fb74979fe7b8fb6713518ab50a3e38dfa91ab43ada699201287eec28b9fba11b2ad920b06aa0aac30a31942b7e32050ccc8a0317e377f2802e9a9b2de7152cb58fa340ee90c826ee6399b3567901624ba248512869b3f5486c21e84d6dfe970e162f9954c4cb779de802f5189fa6f2d605aa8460c3676b2642e941e2a9d9a718ad6333d3140d3b14d93553c13460208e3d30579dbfaa2cc066a59a57d233d0ee8b2307d3d96f949e54b91d093eab961f5d2f807ff89455db998bd9584dca770b85c5b6ba918a5399cb18ed715f824fe8b5b520f23b88d6501003c4c81c12d6e069a96022b3487b8becb27ae6c10890399a1a5cd8919f65b3b445aa51917ba0bbc1ff560cb1b113d54c9fc286f6b31a6493d6a11a8e0c490569085ddc065b94ead439ab903c74e4694b072dc3683838070fa3cb7a8bd673150e5002adf74bd31a952010fa521645cf24f0fa21bcf331bc535b48aa6cd93fa6432ba6654b5ee5647be6715c7df1bc9dcf06fc9fee8e851c24da5a326411ba3756b6df7f7323a69d21415bdb20af7f62b8f153f1c7dc0527b6bb4e1ed029cf3302a59d50b8d13bbd90fb053770dbd7893fab05b3f996115e557722741e022d8c4a4df515886707734dddf7e8ff4ba6642399779349f5b1f614a062d4c409f204c74e41ff20aa8bebc8e0026aa38038953082952fd00898c1b04b8a78b737075ab69bedc5c4a17e287a0586f4d8641d3199a90100980d470a3c0c8b32fdd2e6468ecdf43bd7ecb2b2542a4ae25233a712b7a47fd752436ca894684d98edaaf66b0748282afde4e2479e3ff7af23d071a23d636b4dabb882c6932d991476a2910715aa3b7062ddf92d30eafb2063583052f7cdd0b093842e8e7f20114bb61002d51cbb2fb69b8f99aff5459ac4e31ee4b478eae24db17820631734594f43232f9dfd441f4b06f48194caf7a9eed6f71822ccb5fc06622b1cee05e2236efb761433bb27e873a28094377deecbe74f85a0058f3f6684cc7b4d1d1dc24ebb505a71e94d658c116ce11e5f69487376e1ff2edb4a2b1f766f4138b92c208dc204d0509f4acada7763b0e723f4b81f53e84bc56c13d3952c715ab0db580a757f892e3fa6bd73014edb1f18dcdff2c71ccd417cb15f7c4f43be17d57877851c766b2893b7267c7c9bfa2933c642048b00d15936e32d723ef9238e1e8c51eb18993e998425f7d7b50cb95c7444b5e92a5ad59a87dda6e82122338d329d03d205893cac5d995b55a9d70c286f02b82ac04dc0aa795dec3a8e97eec3869953c0c0269b6633e3148b98d9899492c583282ebb6588e2448ef775dc3e38b0e4f0039206b816ad5b5e632b4765479f98c4774ea160a803e33ab7b7d6f227acc901d8213008f9ccf6cc6ebee9a863086e5e79ad7f6acfcd2aea915753ed7218c50ab76743a0b1222170d77bc847ab0ec9b431680e9ddc59803a507ed40d750f4c9b273c2d5615d81faa08e92d9388ce0ea94ff374cb2f92534035064b448d153d8d32d78b26cf56340fa17b6ffe3a03ae6889ffc006a3cdd439cbac5ca482fae401dc7d3237e8b3ed7f0b47f39aa1b69891d8dfe0fd4bdb2ddef8e85d1a0066a041312c283dcbd106ab9b13f91ef63f96b74eb457ccd3cf154dcb3d0c2a78c1037af5b3bdf8b705809614657c7cd11b24d94b6ff3f71d0861567fc944920c5b25f32c3ca55df69007feca67e8ba3755e1cffb24055ef869a5292f13becb93c61eb8d5b304b1738d209e6a6e43569bd7920eac9d144eedae45e1aeac6061d8d61fa2b7b8e0928a5dba7f09dc5e487f06d3cca4963e4ab8e3fee77cedddf3648904bbd7905374b21014b822c42154a1ac8d3b671e7bb3061b675f108db598d095ebd0f80b43cf4d18dfc8dc46733c52ec7e75f0b9b98a45aa905f1f27dab126f32fcee64bf4905743089f1433000d9ba6ffac2120658e0d44c7b10437b94e5b7d0e931758691f3cf29890e047b37c22ed36a3085de979aa7d3082eaeec200e46ea72bc3c52f80608af591ba5727356e4f1307f5f695172faa2302c50d890a8b6d6d1fe1e49e8d8b42f0490b8c82a10651111f2d87023fe5d446e01fecab65fcc469c3d58450a1bc81b4fad3062fe73a967e39892373af3ac1696b2cf25d16ed352b52cec3387a72d0b2c18a883604f4ae6947d1631e7984deecb1f4d61a86f95406e76ebb4e54f814326202b4431582fd4d8bfa8900fb88955acc6ff9c659016abe555ca71765700ce7c60dfa3618914ef4557e6766038c67f371102033e54527f725ed445a7aac772b77dae77f75cff0a75126f4e9d0f9e78d591de840851cd84216d84e867b661cfed0aa21cb421c5a265e868c2388a19042cda73b9c4081606a797a9374a8cfee7ce1fe5aed0c0492d7211b93cbc35e34c4b13e170bba205250ef75383e8dcb1d193e4ab8a83ab123ff45ffc2d1ea58a921f92168968307a6a2523b45b4ce10fc7fd1f418fb9195937ba8883d513460c1df7037df3098b83e1173fd371c3ab4bb577dc0996f3e22121e76b2b2ca5572e427329adf1a42502a91857476c105198ccda729dd9041eceb23f21b640a36be9d3d6185c17fd6eb91b6133eff3a8488a933c53ab340623093795af270f60513c5ee86627e5c1eeeb0e1ac1e6f09f06146e6fd5d6e68b2fc28e4abbc2b9f135eab5e9855b8dae3fed4bc8ef18a699bf10e9fa02d4f4ce221aa03b92554018c96cd7c0f6e5fca9bd8083b1e59da4b60a181591f141a67ef2d0fe66b23341dca53603d9c09d91c13ff3451bd7d1024130656d3d8f44e1497612ffe721feac63bc292de2d76040703a7cfc706ae58d21edce14a1240e4d4c9604e59aaa024cf5f4b517f6ac0c629e0004cbf4f6da7bdb1bf566399d76f049ed7cb36176a924e3bd4e7be1c8b59a3fa9b9f21f05b51304598732d32bf1d7010937139bf1c86b6a6d9506ced93c5338d0646bef9766c05c6c863980067a5a8ba7d59db4f36b2ae6545e21450b787ca3d976be6382e2aeb68d5c687791ea87340bd57f8b31f2ce88ecf5df8dbd367f56216f30043570a708727810d614ca8de6de14c50a7180285e2315bdb0f99e3984e5ce00f60504cb981897e8379f994786bdadc5da985cfedd7c894f2693f480fbd171425c3af8daeca417ed81873895edc04a69588a256e12dfa93bff1b134d3316fb336d6c096563c58c163785f3146135dde1e4d82c1e183af1faef14ddd255629cab7c44e24dd9f4dc8337dc5adc23e72d77ddad3397b1bf67417a1a0d32934e128babb4fa9101958ee1608d53394551e9ae511c33d3b98feca7c5e9b45a", 0xd01, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667391", 0x0, &(0x7f000000a000)) 2018/06/05 23:27:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/06/05 23:27:06 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:06 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:06 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e6673ff", 0x0, &(0x7f000000a000)) 2018/06/05 23:27:06 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:06 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) linkat(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x8001000000000002, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) pwritev(r2, &(0x7f0000001880)=[{&(0x7f0000001300)="c722e682e5e10a7baa4e3d7ef3be3c14e49e1d09d223511305f4973d5e0bec704f29eaaeb03e838b5d824fa6e456943f05ee1cd631bdfca789d1c2b63b2f6dacf757036338f7409cbee109287cad21ab415353819730794214acfde5be38a84488b7c90c10f223bddf3811bab2f1d32b01457eaaffd2e0a67950521cf5abd63998b39672947dd3c2022c1ddfd78bcd8b8bf2ee01c7e16eb63d9fa74c18caaaabb4b6df28da09907d4547d0813cdb4ed700", 0xb1}, {&(0x7f00000014c0)="12f6d8c91392b57f695b325a032e6d8abd1876a3da651a8087b4aaa3697c36cf2954d7df8f8f125d85ecfed060d6b25a3efd26237988ae7d30624413bb86b0f646fcc47980205a472aee", 0x4a}, {&(0x7f0000001600)="f343", 0x2}, {&(0x7f00000016c0)="44e282b22864e3fff4fbf61101aaa9bb18e923f3c9b1ac6acf44e177050f7a8551a1ad75dd1ae72cddd417dc326bcd377b2eb494f47097b03534a69aad8b4ba662a2229aa6762474b603c3c2f5ea2aa67410aa67bb3d08de718238d6725066e2c8ccebb586e1b5138f4b38de3c2903df0df17aefa6a48d68e27256", 0x7b}], 0x4, 0x0) 2018/06/05 23:27:06 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x3000000]}, 0x6) 2018/06/05 23:27:06 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x8001000000000002, 0x0) sysfs$3(0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x80000000, 0x6, 0x4, 0x4, 0x9}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={r3, 0x800}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) pwritev(r2, &(0x7f0000001880)=[{&(0x7f0000001400)="1c", 0x1}, {&(0x7f0000001540)="072f7002f685aa245099e1a525690134ff85b7ca07e14e794762835f5ea9ca0b5e4fdc0827e50bbe4732deb93fd50e06bb5509cffccb6fbed6dbe8b8646de45ea48e6d8b6d6607939da4602c6e16edf2d0773b7dab4d5b68aa983bb7104e3a246e4c13bcfaed0f1161cb534c571dceba82cd401fe9dc9b141204", 0x7a}, {&(0x7f0000001640)}, {&(0x7f0000001780)}], 0x4, 0x0) 2018/06/05 23:27:06 executing program 2 (fault-call:5 fault-nth:0): syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:27:06 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed87", 0x43, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:07 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe00]}, 0x6) 2018/06/05 23:27:07 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x8001000000000002, 0x0) sysfs$3(0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x80000000, 0x6, 0x4, 0x4, 0x9}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={r3, 0x800}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) pwritev(r2, &(0x7f0000001880)=[{&(0x7f0000001400)="1c", 0x1}, {&(0x7f0000001540)="072f7002f685aa245099e1a525690134ff85b7ca07e14e794762835f5ea9ca0b5e4fdc0827e50bbe4732deb93fd50e06bb5509cffccb6fbed6dbe8b8646de45ea48e6d8b6d6607939da4602c6e16edf2d0773b7dab4d5b68aa983bb7104e3a246e4c13bcfaed0f1161cb534c571dceba82cd401fe9dc9b141204", 0x7a}, {&(0x7f0000001640)}, {&(0x7f0000001780)}], 0x4, 0x0) 2018/06/05 23:27:07 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667303", 0x0, &(0x7f000000a000)) 2018/06/05 23:27:07 executing program 0 (fault-call:9 fault-nth:0): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:07 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/05 23:27:07 executing program 5 (fault-call:7 fault-nth:0): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:07 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:07 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)="6e667301", 0x0, &(0x7f000000a000)) [ 2105.565533] FAULT_INJECTION: forcing a failure. [ 2105.565533] name failslab, interval 1, probability 0, space 0, times 0 [ 2105.577016] CPU: 0 PID: 3058 Comm: syz-executor5 Not tainted 4.17.0+ #110 [ 2105.583946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2105.593301] Call Trace: [ 2105.595901] dump_stack+0x1b9/0x294 [ 2105.599533] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2105.604729] should_fail.cold.4+0xa/0x1a [ 2105.608792] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2105.613923] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2105.618944] ? graph_lock+0x170/0x170 [ 2105.622750] ? find_held_lock+0x36/0x1c0 [ 2105.626824] ? __lock_is_held+0xb5/0x140 [ 2105.630902] ? check_same_owner+0x320/0x320 [ 2105.635224] ? rcu_note_context_switch+0x710/0x710 [ 2105.640160] __should_failslab+0x124/0x180 [ 2105.644406] should_failslab+0x9/0x14 [ 2105.648207] kmem_cache_alloc_trace+0x2cb/0x780 [ 2105.652883] loop_add+0x96/0x9c0 [ 2105.656246] ? loop_lookup+0x102/0x220 [ 2105.660129] ? loop_queue_rq+0x640/0x640 [ 2105.664196] ? __fget_light+0x2ef/0x430 [ 2105.668178] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2105.673373] loop_control_ioctl+0x178/0x500 [ 2105.677704] ? loop_add+0x9c0/0x9c0 [ 2105.681338] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2105.686874] ? fput+0x130/0x1a0 [ 2105.690159] ? ksys_write+0x1a6/0x250 [ 2105.693964] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2105.699148] ? loop_add+0x9c0/0x9c0 [ 2105.702780] __ia32_compat_sys_ioctl+0x221/0x640 [ 2105.707541] do_fast_syscall_32+0x345/0xf9b [ 2105.711865] ? do_int80_syscall_32+0x880/0x880 [ 2105.716460] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2105.721314] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2105.726859] ? syscall_return_slowpath+0x30f/0x5c0 [ 2105.731792] ? sysret32_from_system_call+0x5/0x46 [ 2105.736656] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2105.741505] entry_SYSENTER_compat+0x70/0x7f [ 2105.745913] RIP: 0023:0xf7f17cb9 2018/06/05 23:27:08 executing program 1 (fault-call:6 fault-nth:0): r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) [ 2105.749275] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2105.768626] RSP: 002b:00000000f5f130ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2105.776333] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2105.783596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2105.790947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2105.798205] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2105.805473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfffffff6, &(0x7f000000a000)) 2018/06/05 23:27:08 executing program 1 (fault-call:6 fault-nth:1): r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:27:08 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x18, &(0x7f000000a000)) [ 2106.157012] device bridge_slave_1 left promiscuous mode [ 2106.162757] bridge0: port 2(bridge_slave_1) entered disabled state [ 2106.207882] device bridge_slave_0 left promiscuous mode [ 2106.213506] bridge0: port 1(bridge_slave_0) entered disabled state [ 2106.338796] IPVS: ftp: loaded support on port[0] = 21 [ 2106.499381] team0 (unregistering): Port device team_slave_1 removed [ 2106.533563] team0 (unregistering): Port device team_slave_0 removed 2018/06/05 23:27:08 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4000]}, 0x6) 2018/06/05 23:27:08 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 2106.579134] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2106.615619] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2106.748459] bond0 (unregistering): Released all slaves [ 2107.597960] bridge0: port 1(bridge_slave_0) entered blocking state [ 2107.604449] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.611914] device bridge_slave_0 entered promiscuous mode [ 2107.663685] bridge0: port 2(bridge_slave_1) entered blocking state [ 2107.670125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.683201] device bridge_slave_1 entered promiscuous mode [ 2107.720843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2107.756990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2107.865181] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2107.905104] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2107.944757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2107.951662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2107.986661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2107.993551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2108.100243] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2108.107585] team0: Port device team_slave_0 added [ 2108.132334] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2108.139429] team0: Port device team_slave_1 added [ 2108.175784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2108.216614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2108.243336] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2108.250420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2108.258823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2108.279138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2108.286304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2108.294310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2108.514281] bridge0: port 2(bridge_slave_1) entered blocking state [ 2108.520860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2108.527492] bridge0: port 1(bridge_slave_0) entered blocking state [ 2108.533855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2108.541206] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2108.959122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2109.329823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2109.409716] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2109.485946] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2109.492162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2109.500867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2109.574408] 8021q: adding VLAN 0 to HW filter on device team0 [ 2110.059367] FAULT_INJECTION: forcing a failure. [ 2110.059367] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.070839] CPU: 1 PID: 3354 Comm: syz-executor1 Not tainted 4.17.0+ #110 [ 2110.077752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2110.087091] Call Trace: [ 2110.089667] dump_stack+0x1b9/0x294 [ 2110.093276] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2110.098448] ? should_fail+0x9aa/0xbcd [ 2110.102318] should_fail.cold.4+0xa/0x1a [ 2110.106364] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2110.111450] ? graph_lock+0x170/0x170 [ 2110.115235] ? retint_kernel+0x10/0x10 [ 2110.119110] ? find_held_lock+0x36/0x1c0 [ 2110.123162] ? __lock_is_held+0xb5/0x140 [ 2110.127213] ? check_same_owner+0x320/0x320 [ 2110.131529] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2110.137049] ? node_tag_clear+0xc0/0x1c0 [ 2110.141093] ? rcu_note_context_switch+0x710/0x710 [ 2110.146011] __should_failslab+0x124/0x180 [ 2110.150252] should_failslab+0x9/0x14 [ 2110.154042] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2110.159129] ? __fprop_inc_percpu_max+0x2c0/0x2c0 [ 2110.163954] __kmalloc_node+0x33/0x70 [ 2110.167756] blk_mq_alloc_tag_set+0x37d/0xab0 [ 2110.172236] ? idr_alloc+0x145/0x1a0 [ 2110.175934] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2110.181121] loop_add+0x2b4/0x9c0 [ 2110.184554] ? loop_lookup+0x102/0x220 [ 2110.188422] ? loop_queue_rq+0x640/0x640 [ 2110.192473] ? __fget_light+0x2ef/0x430 [ 2110.196444] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2110.201637] loop_control_ioctl+0x178/0x500 [ 2110.205964] ? loop_add+0x9c0/0x9c0 [ 2110.209598] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2110.215135] ? fput+0x130/0x1a0 [ 2110.218395] ? ksys_write+0x1a6/0x250 [ 2110.222188] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2110.227359] ? loop_add+0x9c0/0x9c0 [ 2110.230993] __ia32_compat_sys_ioctl+0x221/0x640 [ 2110.235739] do_fast_syscall_32+0x345/0xf9b [ 2110.240047] ? do_int80_syscall_32+0x880/0x880 [ 2110.244613] ? kasan_check_write+0x14/0x20 [ 2110.248830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2110.254346] ? syscall_return_slowpath+0x30f/0x5c0 [ 2110.259262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2110.264783] ? retint_user+0x18/0x18 [ 2110.268478] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2110.273309] entry_SYSENTER_compat+0x70/0x7f [ 2110.277694] RIP: 0023:0xf7f77cb9 [ 2110.281041] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2110.300217] RSP: 002b:00000000f5f730ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2110.307906] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2110.316606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2110.323860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2110.331109] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2110.338357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:12 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c16, 0x0) 2018/06/05 23:27:12 executing program 7 (fault-call:8 fault-nth:0): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:12 executing program 1 (fault-call:6 fault-nth:2): r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:27:12 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x700]}, 0x6) 2018/06/05 23:27:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4800000000000000, &(0x7f000000a000)) 2018/06/05 23:27:12 executing program 5 (fault-call:7 fault-nth:1): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:12 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:13 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x40049409, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2110.657731] FAULT_INJECTION: forcing a failure. [ 2110.657731] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.669257] CPU: 0 PID: 3363 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2110.676181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2110.685549] Call Trace: [ 2110.688142] dump_stack+0x1b9/0x294 [ 2110.691765] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2110.696943] ? perf_trace_lock_acquire+0xe3/0x980 [ 2110.701787] should_fail.cold.4+0xa/0x1a [ 2110.705861] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2110.710960] ? mutex_trylock+0x2a0/0x2a0 [ 2110.715009] ? graph_lock+0x170/0x170 [ 2110.718811] ? find_held_lock+0x36/0x1c0 [ 2110.722874] ? __lock_is_held+0xb5/0x140 [ 2110.726942] ? check_same_owner+0x320/0x320 [ 2110.731254] ? rcu_note_context_switch+0x710/0x710 [ 2110.736188] __should_failslab+0x124/0x180 [ 2110.740433] should_failslab+0x9/0x14 [ 2110.744257] kmem_cache_alloc_trace+0x2cb/0x780 [ 2110.748925] ? retint_kernel+0x10/0x10 [ 2110.752823] loop_add+0x96/0x9c0 [ 2110.756182] ? loop_lookup+0x102/0x220 [ 2110.760085] ? loop_queue_rq+0x640/0x640 [ 2110.764136] ? __fget_light+0x2ef/0x430 [ 2110.768111] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2110.773301] loop_control_ioctl+0x178/0x500 [ 2110.777615] ? loop_add+0x9c0/0x9c0 [ 2110.781252] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2110.786783] ? exit_to_usermode_loop+0x87/0x310 [ 2110.791646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2110.797177] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2110.802362] ? loop_add+0x9c0/0x9c0 [ 2110.805985] __ia32_compat_sys_ioctl+0x221/0x640 [ 2110.810744] do_fast_syscall_32+0x345/0xf9b [ 2110.815089] ? do_int80_syscall_32+0x880/0x880 [ 2110.819677] ? _raw_spin_unlock_irq+0x27/0x70 [ 2110.824180] ? finish_task_switch+0x1ca/0x840 [ 2110.828766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2110.834294] ? syscall_return_slowpath+0x30f/0x5c0 [ 2110.839236] ? sysret32_from_system_call+0x5/0x46 [ 2110.844745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2110.849586] entry_SYSENTER_compat+0x70/0x7f [ 2110.853976] RIP: 0023:0xf7f1ccb9 [ 2110.857318] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2110.876595] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2110.884292] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2110.891556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2110.898816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2110.906079] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2110.913343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2110.926036] FAULT_INJECTION: forcing a failure. [ 2110.926036] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.937813] CPU: 0 PID: 3366 Comm: syz-executor5 Not tainted 4.17.0+ #110 [ 2110.944741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2110.954093] Call Trace: [ 2110.956673] dump_stack+0x1b9/0x294 [ 2110.960292] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2110.965476] ? perf_trace_lock_acquire+0xe3/0x980 [ 2110.970316] ? rcu_is_watching+0x85/0x140 [ 2110.974459] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2110.979989] should_fail.cold.4+0xa/0x1a [ 2110.984045] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2110.989140] ? radix_tree_clear_tags+0xc0/0xc0 [ 2110.993712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2110.999237] ? graph_lock+0x170/0x170 [ 2111.003119] ? find_held_lock+0x36/0x1c0 [ 2111.007171] ? __lock_is_held+0xb5/0x140 [ 2111.011234] ? check_same_owner+0x320/0x320 [ 2111.015555] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2111.021090] ? node_tag_clear+0xc0/0x1c0 [ 2111.025140] ? rcu_note_context_switch+0x710/0x710 [ 2111.030061] __should_failslab+0x124/0x180 [ 2111.034284] should_failslab+0x9/0x14 [ 2111.038073] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2111.043167] ? __fprop_inc_percpu_max+0x2c0/0x2c0 [ 2111.048009] __kmalloc_node+0x33/0x70 [ 2111.051807] blk_mq_alloc_tag_set+0x37d/0xab0 [ 2111.056289] ? idr_alloc+0x145/0x1a0 [ 2111.059994] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2111.065182] loop_add+0x2b4/0x9c0 [ 2111.068622] ? loop_lookup+0x102/0x220 [ 2111.072508] ? loop_queue_rq+0x640/0x640 [ 2111.076558] ? __fget_light+0x2ef/0x430 [ 2111.080525] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2111.085714] loop_control_ioctl+0x178/0x500 [ 2111.090029] ? loop_add+0x9c0/0x9c0 [ 2111.093646] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2111.099168] ? fput+0x130/0x1a0 [ 2111.102446] ? ksys_write+0x1a6/0x250 [ 2111.106246] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2111.111420] ? loop_add+0x9c0/0x9c0 [ 2111.115057] __ia32_compat_sys_ioctl+0x221/0x640 [ 2111.119808] do_fast_syscall_32+0x345/0xf9b [ 2111.124129] ? do_int80_syscall_32+0x880/0x880 [ 2111.128786] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2111.133619] ? syscall_return_slowpath+0x30f/0x5c0 [ 2111.138548] ? sysret32_from_system_call+0x5/0x46 [ 2111.143383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2111.148215] entry_SYSENTER_compat+0x70/0x7f [ 2111.152610] RIP: 0023:0xf7f17cb9 [ 2111.155954] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2111.175300] RSP: 002b:00000000f5f130ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2111.182999] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2111.190269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2111.197540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2018/06/05 23:27:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfeffffff00000000, &(0x7f000000a000)) [ 2111.204792] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2111.212057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:13 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c18, 0x0) 2018/06/05 23:27:13 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xfeffffff]}, 0x6) 2018/06/05 23:27:13 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c3e, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:14 executing program 1: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/06/05 23:27:14 executing program 7 (fault-call:8 fault-nth:1): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:14 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c54, 0x0) [ 2112.098921] FAULT_INJECTION: forcing a failure. [ 2112.098921] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.111530] CPU: 0 PID: 3409 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2112.118465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2112.127816] Call Trace: [ 2112.130409] dump_stack+0x1b9/0x294 [ 2112.134037] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2112.139236] should_fail.cold.4+0xa/0x1a [ 2112.143310] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2112.148432] ? retint_kernel+0x10/0x10 [ 2112.152331] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2112.157107] ? retint_kernel+0x10/0x10 [ 2112.161051] ? check_same_owner+0x320/0x320 [ 2112.165414] ? rcu_note_context_switch+0x710/0x710 [ 2112.170364] __should_failslab+0x124/0x180 [ 2112.174615] should_failslab+0x9/0x14 [ 2112.178424] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2112.183527] ? retint_kernel+0x10/0x10 [ 2112.187406] __kmalloc_node+0x33/0x70 [ 2112.191195] blk_mq_alloc_tag_set+0x37d/0xab0 [ 2112.195677] ? idr_alloc+0x145/0x1a0 [ 2112.199382] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2112.204561] loop_add+0x2b4/0x9c0 [ 2112.208017] ? loop_lookup+0x102/0x220 [ 2112.211894] ? loop_queue_rq+0x640/0x640 [ 2112.215945] ? __fget_light+0x2ef/0x430 [ 2112.219902] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2112.225074] loop_control_ioctl+0x178/0x500 [ 2112.229378] ? loop_add+0x9c0/0x9c0 [ 2112.232992] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2112.237740] ? retint_kernel+0x10/0x10 [ 2112.241620] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2112.246802] ? loop_add+0x9c0/0x9c0 [ 2112.250428] __ia32_compat_sys_ioctl+0x221/0x640 [ 2112.255183] do_fast_syscall_32+0x345/0xf9b [ 2112.259490] ? do_int80_syscall_32+0x880/0x880 [ 2112.264056] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2112.268882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2112.274403] ? syscall_return_slowpath+0x30f/0x5c0 [ 2112.279315] ? sysret32_from_system_call+0x5/0x46 [ 2112.284142] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2112.288969] entry_SYSENTER_compat+0x70/0x7f [ 2112.293366] RIP: 0023:0xf7f1ccb9 [ 2112.296718] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2112.315966] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2112.323663] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2112.330915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2112.338176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2112.345435] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2112.352685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b", 0x44, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:15 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c3e, 0x0) 2018/06/05 23:27:15 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c28, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:15 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x5452, r1) 2018/06/05 23:27:15 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xa]}, 0x6) 2018/06/05 23:27:15 executing program 7 (fault-call:8 fault-nth:2): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:15 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x7400000000000000, &(0x7f000000a000)) 2018/06/05 23:27:15 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:15 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c60, 0x0) [ 2112.977941] FAULT_INJECTION: forcing a failure. [ 2112.977941] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.991329] CPU: 0 PID: 3423 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2112.998261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2113.007626] Call Trace: [ 2113.010220] dump_stack+0x1b9/0x294 [ 2113.013859] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2113.019061] ? finish_task_switch+0x1ca/0x840 [ 2113.023559] ? finish_task_switch+0x182/0x840 [ 2113.028069] should_fail.cold.4+0xa/0x1a [ 2113.032152] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2113.037270] ? __schedule+0x809/0x1e30 [ 2113.041171] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2113.045938] ? __sched_text_start+0x8/0x8 [ 2113.050098] ? __lock_is_held+0xb5/0x140 [ 2113.054184] ? check_same_owner+0x320/0x320 [ 2113.058515] ? retint_kernel+0x10/0x10 [ 2113.062410] __should_failslab+0x124/0x180 [ 2113.066653] should_failslab+0x9/0x14 [ 2113.070459] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2113.075564] ? memset_erms+0xb/0x10 2018/06/05 23:27:15 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c51, r1) [ 2113.079311] __kmalloc_node+0x33/0x70 [ 2113.083125] blk_mq_alloc_tag_set+0x414/0xab0 [ 2113.087731] ? retint_kernel+0x10/0x10 [ 2113.091711] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2113.096903] ? loop_add+0x143/0x9c0 [ 2113.100530] loop_add+0x2b4/0x9c0 [ 2113.103981] ? loop_lookup+0x102/0x220 [ 2113.107878] ? loop_queue_rq+0x640/0x640 [ 2113.111949] ? __fget_light+0x2ef/0x430 [ 2113.115937] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2113.121146] loop_control_ioctl+0x178/0x500 [ 2113.125480] ? loop_add+0x9c0/0x9c0 [ 2113.129123] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2113.134752] ? fput+0x130/0x1a0 [ 2113.138037] ? ksys_write+0x1a6/0x250 [ 2113.141849] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2113.147049] ? loop_add+0x9c0/0x9c0 [ 2113.150688] __ia32_compat_sys_ioctl+0x221/0x640 [ 2113.155459] do_fast_syscall_32+0x345/0xf9b [ 2113.159778] ? do_int80_syscall_32+0x880/0x880 [ 2113.164344] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2113.169176] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2113.174697] ? syscall_return_slowpath+0x30f/0x5c0 [ 2113.179627] ? sysret32_from_system_call+0x5/0x46 [ 2113.184466] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2113.189301] entry_SYSENTER_compat+0x70/0x7f [ 2113.193694] RIP: 0023:0xf7f1ccb9 [ 2113.197038] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2113.216424] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2113.224121] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2113.231396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2113.238665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2113.245931] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2113.253193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:15 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c4f, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:15 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x11, &(0x7f000000a000)) 2018/06/05 23:27:15 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x40049409, 0x0) 2018/06/05 23:27:15 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c0d, 0x0) 2018/06/05 23:27:15 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c07, r1) [ 2113.555522] device bridge_slave_1 left promiscuous mode [ 2113.561208] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.591260] device bridge_slave_0 left promiscuous mode [ 2113.596850] bridge0: port 1(bridge_slave_0) entered disabled state 2018/06/05 23:27:16 executing program 7 (fault-call:8 fault-nth:3): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 2113.689555] IPVS: ftp: loaded support on port[0] = 21 [ 2113.767594] FAULT_INJECTION: forcing a failure. [ 2113.767594] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.779167] CPU: 0 PID: 3465 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2113.786183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2113.795537] Call Trace: [ 2113.798134] dump_stack+0x1b9/0x294 [ 2113.801774] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2113.806978] ? perf_trace_lock_acquire+0xe3/0x980 [ 2113.811834] ? kasan_check_read+0x11/0x20 [ 2113.816001] ? rcu_is_watching+0x85/0x140 [ 2113.820161] should_fail.cold.4+0xa/0x1a [ 2113.824243] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2113.829363] ? kernel_text_address+0x79/0xf0 [ 2113.833782] ? __unwind_start+0x166/0x330 [ 2113.837937] ? graph_lock+0x170/0x170 [ 2113.841741] ? __save_stack_trace+0x7e/0xd0 [ 2113.846065] ? find_held_lock+0x36/0x1c0 [ 2113.850211] ? __lock_is_held+0xb5/0x140 [ 2113.854312] ? check_same_owner+0x320/0x320 [ 2113.858625] ? rcu_note_context_switch+0x710/0x710 [ 2113.863552] __should_failslab+0x124/0x180 [ 2113.867786] should_failslab+0x9/0x14 [ 2113.871578] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2113.876670] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2113.882194] ? find_next_bit+0x104/0x130 [ 2113.886268] blk_mq_init_tags+0x79/0x2b0 [ 2113.890324] blk_mq_alloc_rq_map+0x9f/0x220 [ 2113.894639] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2113.899124] blk_mq_alloc_tag_set+0x612/0xab0 [ 2113.903609] ? idr_alloc+0x145/0x1a0 [ 2113.907312] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2113.912495] loop_add+0x2b4/0x9c0 [ 2113.915932] ? loop_lookup+0x102/0x220 [ 2113.919806] ? loop_queue_rq+0x640/0x640 [ 2113.923858] ? __fget_light+0x2ef/0x430 [ 2113.927826] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2113.933008] loop_control_ioctl+0x178/0x500 [ 2113.937333] ? loop_add+0x9c0/0x9c0 [ 2113.940949] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2113.946476] ? exit_to_usermode_loop+0x87/0x310 [ 2113.951144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2113.956671] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2113.961848] ? loop_add+0x9c0/0x9c0 [ 2113.965467] __ia32_compat_sys_ioctl+0x221/0x640 [ 2113.970213] do_fast_syscall_32+0x345/0xf9b [ 2113.974527] ? do_int80_syscall_32+0x880/0x880 [ 2113.979098] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2113.983931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2113.989462] ? syscall_return_slowpath+0x30f/0x5c0 [ 2113.994384] ? sysret32_from_system_call+0x5/0x46 [ 2113.999216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2114.004063] entry_SYSENTER_compat+0x70/0x7f [ 2114.008456] RIP: 0023:0xf7f1ccb9 [ 2114.011802] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2114.031143] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2114.038843] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2114.046096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2114.053350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2114.060606] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2114.067859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2114.076729] blk-mq: reduced tag depth (128 -> 64) [ 2114.086758] team0 (unregistering): Port device team_slave_1 removed [ 2114.115980] team0 (unregistering): Port device team_slave_0 removed [ 2114.146061] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2114.171466] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2114.215013] bond0 (unregistering): Released all slaves [ 2114.863486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2114.869887] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.877196] device bridge_slave_0 entered promiscuous mode [ 2114.913912] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.920326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.927655] device bridge_slave_1 entered promiscuous mode [ 2114.964359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2115.000233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2115.107879] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2115.146815] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2115.313088] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2115.320487] team0: Port device team_slave_0 added [ 2115.355673] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2115.363225] team0: Port device team_slave_1 added [ 2115.395360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2115.402239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2115.410580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2115.437431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2115.444353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2115.455368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2115.486886] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2115.494380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2115.505134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2115.530854] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2115.538073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2115.546079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2115.785502] bridge0: port 2(bridge_slave_1) entered blocking state [ 2115.791869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2115.798523] bridge0: port 1(bridge_slave_0) entered blocking state [ 2115.804906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2115.812237] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2116.384174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2116.593787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2116.670762] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2116.747731] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2116.753903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2116.761134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2116.838589] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:27:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b", 0x44, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:19 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c50, r1) 2018/06/05 23:27:19 executing program 7 (fault-call:8 fault-nth:4): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:19 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/06/05 23:27:19 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c6d, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:19 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c6d, 0x0) 2018/06/05 23:27:19 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x3e8]}, 0x6) 2018/06/05 23:27:19 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1a6, &(0x7f000000a000)) [ 2117.509089] FAULT_INJECTION: forcing a failure. [ 2117.509089] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.525062] CPU: 1 PID: 3738 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2117.532002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2117.541368] Call Trace: [ 2117.543964] dump_stack+0x1b9/0x294 [ 2117.547601] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2117.552800] ? perf_trace_lock_acquire+0xe3/0x980 2018/06/05 23:27:19 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c52, 0x0) [ 2117.557658] should_fail.cold.4+0xa/0x1a [ 2117.561727] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2117.566836] ? rcu_report_qs_rnp+0x790/0x790 [ 2117.571259] ? graph_lock+0x170/0x170 [ 2117.575070] ? find_held_lock+0x36/0x1c0 [ 2117.579140] ? __lock_is_held+0xb5/0x140 [ 2117.583216] ? check_same_owner+0x320/0x320 [ 2117.587549] ? kasan_kmalloc+0xc4/0xe0 [ 2117.591443] ? kmem_cache_alloc_node_trace+0x150/0x770 [ 2117.596733] ? blk_mq_init_tags+0x79/0x2b0 [ 2117.600980] ? rcu_note_context_switch+0x710/0x710 [ 2117.605921] ? loop_add+0x2b4/0x9c0 [ 2117.609555] ? loop_control_ioctl+0x178/0x500 [ 2117.614058] ? __ia32_compat_sys_ioctl+0x221/0x640 [ 2117.618997] __should_failslab+0x124/0x180 [ 2117.623243] should_failslab+0x9/0x14 [ 2117.627052] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2117.632159] ? print_usage_bug+0xc0/0xc0 [ 2117.636229] __kmalloc_node+0x33/0x70 [ 2117.640102] sbitmap_init_node+0x290/0x460 [ 2117.644347] sbitmap_queue_init_node+0xaa/0x840 [ 2117.649041] ? sbitmap_init_node+0x460/0x460 [ 2117.653457] ? rcu_read_lock_sched_held+0x108/0x120 2018/06/05 23:27:20 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c5a, 0x0) [ 2117.658487] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2117.663774] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2117.669315] ? find_next_bit+0x104/0x130 [ 2117.674304] blk_mq_init_tags+0x11b/0x2b0 [ 2117.678558] blk_mq_alloc_rq_map+0x9f/0x220 [ 2117.682890] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2117.687392] blk_mq_alloc_tag_set+0x612/0xab0 [ 2117.691878] ? idr_alloc+0x145/0x1a0 [ 2117.695582] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2117.700767] loop_add+0x2b4/0x9c0 [ 2117.704207] ? loop_lookup+0x102/0x220 [ 2117.708082] ? loop_queue_rq+0x640/0x640 [ 2117.712148] ? __fget_light+0x2ef/0x430 [ 2117.716114] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2117.721292] loop_control_ioctl+0x178/0x500 [ 2117.725609] ? loop_add+0x9c0/0x9c0 [ 2117.729231] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2117.734754] ? fput+0x130/0x1a0 [ 2117.738029] ? ksys_write+0x1a6/0x250 [ 2117.741825] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2117.746999] ? loop_add+0x9c0/0x9c0 [ 2117.750623] __ia32_compat_sys_ioctl+0x221/0x640 [ 2117.755375] do_fast_syscall_32+0x345/0xf9b [ 2117.759685] ? do_int80_syscall_32+0x880/0x880 [ 2117.764257] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2117.769100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2117.774623] ? syscall_return_slowpath+0x30f/0x5c0 [ 2117.779546] ? sysret32_from_system_call+0x5/0x46 [ 2117.784391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2117.789311] entry_SYSENTER_compat+0x70/0x7f [ 2117.793709] RIP: 0023:0xf7f1ccb9 2018/06/05 23:27:20 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1100000000000000, &(0x7f000000a000)) [ 2117.797149] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2117.816484] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2117.824181] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2117.831445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2117.838711] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2117.845974] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2117.853235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:20 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c11, r1) [ 2117.926515] blk-mq: reduced tag depth (128 -> 64) 2018/06/05 23:27:20 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c78, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:20 executing program 7 (fault-call:8 fault-nth:5): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:20 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c72, 0x0) 2018/06/05 23:27:20 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c1b, 0x0) [ 2118.447088] FAULT_INJECTION: forcing a failure. [ 2118.447088] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.460021] CPU: 1 PID: 3769 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2118.466958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2118.476314] Call Trace: [ 2118.478910] dump_stack+0x1b9/0x294 [ 2118.482543] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2118.487739] ? perf_trace_lock_acquire+0xe3/0x980 [ 2118.492582] ? find_next_zero_bit+0x111/0x140 [ 2118.497098] should_fail.cold.4+0xa/0x1a [ 2118.501168] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2118.506290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2118.511937] ? graph_lock+0x170/0x170 [ 2118.515755] ? find_held_lock+0x36/0x1c0 [ 2118.519832] ? __lock_is_held+0xb5/0x140 [ 2118.523920] ? check_same_owner+0x320/0x320 [ 2118.528254] ? __kmalloc_node+0x33/0x70 [ 2118.532236] ? rcu_note_context_switch+0x710/0x710 [ 2118.537184] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2118.542474] __should_failslab+0x124/0x180 [ 2118.546740] should_failslab+0x9/0x14 [ 2118.550548] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2118.555664] ? __kmalloc_node+0x47/0x70 [ 2118.560686] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2118.565693] ? find_next_bit+0x104/0x130 [ 2118.569749] sbitmap_queue_init_node+0x31c/0x840 [ 2118.574506] ? sbitmap_init_node+0x460/0x460 [ 2118.578908] ? rcu_read_lock_sched_held+0x108/0x120 [ 2118.583919] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2118.589192] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2118.594719] ? find_next_bit+0x104/0x130 [ 2118.598776] blk_mq_init_tags+0x11b/0x2b0 [ 2118.602917] blk_mq_alloc_rq_map+0x9f/0x220 [ 2118.607240] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2118.611725] blk_mq_alloc_tag_set+0x612/0xab0 [ 2118.616215] ? idr_alloc+0x145/0x1a0 [ 2118.619932] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2118.625121] loop_add+0x2b4/0x9c0 [ 2118.628562] ? loop_lookup+0x102/0x220 [ 2118.632435] ? loop_queue_rq+0x640/0x640 [ 2118.636487] ? __fget_light+0x2ef/0x430 [ 2118.640453] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2118.645634] loop_control_ioctl+0x178/0x500 [ 2118.649944] ? loop_add+0x9c0/0x9c0 [ 2118.653644] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2118.659171] ? exit_to_usermode_loop+0x87/0x310 [ 2118.663834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2118.669361] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2118.674535] ? loop_add+0x9c0/0x9c0 [ 2118.678151] __ia32_compat_sys_ioctl+0x221/0x640 [ 2118.682904] do_fast_syscall_32+0x345/0xf9b [ 2118.687218] ? do_int80_syscall_32+0x880/0x880 [ 2118.691790] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2118.696627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2118.702166] ? syscall_return_slowpath+0x30f/0x5c0 [ 2118.707087] ? sysret32_from_system_call+0x5/0x46 [ 2118.711920] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2118.716753] entry_SYSENTER_compat+0x70/0x7f [ 2118.721148] RIP: 0023:0xf7f1ccb9 [ 2118.724493] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2118.743822] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2118.751527] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2118.758784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2118.766040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2118.773300] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2118.780554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2118.791625] blk-mq: reduced tag depth (128 -> 64) 2018/06/05 23:27:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b", 0x44, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:21 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c73, 0x0) 2018/06/05 23:27:21 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c73, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:21 executing program 7 (fault-call:8 fault-nth:6): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:21 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x240]}, 0x6) 2018/06/05 23:27:21 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c2c, 0x0) 2018/06/05 23:27:21 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c92, r1) 2018/06/05 23:27:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x81ffffff00000000, &(0x7f000000a000)) 2018/06/05 23:27:21 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c2b, 0x0) [ 2119.093420] FAULT_INJECTION: forcing a failure. [ 2119.093420] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.105092] CPU: 1 PID: 3811 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2119.112027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2119.121385] Call Trace: [ 2119.123984] dump_stack+0x1b9/0x294 [ 2119.127623] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2119.132825] ? should_fail+0xd7/0xbcd [ 2119.136638] should_fail.cold.4+0xa/0x1a 2018/06/05 23:27:21 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c0a, r1) [ 2119.140706] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2119.145835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2119.151386] ? graph_lock+0x170/0x170 [ 2119.155202] ? find_held_lock+0x36/0x1c0 [ 2119.159362] ? __lock_is_held+0xb5/0x140 [ 2119.163454] ? check_same_owner+0x320/0x320 [ 2119.167787] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2119.172815] ? rcu_note_context_switch+0x710/0x710 [ 2119.177838] ? __lockdep_init_map+0x105/0x590 [ 2119.182344] __should_failslab+0x124/0x180 [ 2119.186619] should_failslab+0x9/0x14 [ 2119.190421] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2119.195535] ? init_wait_entry+0x1b0/0x1b0 [ 2119.199782] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2119.204815] sbitmap_queue_init_node+0x31c/0x840 [ 2119.209582] ? sbitmap_init_node+0x460/0x460 [ 2119.213999] ? rcu_read_lock_sched_held+0x108/0x120 [ 2119.219028] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2119.224312] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2119.229953] ? find_next_bit+0x104/0x130 [ 2119.234028] blk_mq_init_tags+0x17c/0x2b0 [ 2119.238190] blk_mq_alloc_rq_map+0x9f/0x220 [ 2119.242513] ? blk_mq_update_queue_map+0x17b/0x200 [ 2119.247457] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2119.251959] blk_mq_alloc_tag_set+0x612/0xab0 [ 2119.256457] ? idr_alloc+0x145/0x1a0 [ 2119.260182] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2119.265383] loop_add+0x2b4/0x9c0 [ 2119.268838] ? loop_lookup+0x102/0x220 [ 2119.272732] ? loop_queue_rq+0x640/0x640 [ 2119.276797] ? __fget_light+0x2ef/0x430 [ 2119.280780] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2119.285974] loop_control_ioctl+0x178/0x500 [ 2119.290295] ? loop_add+0x9c0/0x9c0 2018/06/05 23:27:21 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c3d, 0x0) 2018/06/05 23:27:21 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c0e, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2119.293927] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2119.299466] ? fput+0x130/0x1a0 [ 2119.302752] ? ksys_write+0x1a6/0x250 [ 2119.306562] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2119.311756] ? loop_add+0x9c0/0x9c0 [ 2119.315393] __ia32_compat_sys_ioctl+0x221/0x640 [ 2119.320159] do_fast_syscall_32+0x345/0xf9b [ 2119.324500] ? do_int80_syscall_32+0x880/0x880 [ 2119.329091] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2119.333946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2119.339494] ? syscall_return_slowpath+0x30f/0x5c0 [ 2119.344423] ? sysret32_from_system_call+0x5/0x46 [ 2119.349265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2119.354111] entry_SYSENTER_compat+0x70/0x7f [ 2119.358511] RIP: 0023:0xf7f1ccb9 [ 2119.361851] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2119.381124] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2119.388827] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2119.396097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2119.403471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2119.410739] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2119.418088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2119.429686] blk-mq: reduced tag depth (128 -> 64) 2018/06/05 23:27:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xedc0, &(0x7f000000a000)) 2018/06/05 23:27:21 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c29, r1) 2018/06/05 23:27:21 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c63, 0x0) [ 2119.651371] device bridge_slave_1 left promiscuous mode [ 2119.657191] bridge0: port 2(bridge_slave_1) entered disabled state [ 2119.697129] device bridge_slave_0 left promiscuous mode [ 2119.702779] bridge0: port 1(bridge_slave_0) entered disabled state 2018/06/05 23:27:22 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6c000000, &(0x7f000000a000)) [ 2119.756362] IPVS: ftp: loaded support on port[0] = 21 [ 2119.841780] team0 (unregistering): Port device team_slave_1 removed [ 2119.875135] team0 (unregistering): Port device team_slave_0 removed [ 2119.925181] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2119.962817] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2120.021107] bond0 (unregistering): Released all slaves [ 2120.627735] bridge0: port 1(bridge_slave_0) entered blocking state [ 2120.634167] bridge0: port 1(bridge_slave_0) entered disabled state [ 2120.641897] device bridge_slave_0 entered promiscuous mode [ 2120.679421] bridge0: port 2(bridge_slave_1) entered blocking state [ 2120.685849] bridge0: port 2(bridge_slave_1) entered disabled state [ 2120.693708] device bridge_slave_1 entered promiscuous mode [ 2120.731889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2120.769969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2120.880226] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2120.918951] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2121.089823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2121.097081] team0: Port device team_slave_0 added [ 2121.132323] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2121.139711] team0: Port device team_slave_1 added [ 2121.171000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2121.208397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2121.247662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2121.280451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2121.533713] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.540086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.546763] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.553133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.560561] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2122.336415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2122.414320] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2122.491641] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2122.497809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2122.505011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2122.512937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2122.582613] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:27:25 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c7b, 0x0) 2018/06/05 23:27:25 executing program 7 (fault-call:8 fault-nth:7): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:25 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c17, r1) 2018/06/05 23:27:25 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x14010000, &(0x7f000000a000)) 2018/06/05 23:27:25 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c6c, 0x0) 2018/06/05 23:27:25 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c7c, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:25 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c28, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:25 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x400000000000000]}, 0x6) [ 2123.205145] FAULT_INJECTION: forcing a failure. [ 2123.205145] name failslab, interval 1, probability 0, space 0, times 0 [ 2123.216605] CPU: 1 PID: 4113 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2123.223531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2123.232880] Call Trace: [ 2123.235483] dump_stack+0x1b9/0x294 [ 2123.239112] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2123.244307] ? finish_task_switch+0x1ca/0x840 [ 2123.248805] ? finish_task_switch+0x182/0x840 [ 2123.253295] should_fail.cold.4+0xa/0x1a [ 2123.257356] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2123.262462] ? __schedule+0x809/0x1e30 [ 2123.266352] ? __raw_spin_lock_init+0x1c/0x100 [ 2123.270944] ? __sched_text_start+0x8/0x8 [ 2123.275121] ? __lockdep_init_map+0x105/0x590 [ 2123.279624] ? __lock_is_held+0xb5/0x140 [ 2123.283686] ? __init_waitqueue_head+0x96/0x140 [ 2123.288368] ? check_same_owner+0x320/0x320 [ 2123.292685] ? sbitmap_queue_init_node+0xc6/0x840 [ 2123.297535] __should_failslab+0x124/0x180 [ 2123.301772] should_failslab+0x9/0x14 [ 2123.305566] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2123.310678] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2123.316410] ? find_next_bit+0x104/0x130 [ 2123.320468] __kmalloc_node+0x33/0x70 [ 2123.324261] blk_mq_alloc_rq_map+0xcc/0x220 [ 2123.328573] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2123.333065] blk_mq_alloc_tag_set+0x612/0xab0 [ 2123.337615] ? idr_alloc+0x145/0x1a0 [ 2123.341319] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2123.346501] loop_add+0x2b4/0x9c0 [ 2123.350311] ? loop_queue_rq+0x640/0x640 [ 2123.354373] ? loop_control_ioctl+0x16c/0x500 [ 2123.358867] loop_control_ioctl+0x178/0x500 [ 2123.363185] ? loop_add+0x9c0/0x9c0 [ 2123.366811] ? retint_kernel+0x10/0x10 [ 2123.370700] ? __ia32_compat_sys_ioctl+0xdc/0x640 [ 2123.375548] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2123.380731] ? loop_add+0x9c0/0x9c0 [ 2123.384356] __ia32_compat_sys_ioctl+0x221/0x640 [ 2123.389122] do_fast_syscall_32+0x345/0xf9b [ 2123.393441] ? do_int80_syscall_32+0x880/0x880 [ 2123.398031] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2123.402884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2123.408420] ? syscall_return_slowpath+0x30f/0x5c0 [ 2123.413346] ? sysret32_from_system_call+0x5/0x46 [ 2123.418190] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2123.423039] entry_SYSENTER_compat+0x70/0x7f [ 2123.427441] RIP: 0023:0xf7f1ccb9 [ 2123.430782] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2123.450073] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2123.457788] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2123.465320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2123.472585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2123.479864] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2123.487135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2123.500693] blk-mq: reduced tag depth (128 -> 64) 2018/06/05 23:27:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xe000000, &(0x7f000000a000)) 2018/06/05 23:27:26 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c5f, 0x0) 2018/06/05 23:27:26 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c6c, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:26 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c44, 0x0) 2018/06/05 23:27:26 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c4c, r1) 2018/06/05 23:27:26 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c44, 0x0) 2018/06/05 23:27:26 executing program 7 (fault-call:8 fault-nth:8): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:26 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x80550000]}, 0x6) 2018/06/05 23:27:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfffffff5, &(0x7f000000a000)) 2018/06/05 23:27:26 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c28, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:26 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c32, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2124.367237] FAULT_INJECTION: forcing a failure. [ 2124.367237] name failslab, interval 1, probability 0, space 0, times 0 [ 2124.378907] CPU: 0 PID: 4151 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2124.385849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2124.395198] Call Trace: [ 2124.397804] dump_stack+0x1b9/0x294 [ 2124.401440] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2124.406641] ? finish_task_switch+0x1ca/0x840 [ 2124.411144] ? finish_task_switch+0x182/0x840 [ 2124.415650] should_fail.cold.4+0xa/0x1a [ 2124.419723] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2124.424831] ? __schedule+0x809/0x1e30 [ 2124.428724] ? __sched_text_start+0x8/0x8 [ 2124.432873] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2124.437539] ? blk_mq_alloc_tag_set+0x612/0xab0 [ 2124.442207] ? loop_add+0x2b4/0x9c0 [ 2124.445832] ? loop_control_ioctl+0x178/0x500 [ 2124.450329] ? __ia32_compat_sys_ioctl+0x221/0x640 [ 2124.455263] ? __lock_is_held+0xb5/0x140 [ 2124.459341] ? check_same_owner+0x320/0x320 [ 2124.463680] __should_failslab+0x124/0x180 [ 2124.467918] should_failslab+0x9/0x14 [ 2124.471719] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2124.476829] ? kasan_unpoison_shadow+0x35/0x50 [ 2124.481421] __kmalloc_node+0x33/0x70 [ 2124.485222] blk_mq_alloc_rq_map+0x10d/0x220 [ 2124.489638] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2124.494136] blk_mq_alloc_tag_set+0x612/0xab0 [ 2124.498629] ? idr_alloc+0x145/0x1a0 [ 2124.502340] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2124.507532] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2124.512301] loop_add+0x2b4/0x9c0 [ 2124.515760] ? loop_queue_rq+0x640/0x640 [ 2124.519827] ? loop_control_ioctl+0x16c/0x500 [ 2124.524329] loop_control_ioctl+0x178/0x500 [ 2124.528653] ? loop_add+0x9c0/0x9c0 [ 2124.532286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2124.537821] ? fput+0x130/0x1a0 [ 2124.541097] ? ksys_write+0x1a6/0x250 [ 2124.544901] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2124.550096] ? loop_add+0x9c0/0x9c0 [ 2124.553725] __ia32_compat_sys_ioctl+0x221/0x640 [ 2124.558489] do_fast_syscall_32+0x345/0xf9b [ 2124.562812] ? do_int80_syscall_32+0x880/0x880 [ 2124.567399] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2124.572248] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2124.577787] ? syscall_return_slowpath+0x30f/0x5c0 [ 2124.582721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2124.588255] ? retint_user+0x18/0x18 [ 2124.591973] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2124.596816] entry_SYSENTER_compat+0x70/0x7f [ 2124.601220] RIP: 0023:0xf7f1ccb9 [ 2124.604571] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2124.623931] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2124.631649] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2124.638916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2124.646179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2124.653442] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2124.660712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2124.681417] blk-mq: reduced tag depth (128 -> 64) 2018/06/05 23:27:27 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x48000000, &(0x7f000000a000)) 2018/06/05 23:27:27 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c7a, 0x0) 2018/06/05 23:27:27 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c09, r1) 2018/06/05 23:27:27 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c0d, 0x0) 2018/06/05 23:27:27 executing program 7 (fault-call:8 fault-nth:9): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:27 executing program 3 (fault-call:2 fault-nth:0): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:27 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x40000000]}, 0x6) 2018/06/05 23:27:27 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c50, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2125.376399] FAULT_INJECTION: forcing a failure. [ 2125.376399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2125.388390] CPU: 1 PID: 4180 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2125.395319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2125.404757] Call Trace: [ 2125.407449] dump_stack+0x1b9/0x294 [ 2125.411086] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2125.416289] ? preempt_notifier_register+0x1e0/0x1e0 [ 2125.421411] should_fail.cold.4+0xa/0x1a [ 2125.425499] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2125.430609] ? __schedule+0x809/0x1e30 [ 2125.434508] ? __sched_text_start+0x8/0x8 [ 2125.438669] ? __lock_is_held+0xb5/0x140 [ 2125.442759] ? check_same_owner+0x320/0x320 [ 2125.447093] ? is_bpf_text_address+0xd7/0x170 [ 2125.451604] __alloc_pages_nodemask+0x34e/0xd70 [ 2125.456370] ? __save_stack_trace+0x7e/0xd0 [ 2125.460704] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 2125.465734] ? save_stack+0x43/0xd0 [ 2125.469362] ? kasan_kmalloc+0xc4/0xe0 [ 2125.473251] ? __kmalloc_node+0x47/0x70 [ 2125.477225] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 2125.481813] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2125.486489] ? blk_mq_alloc_tag_set+0x612/0xab0 [ 2125.491164] ? loop_add+0x2b4/0x9c0 [ 2125.494796] ? loop_control_ioctl+0x178/0x500 [ 2125.499303] ? __ia32_compat_sys_ioctl+0x221/0x640 [ 2125.504243] ? do_fast_syscall_32+0x345/0xf9b [ 2125.508745] ? entry_SYSENTER_compat+0x70/0x7f [ 2125.513343] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2125.518892] ? find_next_bit+0x104/0x130 [ 2125.522969] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2125.528043] ? blk_mq_hw_queue_to_node+0xd9/0x180 [ 2125.532928] blk_mq_alloc_rqs+0x317/0x9a0 [ 2125.537089] ? blk_mq_alloc_rq_map+0x220/0x220 [ 2125.541677] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2125.546958] ? kasan_unpoison_shadow+0x24/0x50 [ 2125.551548] ? kasan_unpoison_shadow+0x35/0x50 [ 2125.556141] ? __kmalloc_node+0x47/0x70 [ 2125.560138] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2125.564725] __blk_mq_alloc_rq_map+0x15f/0x2e0 [ 2125.569313] blk_mq_alloc_tag_set+0x612/0xab0 [ 2125.573815] ? idr_alloc+0x145/0x1a0 [ 2125.577529] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2125.582724] loop_add+0x2b4/0x9c0 [ 2125.586177] ? loop_lookup+0x102/0x220 [ 2125.590089] ? loop_queue_rq+0x640/0x640 [ 2125.594157] ? __fget_light+0x2ef/0x430 [ 2125.598146] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2125.603345] loop_control_ioctl+0x178/0x500 [ 2125.607671] ? loop_add+0x9c0/0x9c0 [ 2125.611305] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2125.616845] ? fput+0x130/0x1a0 [ 2125.620128] ? ksys_write+0x1a6/0x250 [ 2125.623939] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2125.629134] ? loop_add+0x9c0/0x9c0 [ 2125.632768] __ia32_compat_sys_ioctl+0x221/0x640 [ 2125.637536] do_fast_syscall_32+0x345/0xf9b [ 2125.641857] ? do_int80_syscall_32+0x880/0x880 [ 2125.646435] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2125.651276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2125.656808] ? syscall_return_slowpath+0x30f/0x5c0 [ 2125.661725] ? sysret32_from_system_call+0x5/0x46 [ 2125.666569] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2125.671404] entry_SYSENTER_compat+0x70/0x7f [ 2125.676488] RIP: 0023:0xf7f1ccb9 [ 2125.679843] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2125.699116] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2125.706901] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2125.714160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 2018/06/05 23:27:27 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c04, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:27 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c08, 0x0) 2018/06/05 23:27:27 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c4f, 0x0) 2018/06/05 23:27:27 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c03, r1) [ 2125.721427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2125.728691] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2125.735956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:28 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c35, r1) 2018/06/05 23:27:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9000000, &(0x7f000000a000)) [ 2125.958318] device bridge_slave_1 left promiscuous mode [ 2125.963922] bridge0: port 2(bridge_slave_1) entered disabled state [ 2125.988413] device bridge_slave_0 left promiscuous mode [ 2125.993999] bridge0: port 1(bridge_slave_0) entered disabled state [ 2125.996359] IPVS: ftp: loaded support on port[0] = 21 2018/06/05 23:27:28 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c1e, 0x0) [ 2126.139495] team0 (unregistering): Port device team_slave_1 removed [ 2126.165550] team0 (unregistering): Port device team_slave_0 removed 2018/06/05 23:27:28 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c48, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2126.191260] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/06/05 23:27:28 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x2, 0x0) 2018/06/05 23:27:28 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x11000000]}, 0x6) [ 2126.246047] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/06/05 23:27:28 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c78, 0x0) [ 2126.382501] bond0 (unregistering): Released all slaves [ 2127.250377] bridge0: port 1(bridge_slave_0) entered blocking state [ 2127.256818] bridge0: port 1(bridge_slave_0) entered disabled state [ 2127.264229] device bridge_slave_0 entered promiscuous mode [ 2127.315092] bridge0: port 2(bridge_slave_1) entered blocking state [ 2127.321503] bridge0: port 2(bridge_slave_1) entered disabled state [ 2127.336397] device bridge_slave_1 entered promiscuous mode [ 2127.373910] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2127.410142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2127.516546] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2127.557338] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2127.720650] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2127.728122] team0: Port device team_slave_0 added [ 2127.764660] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2127.772202] team0: Port device team_slave_1 added [ 2127.804619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2127.842798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2127.849847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2127.864011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2127.882089] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2127.889224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2127.897706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2127.917621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2127.924690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2127.933423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2128.147880] bridge0: port 2(bridge_slave_1) entered blocking state [ 2128.154319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2128.160961] bridge0: port 1(bridge_slave_0) entered blocking state [ 2128.167319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2128.174617] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2128.863139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2128.958448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2129.035550] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2129.110346] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2129.116510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2129.123555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2129.197808] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:27:32 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c46, r1) 2018/06/05 23:27:32 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x2000000, &(0x7f000000a000)) 2018/06/05 23:27:32 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c11, 0x0) 2018/06/05 23:27:32 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5452, 0x0) 2018/06/05 23:27:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:32 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c49, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:32 executing program 7 (fault-call:8 fault-nth:10): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:32 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x600]}, 0x6) [ 2129.814784] FAULT_INJECTION: forcing a failure. [ 2129.814784] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.830907] CPU: 1 PID: 4547 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2129.837843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2129.847192] Call Trace: [ 2129.849791] dump_stack+0x1b9/0x294 [ 2129.853515] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2129.858717] ? finish_task_switch+0x1ca/0x840 [ 2129.863206] ? finish_task_switch+0x182/0x840 [ 2129.867710] should_fail.cold.4+0xa/0x1a [ 2129.871789] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2129.876945] ? __schedule+0x809/0x1e30 [ 2129.880846] ? __sched_text_start+0x8/0x8 [ 2129.884997] ? find_held_lock+0x36/0x1c0 [ 2129.889068] ? __lock_is_held+0xb5/0x140 [ 2129.893149] ? check_same_owner+0x320/0x320 [ 2129.897466] ? print_usage_bug+0xc0/0xc0 [ 2129.901525] ? loop_init_request+0x7b/0x170 [ 2129.905847] __should_failslab+0x124/0x180 [ 2129.910095] should_failslab+0x9/0x14 [ 2129.913891] kmem_cache_alloc_node+0x272/0x780 [ 2129.918467] ? loop_info64_from_compat+0x940/0x940 [ 2129.923482] blk_alloc_queue_node+0xf3/0xf20 [ 2129.927892] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2129.932914] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2129.937932] ? lockdep_init_map+0x9/0x10 [ 2129.941989] ? debug_mutex_init+0x2d/0x60 [ 2129.946145] ? __mutex_init+0x1ef/0x280 [ 2129.950121] ? __ia32_sys_membarrier+0x150/0x150 [ 2129.954875] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2129.959462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2129.964994] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2129.969764] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 2129.974446] ? idr_alloc+0x145/0x1a0 [ 2129.978177] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2129.983370] blk_mq_init_queue+0x4b/0xb0 [ 2129.987438] loop_add+0x32b/0x9c0 [ 2129.990895] ? loop_lookup+0x102/0x220 [ 2129.994785] ? loop_queue_rq+0x640/0x640 [ 2129.998857] ? loop_control_ioctl+0x9b/0x500 [ 2130.003264] loop_control_ioctl+0x178/0x500 [ 2130.007587] ? loop_add+0x9c0/0x9c0 [ 2130.011314] ? __ia32_compat_sys_ioctl+0xf4/0x640 [ 2130.016168] ? write_comp_data+0x22/0x70 [ 2130.020236] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2130.025418] ? loop_add+0x9c0/0x9c0 [ 2130.029051] __ia32_compat_sys_ioctl+0x221/0x640 [ 2130.033829] do_fast_syscall_32+0x345/0xf9b [ 2130.038161] ? do_int80_syscall_32+0x880/0x880 [ 2130.042750] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2130.047594] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2130.053128] ? syscall_return_slowpath+0x30f/0x5c0 [ 2130.058067] ? sysret32_from_system_call+0x5/0x46 [ 2130.062922] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2130.067776] entry_SYSENTER_compat+0x70/0x7f [ 2130.072185] RIP: 0023:0xf7f1ccb9 [ 2130.075540] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2130.094874] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2130.102596] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2130.109867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2130.117138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2130.124407] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2130.131674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:32 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x402c5828, 0x0) 2018/06/05 23:27:32 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c32, 0x0) 2018/06/05 23:27:32 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c2a, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:32 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x50000000, &(0x7f000000a000)) 2018/06/05 23:27:32 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c17, 0x0) 2018/06/05 23:27:32 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c48, 0x0) 2018/06/05 23:27:33 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe803000000000000]}, 0x6) 2018/06/05 23:27:33 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4c, &(0x7f000000a000)) 2018/06/05 23:27:34 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c45, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:34 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c35, 0x0) 2018/06/05 23:27:34 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c75, r1) 2018/06/05 23:27:34 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xe803000000000000, &(0x7f000000a000)) 2018/06/05 23:27:34 executing program 7 (fault-call:8 fault-nth:11): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:34 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xfe4150000000000]}, 0x6) 2018/06/05 23:27:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x45}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:34 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c61, 0x0) [ 2131.977073] FAULT_INJECTION: forcing a failure. [ 2131.977073] name failslab, interval 1, probability 0, space 0, times 0 [ 2131.989131] CPU: 1 PID: 4609 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2131.996067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2132.005509] Call Trace: [ 2132.008105] dump_stack+0x1b9/0x294 [ 2132.011739] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2132.016945] should_fail.cold.4+0xa/0x1a [ 2132.021015] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/06/05 23:27:34 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c0e, r1) [ 2132.026125] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2132.031152] ? graph_lock+0x170/0x170 [ 2132.034968] ? find_held_lock+0x36/0x1c0 [ 2132.039045] ? __lock_is_held+0xb5/0x140 [ 2132.043134] ? check_same_owner+0x320/0x320 [ 2132.047469] ? rcu_note_context_switch+0x710/0x710 [ 2132.052406] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2132.057429] __should_failslab+0x124/0x180 [ 2132.061710] should_failslab+0x9/0x14 [ 2132.065520] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2132.070631] ? lockdep_init_map+0x9/0x10 [ 2132.074703] ? __init_waitqueue_head+0x96/0x140 [ 2132.079386] ? init_wait_entry+0x1b0/0x1b0 [ 2132.083640] __kmalloc_node+0x33/0x70 [ 2132.087456] ? mempool_alloc_slab+0x60/0x60 [ 2132.091783] mempool_init_node+0x12d/0x560 [ 2132.096034] ? mempool_free+0x370/0x370 [ 2132.100015] ? mempool_alloc_slab+0x60/0x60 [ 2132.104348] mempool_init+0x3d/0x50 [ 2132.107988] bioset_init+0x3cb/0x810 [ 2132.111712] ? bioset_exit+0x370/0x370 [ 2132.115621] ? loop_info64_from_compat+0x940/0x940 [ 2132.120565] blk_alloc_queue_node+0x287/0xf20 2018/06/05 23:27:34 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c75, 0x0) [ 2132.125074] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2132.130097] ? lockdep_init_map+0x9/0x10 [ 2132.134191] ? debug_mutex_init+0x2d/0x60 [ 2132.138344] ? __mutex_init+0x1ef/0x280 [ 2132.142326] ? __ia32_sys_membarrier+0x150/0x150 [ 2132.147100] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2132.151694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2132.157238] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2132.162003] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 2132.166681] ? idr_alloc+0x145/0x1a0 [ 2132.170401] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2132.175602] blk_mq_init_queue+0x4b/0xb0 [ 2132.179665] loop_add+0x32b/0x9c0 [ 2132.183117] ? loop_lookup+0x102/0x220 [ 2132.187007] ? loop_queue_rq+0x640/0x640 [ 2132.191069] ? retint_kernel+0x10/0x10 [ 2132.194980] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2132.200172] loop_control_ioctl+0x178/0x500 [ 2132.204495] ? loop_add+0x9c0/0x9c0 [ 2132.208121] ? retint_kernel+0x10/0x10 [ 2132.212024] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2132.217213] ? loop_add+0x9c0/0x9c0 [ 2132.220852] __ia32_compat_sys_ioctl+0x221/0x640 2018/06/05 23:27:34 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c71, 0x0) [ 2132.225618] do_fast_syscall_32+0x345/0xf9b [ 2132.229946] ? do_int80_syscall_32+0x880/0x880 [ 2132.234537] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2132.239392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2132.244934] ? syscall_return_slowpath+0x30f/0x5c0 [ 2132.249871] ? sysret32_from_system_call+0x5/0x46 [ 2132.254714] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2132.259547] entry_SYSENTER_compat+0x70/0x7f [ 2132.263946] RIP: 0023:0xf7f1ccb9 [ 2132.267297] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2132.286663] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2132.294373] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2132.301636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2132.308903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2132.316169] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2132.323440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2132.662278] device bridge_slave_1 left promiscuous mode [ 2132.667829] bridge0: port 2(bridge_slave_1) entered disabled state [ 2132.682534] device bridge_slave_0 left promiscuous mode [ 2132.688224] bridge0: port 1(bridge_slave_0) entered disabled state [ 2132.731687] team0 (unregistering): Port device team_slave_1 removed [ 2132.744824] team0 (unregistering): Port device team_slave_0 removed [ 2132.756561] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2132.771874] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2132.800114] bond0 (unregistering): Released all slaves 2018/06/05 23:27:35 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c47, 0x0) 2018/06/05 23:27:35 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x74000000, &(0x7f000000a000)) 2018/06/05 23:27:35 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c22, 0x0) 2018/06/05 23:27:35 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c2d, r1) 2018/06/05 23:27:35 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c75, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:35 executing program 7 (fault-call:8 fault-nth:12): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4000000000000000]}, 0x6) 2018/06/05 23:27:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x20001500}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 2133.041493] IPVS: ftp: loaded support on port[0] = 21 [ 2133.151417] FAULT_INJECTION: forcing a failure. [ 2133.151417] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.162897] CPU: 1 PID: 4644 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2133.169837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2133.179198] Call Trace: [ 2133.181804] dump_stack+0x1b9/0x294 [ 2133.185532] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2133.190731] ? perf_trace_lock_acquire+0xe3/0x980 [ 2133.195584] ? is_bpf_text_address+0xd7/0x170 [ 2133.200093] ? kernel_text_address+0x79/0xf0 [ 2133.204520] should_fail.cold.4+0xa/0x1a [ 2133.208598] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2133.213723] ? graph_lock+0x170/0x170 [ 2133.217533] ? save_stack+0xa9/0xd0 [ 2133.221248] ? kasan_kmalloc+0xc4/0xe0 [ 2133.225145] ? find_held_lock+0x36/0x1c0 [ 2133.229313] ? __lock_is_held+0xb5/0x140 [ 2133.233486] ? check_same_owner+0x320/0x320 [ 2133.237822] ? rcu_note_context_switch+0x710/0x710 [ 2133.242766] __should_failslab+0x124/0x180 [ 2133.247014] should_failslab+0x9/0x14 [ 2133.250826] kmem_cache_alloc+0x2af/0x760 [ 2133.254992] ? kasan_unpoison_shadow+0x35/0x50 [ 2133.259587] ? kasan_kmalloc+0xc4/0xe0 [ 2133.263482] ? mempool_free+0x370/0x370 [ 2133.267463] mempool_alloc_slab+0x44/0x60 [ 2133.271623] mempool_init_node+0x2d4/0x560 [ 2133.275960] ? mempool_free+0x370/0x370 [ 2133.279943] ? mempool_alloc_slab+0x60/0x60 [ 2133.284270] mempool_init+0x3d/0x50 [ 2133.287913] bioset_init+0x3cb/0x810 [ 2133.291637] ? bioset_exit+0x370/0x370 [ 2133.295524] ? loop_info64_from_compat+0x940/0x940 [ 2133.300465] blk_alloc_queue_node+0x287/0xf20 [ 2133.304976] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2133.310006] ? lockdep_init_map+0x9/0x10 [ 2133.314078] ? debug_mutex_init+0x2d/0x60 [ 2133.318237] ? __mutex_init+0x1ef/0x280 [ 2133.322225] ? __ia32_sys_membarrier+0x150/0x150 [ 2133.326988] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2133.331584] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2133.336177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2133.341743] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2133.346510] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 2133.351184] ? idr_alloc+0x145/0x1a0 [ 2133.354903] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2133.360102] blk_mq_init_queue+0x4b/0xb0 [ 2133.364165] loop_add+0x32b/0x9c0 [ 2133.367623] ? loop_lookup+0x102/0x220 [ 2133.371518] ? loop_queue_rq+0x640/0x640 [ 2133.375675] ? __fget_light+0x2ef/0x430 [ 2133.379659] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2133.384858] loop_control_ioctl+0x178/0x500 [ 2133.389187] ? loop_add+0x9c0/0x9c0 [ 2133.392815] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2133.398360] ? fput+0x130/0x1a0 [ 2133.401643] ? ksys_write+0x1a6/0x250 [ 2133.405459] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2133.410657] ? loop_add+0x9c0/0x9c0 [ 2133.414288] __ia32_compat_sys_ioctl+0x221/0x640 [ 2133.419058] do_fast_syscall_32+0x345/0xf9b [ 2133.423393] ? do_int80_syscall_32+0x880/0x880 [ 2133.427986] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2133.432841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2133.438390] ? syscall_return_slowpath+0x30f/0x5c0 [ 2133.443330] ? sysret32_from_system_call+0x5/0x46 [ 2133.448191] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2133.453042] entry_SYSENTER_compat+0x70/0x7f [ 2133.457447] RIP: 0023:0xf7f1ccb9 [ 2133.460800] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2133.480282] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2133.488004] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2133.495300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 2018/06/05 23:27:35 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c24, 0x0) [ 2133.502574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2133.509847] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2133.517128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:35 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c54, 0x0) 2018/06/05 23:27:36 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c23, 0x0) 2018/06/05 23:27:36 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8901, &(0x7f000000a000)) 2018/06/05 23:27:36 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c04, 0x0) 2018/06/05 23:27:36 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c33, 0x0) 2018/06/05 23:27:36 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x5016000000000000]}, 0x6) 2018/06/05 23:27:36 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c34, 0x0) 2018/06/05 23:27:36 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c75, 0x0) 2018/06/05 23:27:36 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x200000000000000, &(0x7f000000a000)) [ 2134.238680] bridge0: port 1(bridge_slave_0) entered blocking state [ 2134.245164] bridge0: port 1(bridge_slave_0) entered disabled state [ 2134.302966] device bridge_slave_0 entered promiscuous mode [ 2134.450328] bridge0: port 2(bridge_slave_1) entered blocking state [ 2134.456812] bridge0: port 2(bridge_slave_1) entered disabled state [ 2134.536759] device bridge_slave_1 entered promiscuous mode [ 2134.617719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2134.662494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2134.818763] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2134.859854] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2135.044178] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2135.051613] team0: Port device team_slave_0 added [ 2135.091795] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2135.099206] team0: Port device team_slave_1 added [ 2135.155987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2135.211082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2135.248492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2135.255661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2135.269481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2135.288590] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2135.295700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2135.306430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2135.586389] bridge0: port 2(bridge_slave_1) entered blocking state [ 2135.592779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2135.599434] bridge0: port 1(bridge_slave_0) entered blocking state [ 2135.605817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2135.613125] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2136.384828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2136.462429] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2136.541981] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2136.548226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2136.555728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2136.568107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2136.633841] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:27:39 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c6a, 0x0) 2018/06/05 23:27:39 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c1c, 0x0) 2018/06/05 23:27:39 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c16, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:39 executing program 7 (fault-call:8 fault-nth:13): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:39 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4000000000000, &(0x7f000000a000)) 2018/06/05 23:27:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x7ffff000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:39 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c2e, r1) 2018/06/05 23:27:39 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x200000000000000]}, 0x6) [ 2137.322071] FAULT_INJECTION: forcing a failure. [ 2137.322071] name failslab, interval 1, probability 0, space 0, times 0 [ 2137.333943] CPU: 1 PID: 4986 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2137.340873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2137.350229] Call Trace: [ 2137.352820] dump_stack+0x1b9/0x294 [ 2137.356459] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2137.361659] should_fail.cold.4+0xa/0x1a [ 2137.365732] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2137.370843] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2137.375870] ? graph_lock+0x170/0x170 [ 2137.379685] ? find_held_lock+0x36/0x1c0 [ 2137.383755] ? __lock_is_held+0xb5/0x140 [ 2137.387832] ? check_same_owner+0x320/0x320 [ 2137.392160] ? retint_kernel+0x10/0x10 [ 2137.396060] ? rcu_note_context_switch+0x710/0x710 [ 2137.401001] __should_failslab+0x124/0x180 [ 2137.405240] should_failslab+0x9/0x14 [ 2137.409042] kmem_cache_alloc+0x2af/0x760 [ 2137.413202] ? mempool_free+0x370/0x370 [ 2137.417176] ? mempool_free+0x370/0x370 2018/06/05 23:27:39 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c2a, r1) [ 2137.421148] mempool_alloc_slab+0x44/0x60 [ 2137.425306] mempool_init_node+0x2d4/0x560 [ 2137.429550] ? mempool_free+0x370/0x370 [ 2137.433526] ? mempool_alloc_slab+0x60/0x60 [ 2137.437856] mempool_init+0x3d/0x50 [ 2137.441487] bioset_init+0x3cb/0x810 [ 2137.445209] ? bioset_exit+0x370/0x370 [ 2137.449107] blk_alloc_queue_node+0x287/0xf20 [ 2137.453608] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2137.458644] ? lockdep_init_map+0x9/0x10 [ 2137.462721] ? debug_mutex_init+0x2d/0x60 [ 2137.466881] ? __mutex_init+0x1ef/0x280 [ 2137.470869] ? __ia32_sys_membarrier+0x150/0x150 [ 2137.475668] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2137.481215] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2137.485985] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 2137.490662] ? idr_alloc+0x145/0x1a0 [ 2137.494384] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2137.499588] blk_mq_init_queue+0x4b/0xb0 [ 2137.503664] loop_add+0x32b/0x9c0 [ 2137.507119] ? loop_lookup+0x102/0x220 [ 2137.511011] ? loop_queue_rq+0x640/0x640 [ 2137.515076] ? retint_kernel+0x10/0x10 2018/06/05 23:27:39 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c28, 0x0) 2018/06/05 23:27:39 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c72, 0x0) [ 2137.518977] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2137.524178] loop_control_ioctl+0x178/0x500 [ 2137.528506] ? loop_add+0x9c0/0x9c0 [ 2137.532140] ? retint_kernel+0x10/0x10 [ 2137.536032] ? loop_add+0x9c0/0x9c0 [ 2137.539676] ? loop_add+0x9c0/0x9c0 [ 2137.543317] __ia32_compat_sys_ioctl+0x221/0x640 [ 2137.548102] do_fast_syscall_32+0x345/0xf9b [ 2137.552466] ? do_int80_syscall_32+0x880/0x880 [ 2137.557051] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2137.561903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2137.567872] ? syscall_return_slowpath+0x30f/0x5c0 [ 2137.572790] ? sysret32_from_system_call+0x5/0x46 [ 2137.577634] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2137.582478] entry_SYSENTER_compat+0x70/0x7f [ 2137.587151] RIP: 0023:0xf7f1ccb9 [ 2137.590504] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2137.609850] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2137.617916] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2137.625195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2137.632457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2137.639725] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2137.646983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:40 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c4a, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:40 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c42, 0x0) 2018/06/05 23:27:40 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfeffff00000000, &(0x7f000000a000)) 2018/06/05 23:27:40 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c3d, r1) [ 2138.012507] device bridge_slave_1 left promiscuous mode [ 2138.018322] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.047824] IPVS: ftp: loaded support on port[0] = 21 [ 2138.094409] device bridge_slave_0 left promiscuous mode [ 2138.100211] bridge0: port 1(bridge_slave_0) entered disabled state 2018/06/05 23:27:40 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c19, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:40 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x94050000]}, 0x6) 2018/06/05 23:27:40 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c25, 0x0) [ 2138.345469] team0 (unregistering): Port device team_slave_1 removed [ 2138.383421] team0 (unregistering): Port device team_slave_0 removed [ 2138.417139] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2138.451366] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2138.549629] bond0 (unregistering): Released all slaves [ 2138.994130] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.000553] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.008488] device bridge_slave_0 entered promiscuous mode [ 2139.047907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.054399] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.062404] device bridge_slave_1 entered promiscuous mode [ 2139.100568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2139.139931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2139.257136] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2139.304625] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2139.501417] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2139.509546] team0: Port device team_slave_0 added [ 2139.547005] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2139.555006] team0: Port device team_slave_1 added [ 2139.591010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2139.630623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2139.670946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2139.710389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2140.061458] bridge0: port 2(bridge_slave_1) entered blocking state [ 2140.067859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2140.074514] bridge0: port 1(bridge_slave_0) entered blocking state [ 2140.080891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2140.088236] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2140.767220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2140.885447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2140.960076] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2141.037640] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2141.043813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2141.051370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2141.126125] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:27:44 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x300, &(0x7f000000a000)) 2018/06/05 23:27:44 executing program 7 (fault-call:8 fault-nth:14): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:44 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c5e, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:44 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c2e, 0x0) 2018/06/05 23:27:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1045}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:44 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0xc0189436, 0x0) 2018/06/05 23:27:44 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c7e, r1) 2018/06/05 23:27:44 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xa000000]}, 0x6) 2018/06/05 23:27:44 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c4b, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2141.753203] FAULT_INJECTION: forcing a failure. [ 2141.753203] name failslab, interval 1, probability 0, space 0, times 0 [ 2141.764796] CPU: 1 PID: 5307 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2141.771731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2141.781098] Call Trace: [ 2141.783705] dump_stack+0x1b9/0x294 [ 2141.787350] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2141.792555] ? finish_task_switch+0x1ca/0x840 [ 2141.797063] ? finish_task_switch+0x182/0x840 2018/06/05 23:27:44 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c02, 0x0) [ 2141.801573] should_fail.cold.4+0xa/0x1a [ 2141.805642] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2141.810767] ? __schedule+0x809/0x1e30 [ 2141.814661] ? blk_alloc_queue_node+0x287/0xf20 [ 2141.819347] ? blk_mq_init_queue+0x4b/0xb0 [ 2141.823600] ? __sched_text_start+0x8/0x8 [ 2141.827745] ? find_held_lock+0x36/0x1c0 [ 2141.831800] ? __lock_is_held+0xb5/0x140 [ 2141.835872] ? check_same_owner+0x320/0x320 [ 2141.840195] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2141.845202] __should_failslab+0x124/0x180 [ 2141.849446] should_failslab+0x9/0x14 [ 2141.853244] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2141.858349] ? lockdep_init_map+0x9/0x10 [ 2141.862417] ? __init_waitqueue_head+0x96/0x140 [ 2141.867087] ? init_wait_entry+0x1b0/0x1b0 [ 2141.871418] __kmalloc_node+0x33/0x70 [ 2141.875218] ? mempool_alloc_slab+0x60/0x60 [ 2141.879539] mempool_init_node+0x12d/0x560 [ 2141.883807] ? mempool_free+0x370/0x370 [ 2141.887789] ? mempool_alloc_slab+0x60/0x60 [ 2141.892116] mempool_init+0x3d/0x50 [ 2141.895766] bioset_init+0x626/0x810 [ 2141.899487] ? bioset_exit+0x370/0x370 [ 2141.903380] ? ida_simple_get+0x2e/0x260 [ 2141.907442] blk_alloc_queue_node+0x287/0xf20 [ 2141.911952] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2141.916976] ? lockdep_init_map+0x9/0x10 [ 2141.921043] ? debug_mutex_init+0x2d/0x60 [ 2141.925196] ? __mutex_init+0x1ef/0x280 [ 2141.929174] ? __ia32_sys_membarrier+0x150/0x150 [ 2141.933939] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2141.938535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2141.944076] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2141.948825] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 2141.953481] ? idr_alloc+0x145/0x1a0 [ 2141.957198] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2141.962487] blk_mq_init_queue+0x4b/0xb0 [ 2141.966546] loop_add+0x32b/0x9c0 [ 2141.969983] ? loop_lookup+0x102/0x220 [ 2141.973867] ? loop_queue_rq+0x640/0x640 [ 2141.977940] ? __fget_light+0x2ef/0x430 [ 2141.981912] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2141.987098] loop_control_ioctl+0x178/0x500 [ 2141.991497] ? loop_add+0x9c0/0x9c0 [ 2141.995129] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2142.000656] ? fput+0x130/0x1a0 [ 2142.003919] ? ksys_write+0x1a6/0x250 [ 2142.007712] ? __do_page_fault+0x441/0xe40 [ 2142.011938] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2142.017119] ? loop_add+0x9c0/0x9c0 [ 2142.020752] __ia32_compat_sys_ioctl+0x221/0x640 [ 2142.025508] do_fast_syscall_32+0x345/0xf9b [ 2142.029832] ? do_int80_syscall_32+0x880/0x880 [ 2142.034427] ? _raw_spin_unlock_irq+0x27/0x70 [ 2142.038927] ? finish_task_switch+0x1ca/0x840 [ 2142.043433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2142.048966] ? syscall_return_slowpath+0x30f/0x5c0 [ 2142.053900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2142.059442] ? retint_user+0x18/0x18 [ 2142.063156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2142.067988] entry_SYSENTER_compat+0x70/0x7f [ 2142.072381] RIP: 0023:0xf7f1ccb9 [ 2142.075725] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2142.095038] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 2018/06/05 23:27:44 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c0f, 0x0) [ 2142.102781] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2142.110052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2142.117320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2142.124575] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2142.131835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:44 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x7a00, &(0x7f000000a000)) 2018/06/05 23:27:44 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c15, 0x0) 2018/06/05 23:27:45 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1200, &(0x7f000000a000)) 2018/06/05 23:27:45 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c05, 0x0) 2018/06/05 23:27:45 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c68, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:45 executing program 7 (fault-call:8 fault-nth:15): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:45 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c41, 0x0) 2018/06/05 23:27:45 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c02, r1) 2018/06/05 23:27:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:45 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x800000000000000]}, 0x6) 2018/06/05 23:27:45 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x7400, &(0x7f000000a000)) [ 2142.832388] FAULT_INJECTION: forcing a failure. [ 2142.832388] name failslab, interval 1, probability 0, space 0, times 0 [ 2142.843897] CPU: 1 PID: 5359 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2142.850832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2142.860188] Call Trace: [ 2142.862805] dump_stack+0x1b9/0x294 [ 2142.866446] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2142.871643] ? finish_task_switch+0x1ca/0x840 [ 2142.876144] ? finish_task_switch+0x182/0x840 [ 2142.880650] should_fail.cold.4+0xa/0x1a [ 2142.884727] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2142.889842] ? __schedule+0x809/0x1e30 [ 2142.893730] ? save_stack+0xa9/0xd0 [ 2142.897364] ? __sched_text_start+0x8/0x8 [ 2142.901499] ? find_held_lock+0x36/0x1c0 [ 2142.905551] ? __lock_is_held+0xb5/0x140 [ 2142.909614] ? check_same_owner+0x320/0x320 [ 2142.913934] __should_failslab+0x124/0x180 [ 2142.918160] should_failslab+0x9/0x14 [ 2142.921949] kmem_cache_alloc+0x2af/0x760 [ 2142.926082] ? kasan_unpoison_shadow+0x35/0x50 [ 2142.930655] ? kasan_kmalloc+0xc4/0xe0 [ 2142.934538] ? mempool_free+0x370/0x370 [ 2142.938502] mempool_alloc_slab+0x44/0x60 [ 2142.942637] mempool_init_node+0x2d4/0x560 [ 2142.946868] ? mempool_free+0x370/0x370 [ 2142.950830] ? mempool_alloc_slab+0x60/0x60 [ 2142.955139] mempool_init+0x3d/0x50 [ 2142.958758] bioset_init+0x626/0x810 [ 2142.962471] ? bioset_exit+0x370/0x370 [ 2142.966377] ? ida_simple_get+0x1c0/0x260 [ 2142.970517] blk_alloc_queue_node+0x287/0xf20 [ 2142.975017] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2142.980031] ? lockdep_init_map+0x9/0x10 [ 2142.984082] ? debug_mutex_init+0x2d/0x60 [ 2142.988216] ? __mutex_init+0x1ef/0x280 [ 2142.992179] ? __ia32_sys_membarrier+0x150/0x150 [ 2142.996940] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2143.001512] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2143.007036] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2143.011782] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 2143.016440] ? idr_alloc+0x145/0x1a0 [ 2143.020141] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2143.025504] blk_mq_init_queue+0x4b/0xb0 [ 2143.029555] loop_add+0x32b/0x9c0 [ 2143.032996] ? loop_lookup+0x102/0x220 [ 2143.036875] ? loop_queue_rq+0x640/0x640 [ 2143.040938] ? __fget_light+0x2ef/0x430 [ 2143.044909] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2143.050096] loop_control_ioctl+0x178/0x500 [ 2143.054404] ? loop_add+0x9c0/0x9c0 [ 2143.058027] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2143.063551] ? fput+0x130/0x1a0 [ 2143.066817] ? ksys_write+0x1a6/0x250 [ 2143.070610] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2143.075797] ? loop_add+0x9c0/0x9c0 [ 2143.079421] __ia32_compat_sys_ioctl+0x221/0x640 [ 2143.084175] do_fast_syscall_32+0x345/0xf9b [ 2143.088490] ? do_int80_syscall_32+0x880/0x880 [ 2143.093059] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2143.097907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2143.103544] ? syscall_return_slowpath+0x30f/0x5c0 [ 2143.108576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2143.114102] ? retint_user+0x18/0x18 [ 2143.117806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2143.122643] entry_SYSENTER_compat+0x70/0x7f [ 2143.127050] RIP: 0023:0xf7f1ccb9 [ 2143.130396] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2143.149730] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2143.157428] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2143.164684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2143.171947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2018/06/05 23:27:45 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c50, 0x0) 2018/06/05 23:27:45 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x12000000, &(0x7f000000a000)) 2018/06/05 23:27:45 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c47, 0x0) [ 2143.179200] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2143.186455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:45 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x5452, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:45 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x541b, 0x0) 2018/06/05 23:27:45 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c0b, 0x0) 2018/06/05 23:27:45 executing program 7 (fault-call:8 fault-nth:16): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:45 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x40049409, r1) 2018/06/05 23:27:45 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c7c, 0x0) 2018/06/05 23:27:45 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x5460, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:46 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x100000000000000]}, 0x6) [ 2143.891417] FAULT_INJECTION: forcing a failure. [ 2143.891417] name failslab, interval 1, probability 0, space 0, times 0 [ 2143.903052] CPU: 0 PID: 5403 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2143.909989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2143.919345] Call Trace: [ 2143.921945] dump_stack+0x1b9/0x294 [ 2143.925582] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2143.930779] ? finish_task_switch+0x1ca/0x840 [ 2143.935263] ? finish_task_switch+0x182/0x840 [ 2143.939753] should_fail.cold.4+0xa/0x1a [ 2143.943806] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2143.948909] ? __schedule+0x809/0x1e30 [ 2143.952791] ? __sched_text_start+0x8/0x8 [ 2143.957027] ? find_held_lock+0x36/0x1c0 [ 2143.961085] ? __lock_is_held+0xb5/0x140 [ 2143.965153] ? check_same_owner+0x320/0x320 [ 2143.969487] __should_failslab+0x124/0x180 [ 2143.973716] should_failslab+0x9/0x14 [ 2143.977504] kmem_cache_alloc+0x2af/0x760 [ 2143.981645] ? mempool_alloc_slab+0x44/0x60 [ 2143.985959] ? mempool_free+0x370/0x370 [ 2143.989920] ? mempool_free+0x370/0x370 [ 2143.993882] mempool_alloc_slab+0x44/0x60 [ 2143.998034] mempool_init_node+0x2d4/0x560 [ 2144.002273] ? mempool_free+0x370/0x370 [ 2144.006237] ? mempool_alloc_slab+0x60/0x60 [ 2144.010545] mempool_init+0x3d/0x50 [ 2144.014171] bioset_init+0x626/0x810 [ 2144.017877] ? bioset_exit+0x370/0x370 [ 2144.021757] ? ida_simple_get+0x2e/0x260 [ 2144.025813] blk_alloc_queue_node+0x287/0xf20 [ 2144.030299] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2144.035305] ? lockdep_init_map+0x9/0x10 [ 2144.039352] ? debug_mutex_init+0x2d/0x60 [ 2144.043487] ? __mutex_init+0x1ef/0x280 [ 2144.047452] ? __ia32_sys_membarrier+0x150/0x150 [ 2144.052210] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2144.056786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2144.062309] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2144.067056] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 2144.071720] ? idr_alloc+0x145/0x1a0 [ 2144.075425] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2144.080607] blk_mq_init_queue+0x4b/0xb0 [ 2144.084656] loop_add+0x32b/0x9c0 [ 2144.088107] ? loop_lookup+0x102/0x220 [ 2144.092068] ? loop_queue_rq+0x640/0x640 [ 2144.096125] ? __fget_light+0x2ef/0x430 [ 2144.100106] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2144.105287] loop_control_ioctl+0x178/0x500 [ 2144.109606] ? loop_add+0x9c0/0x9c0 [ 2144.113220] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2144.117974] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2144.123152] ? loop_add+0x9c0/0x9c0 [ 2144.126769] __ia32_compat_sys_ioctl+0x221/0x640 [ 2144.131530] do_fast_syscall_32+0x345/0xf9b [ 2144.135844] ? do_int80_syscall_32+0x880/0x880 [ 2144.140414] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2144.145246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2144.150769] ? syscall_return_slowpath+0x30f/0x5c0 [ 2144.155695] ? sysret32_from_system_call+0x5/0x46 [ 2144.160538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2144.165372] entry_SYSENTER_compat+0x70/0x7f [ 2144.169766] RIP: 0023:0xf7f1ccb9 [ 2144.173116] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2144.192450] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2144.200145] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2144.207397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2144.214651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2144.221908] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2144.229168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:47 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c76, 0x0) 2018/06/05 23:27:47 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c0c, 0x0) 2018/06/05 23:27:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:47 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c52, r1) 2018/06/05 23:27:47 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c1e, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:47 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x84030000, &(0x7f000000a000)) 2018/06/05 23:27:47 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x2]}, 0x6) 2018/06/05 23:27:47 executing program 7 (fault-call:8 fault-nth:17): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:47 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x2000, &(0x7f000000a000)) 2018/06/05 23:27:47 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c57, 0x0) [ 2144.837663] FAULT_INJECTION: forcing a failure. [ 2144.837663] name failslab, interval 1, probability 0, space 0, times 0 [ 2144.849891] CPU: 1 PID: 5428 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2144.856819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2144.866167] Call Trace: [ 2144.868746] dump_stack+0x1b9/0x294 [ 2144.872367] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2144.877551] ? perf_trace_lock_acquire+0xe3/0x980 [ 2144.882389] should_fail.cold.4+0xa/0x1a [ 2144.886434] ? mark_held_locks+0xc9/0x160 [ 2144.890573] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2144.895664] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2144.900685] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2144.905437] ? graph_lock+0x170/0x170 [ 2144.909239] ? find_held_lock+0x36/0x1c0 [ 2144.913293] ? __lock_is_held+0xb5/0x140 [ 2144.917443] ? check_same_owner+0x320/0x320 [ 2144.921764] ? rcu_note_context_switch+0x710/0x710 [ 2144.926684] ? mempool_free+0x370/0x370 [ 2144.930650] __should_failslab+0x124/0x180 [ 2144.934882] should_failslab+0x9/0x14 [ 2144.938671] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2144.943766] ? bioset_exit+0x370/0x370 [ 2144.947639] ? loop_info64_from_compat+0x940/0x940 [ 2144.952562] bdi_alloc_node+0x67/0xe0 [ 2144.956351] blk_alloc_queue_node+0x2b7/0xf20 [ 2144.960848] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2144.965863] ? lockdep_init_map+0x9/0x10 [ 2144.969911] ? debug_mutex_init+0x2d/0x60 [ 2144.974046] ? __mutex_init+0x1ef/0x280 [ 2144.978011] ? __ia32_sys_membarrier+0x150/0x150 [ 2144.982773] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2144.987350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2144.992875] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2144.997622] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 2145.002279] ? idr_alloc+0x145/0x1a0 [ 2145.005985] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2145.011164] ? retint_kernel+0x10/0x10 [ 2145.015045] blk_mq_init_queue+0x4b/0xb0 [ 2145.019095] loop_add+0x32b/0x9c0 [ 2145.022549] ? loop_lookup+0x102/0x220 [ 2145.026436] ? loop_queue_rq+0x640/0x640 [ 2145.030493] ? __fget_light+0x2ef/0x430 [ 2145.034457] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2145.039633] loop_control_ioctl+0x178/0x500 [ 2145.043942] ? loop_add+0x9c0/0x9c0 [ 2145.047556] ? ksys_write+0x1a6/0x250 [ 2145.051341] ? ksys_write+0x1be/0x250 [ 2145.055137] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2145.060314] ? loop_add+0x9c0/0x9c0 [ 2145.063929] __ia32_compat_sys_ioctl+0x221/0x640 [ 2145.068678] do_fast_syscall_32+0x345/0xf9b [ 2145.072988] ? do_int80_syscall_32+0x880/0x880 [ 2145.077558] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2145.082390] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2145.087916] ? syscall_return_slowpath+0x30f/0x5c0 [ 2145.092843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2145.098375] ? retint_user+0x18/0x18 [ 2145.102079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2145.106912] entry_SYSENTER_compat+0x70/0x7f [ 2145.111305] RIP: 0023:0xf7f1ccb9 [ 2145.114652] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 2018/06/05 23:27:47 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c39, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:47 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x5000, &(0x7f000000a000)) [ 2145.133994] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2145.141704] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2145.148957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2145.156209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2145.163471] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2145.170725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:47 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c14, 0x0) 2018/06/05 23:27:47 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c59, 0x0) 2018/06/05 23:27:47 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1800000000000000, &(0x7f000000a000)) 2018/06/05 23:27:47 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c5d, 0x0) 2018/06/05 23:27:48 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c69, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:48 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c49, 0x0) 2018/06/05 23:27:48 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c7c, 0x0) 2018/06/05 23:27:48 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x7000000]}, 0x6) 2018/06/05 23:27:48 executing program 7 (fault-call:8 fault-nth:18): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:48 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xba03000000000000, &(0x7f000000a000)) 2018/06/05 23:27:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1300) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:48 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c34, r1) 2018/06/05 23:27:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000100)=0xc) sendto$inet(r0, &(0x7f0000000200)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0xfffffffffffffffc, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000180)=0x44) [ 2145.996122] FAULT_INJECTION: forcing a failure. [ 2145.996122] name failslab, interval 1, probability 0, space 0, times 0 [ 2146.008174] CPU: 0 PID: 5490 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2146.015107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2146.024461] Call Trace: [ 2146.027059] dump_stack+0x1b9/0x294 [ 2146.030782] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2146.035993] ? kasan_check_write+0x14/0x20 [ 2146.040239] ? finish_task_switch+0x28b/0x840 [ 2146.044757] should_fail.cold.4+0xa/0x1a [ 2146.048839] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2146.053976] ? __schedule+0x809/0x1e30 [ 2146.057894] ? __sched_text_start+0x8/0x8 [ 2146.062059] ? find_held_lock+0x36/0x1c0 [ 2146.066144] ? __lock_is_held+0xb5/0x140 [ 2146.070233] ? check_same_owner+0x320/0x320 [ 2146.074576] __should_failslab+0x124/0x180 [ 2146.078826] should_failslab+0x9/0x14 [ 2146.082637] kmem_cache_alloc_trace+0x2cb/0x780 [ 2146.087316] ? _raw_spin_unlock_irqrestore+0x74/0xc0 2018/06/05 23:27:48 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c66, 0x0) 2018/06/05 23:27:48 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c45, r1) [ 2146.092431] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2146.097461] wb_congested_get_create+0x1ca/0x450 [ 2146.102229] ? wb_wakeup_delayed+0xf0/0xf0 [ 2146.106476] ? __lockdep_init_map+0x105/0x590 [ 2146.110973] wb_init+0x62e/0x9e0 [ 2146.114340] ? bdi_put+0x180/0x180 [ 2146.117879] ? mark_held_locks+0xc9/0x160 [ 2146.122046] ? entry_SYSENTER_compat+0x70/0x7f [ 2146.126629] ? __raw_spin_lock_init+0x1c/0x100 [ 2146.131227] ? mark_held_locks+0xc9/0x160 [ 2146.135387] ? __raw_spin_lock_init+0x1c/0x100 [ 2146.139971] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2146.144994] ? lockdep_init_map+0x9/0x10 [ 2146.149061] bdi_init+0x353/0x510 [ 2146.152515] ? wb_init+0x9e0/0x9e0 [ 2146.156062] ? bdi_alloc_node+0x67/0xe0 [ 2146.160041] ? bdi_alloc_node+0x67/0xe0 [ 2146.164018] ? rcu_read_lock_sched_held+0x108/0x120 [ 2146.169037] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2146.174314] ? bioset_exit+0x370/0x370 [ 2146.178193] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2146.183201] bdi_alloc_node+0x81/0xe0 [ 2146.187006] blk_alloc_queue_node+0x2b7/0xf20 [ 2146.191505] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2146.196522] ? lockdep_init_map+0x9/0x10 [ 2146.200591] ? debug_mutex_init+0x2d/0x60 [ 2146.204745] ? __mutex_init+0x1ef/0x280 [ 2146.208719] ? __ia32_sys_membarrier+0x150/0x150 [ 2146.213477] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2146.218062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2146.223590] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2146.228344] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 2146.233016] ? idr_alloc+0x145/0x1a0 [ 2146.236725] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2146.241899] blk_mq_init_queue+0x4b/0xb0 [ 2146.245962] loop_add+0x32b/0x9c0 [ 2146.249415] ? loop_lookup+0x102/0x220 [ 2146.253319] ? loop_queue_rq+0x640/0x640 [ 2146.257390] ? retint_kernel+0x10/0x10 [ 2146.261283] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2146.266477] loop_control_ioctl+0x178/0x500 [ 2146.270793] ? loop_add+0x9c0/0x9c0 [ 2146.274418] ? retint_kernel+0x10/0x10 [ 2146.278297] ? loop_add+0x9c0/0x9c0 [ 2146.281920] ? loop_add+0x9c0/0x9c0 [ 2146.285544] __ia32_compat_sys_ioctl+0x221/0x640 [ 2146.290302] do_fast_syscall_32+0x345/0xf9b [ 2146.294621] ? do_int80_syscall_32+0x880/0x880 [ 2146.299200] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2146.304043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2146.309579] ? syscall_return_slowpath+0x30f/0x5c0 [ 2146.314502] ? sysret32_from_system_call+0x5/0x46 [ 2146.319347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2146.324192] entry_SYSENTER_compat+0x70/0x7f [ 2146.328588] RIP: 0023:0xf7f1ccb9 [ 2146.331961] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2146.351335] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2146.359051] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2146.366323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2146.373588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2146.380842] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2146.388099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:48 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c4c, 0x0) 2018/06/05 23:27:48 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xe8030000, &(0x7f000000a000)) 2018/06/05 23:27:48 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x402c5828, 0x0) 2018/06/05 23:27:48 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c21, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:48 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x3f000000, &(0x7f000000a000)) [ 2146.676678] device bridge_slave_1 left promiscuous mode [ 2146.682285] bridge0: port 2(bridge_slave_1) entered disabled state [ 2146.707697] device bridge_slave_0 left promiscuous mode [ 2146.713336] bridge0: port 1(bridge_slave_0) entered disabled state [ 2146.854329] team0 (unregistering): Port device team_slave_1 removed [ 2146.898716] team0 (unregistering): Port device team_slave_0 removed [ 2146.912178] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2146.970351] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2147.007589] bond0 (unregistering): Released all slaves 2018/06/05 23:27:49 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4020940d, r1) 2018/06/05 23:27:49 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4]}, 0x6) 2018/06/05 23:27:49 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c2d, 0x0) 2018/06/05 23:27:49 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5460, 0x0) 2018/06/05 23:27:49 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c0a, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) prctl$setendian(0x14, 0x2) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x40, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) 2018/06/05 23:27:49 executing program 7 (fault-call:8 fault-nth:19): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:49 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff92, &(0x7f000000a000)) 2018/06/05 23:27:49 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffffe0, &(0x7f000000a000)) [ 2147.313909] FAULT_INJECTION: forcing a failure. [ 2147.313909] name failslab, interval 1, probability 0, space 0, times 0 [ 2147.325575] CPU: 0 PID: 5549 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2147.332514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2147.341885] Call Trace: [ 2147.344484] dump_stack+0x1b9/0x294 [ 2147.348120] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2147.353316] ? perf_trace_lock_acquire+0xe3/0x980 [ 2147.358180] should_fail.cold.4+0xa/0x1a [ 2147.362256] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2147.367380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2147.372927] ? wb_init+0x6ea/0x9e0 [ 2147.376480] ? graph_lock+0x170/0x170 [ 2147.380295] ? find_held_lock+0x36/0x1c0 [ 2147.384367] ? __lock_is_held+0xb5/0x140 [ 2147.388452] ? check_same_owner+0x320/0x320 [ 2147.392786] ? rcu_note_context_switch+0x710/0x710 [ 2147.397729] __should_failslab+0x124/0x180 [ 2147.401971] should_failslab+0x9/0x14 [ 2147.405772] kmem_cache_alloc_trace+0x2cb/0x780 [ 2147.410466] ? bdi_alloc_node+0x67/0xe0 [ 2147.414425] ? bdi_alloc_node+0x67/0xe0 [ 2147.418393] ? rcu_read_lock_sched_held+0x108/0x120 [ 2147.423401] blk_alloc_queue_stats+0x88/0x1b0 [ 2147.427887] ? blk_stat_enable_accounting+0xe0/0xe0 [ 2147.432897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2147.438444] blk_alloc_queue_node+0x2fa/0xf20 [ 2147.442934] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2147.447939] ? lockdep_init_map+0x9/0x10 [ 2147.451985] ? debug_mutex_init+0x2d/0x60 [ 2147.456131] ? __mutex_init+0x1ef/0x280 [ 2147.460095] ? __ia32_sys_membarrier+0x150/0x150 [ 2147.464869] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2147.469452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2147.474975] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2147.479725] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 2147.484384] ? idr_alloc+0x145/0x1a0 [ 2147.488094] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2147.493276] blk_mq_init_queue+0x4b/0xb0 [ 2147.497325] loop_add+0x32b/0x9c0 [ 2147.500767] ? loop_lookup+0x102/0x220 [ 2147.504641] ? loop_queue_rq+0x640/0x640 [ 2147.508706] ? retint_kernel+0x10/0x10 [ 2147.512601] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2147.517781] loop_control_ioctl+0x178/0x500 [ 2147.522097] ? loop_add+0x9c0/0x9c0 [ 2147.525708] ? retint_kernel+0x10/0x10 [ 2147.529593] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2147.534766] ? loop_add+0x9c0/0x9c0 [ 2147.538385] __ia32_compat_sys_ioctl+0x221/0x640 [ 2147.543134] do_fast_syscall_32+0x345/0xf9b [ 2147.547451] ? do_int80_syscall_32+0x880/0x880 [ 2147.552037] ? _raw_spin_unlock_irq+0x27/0x70 [ 2147.556535] ? finish_task_switch+0x1ca/0x840 [ 2147.561026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2147.566565] ? syscall_return_slowpath+0x30f/0x5c0 [ 2147.571516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2147.577045] ? retint_user+0x18/0x18 [ 2147.580758] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2147.585678] entry_SYSENTER_compat+0x70/0x7f [ 2147.590071] RIP: 0023:0xf7f1ccb9 [ 2147.593423] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 2018/06/05 23:27:50 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c5e, 0x0) 2018/06/05 23:27:50 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c3b, 0x0) [ 2147.612927] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2147.620631] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2147.627974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2147.635400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2147.642659] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2147.649913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2147.681766] IPVS: ftp: loaded support on port[0] = 21 2018/06/05 23:27:50 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2148.566420] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.572871] bridge0: port 1(bridge_slave_0) entered disabled state [ 2148.580723] device bridge_slave_0 entered promiscuous mode [ 2148.617861] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.624270] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.632232] device bridge_slave_1 entered promiscuous mode [ 2148.670688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2148.708539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2148.814143] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2148.855009] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2149.000441] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2149.007545] team0: Port device team_slave_0 added [ 2149.030941] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2149.038130] team0: Port device team_slave_1 added [ 2149.062239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2149.088573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2149.114327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2149.121416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2149.129811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2149.149474] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2149.156554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2149.164995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2149.377205] bridge0: port 2(bridge_slave_1) entered blocking state [ 2149.383604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2149.390260] bridge0: port 1(bridge_slave_0) entered blocking state [ 2149.396628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2149.403964] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2149.672158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2150.286179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2150.362722] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2150.438940] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2150.445137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2150.452717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2150.524171] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:27:53 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c92, 0x0) 2018/06/05 23:27:53 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c31, 0x0) 2018/06/05 23:27:53 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4000000000000000, &(0x7f000000a000)) 2018/06/05 23:27:53 executing program 7 (fault-call:8 fault-nth:20): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:53 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x541b, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:53 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1be4]}, 0x6) 2018/06/05 23:27:53 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c68, r1) 2018/06/05 23:27:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000100)={0x6, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e22, @loopback=0x7f000001}, 0x8, 0x6, 0x1, 0x2, 0x2, &(0x7f0000000040)='syzkaller0\x00', 0x2a, 0xd0e, 0xd63}) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x20000, 0x0) mq_getsetattr(r1, &(0x7f0000000380)={0x6c3e, 0x9, 0xffffffff80000001, 0x7ff80000000000, 0x9, 0x4d22, 0x4, 0x401}, &(0x7f00000003c0)) r2 = open(&(0x7f0000000200)='./file0\x00', 0x141201, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0x7bfb, @dev={0xfe, 0x80, [], 0x14}}}, 0x7, 0x81, 0xffffffffffffff70, "8a128d45a27ab3edadc75e045c8e99a5b645c26aa4e00e74c7bdf9dfae0ccaba758ddf9ac686e609513e651b2ad6a22779d95e35628867feebcaa99c9ac2ebddb236612020ae1ac41d0cd3058a41d84b"}, 0xd8) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 2151.202443] FAULT_INJECTION: forcing a failure. [ 2151.202443] name failslab, interval 1, probability 0, space 0, times 0 [ 2151.214604] CPU: 1 PID: 5853 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2151.221532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2151.230881] Call Trace: [ 2151.233474] dump_stack+0x1b9/0x294 [ 2151.237117] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2151.242314] ? should_fail.cold.4+0x5/0x1a [ 2151.246554] ? __sanitizer_cov_trace_pc+0x32/0x50 [ 2151.251397] should_fail.cold.4+0xa/0x1a [ 2151.255466] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2151.260571] ? graph_lock+0x170/0x170 [ 2151.264368] ? wait_for_completion+0x870/0x870 [ 2151.268957] ? graph_lock+0x170/0x170 [ 2151.272767] ? find_held_lock+0x36/0x1c0 [ 2151.276833] ? __lock_is_held+0xb5/0x140 [ 2151.280908] ? check_same_owner+0x320/0x320 [ 2151.285234] ? rcu_note_context_switch+0x710/0x710 [ 2151.290164] ? pcpu_balance_workfn+0x16d0/0x16d0 [ 2151.294925] ? trace_hardirqs_on+0xd/0x10 [ 2151.299082] __should_failslab+0x124/0x180 [ 2151.303326] should_failslab+0x9/0x14 [ 2151.307216] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2151.312326] ? mark_held_locks+0xc9/0x160 [ 2151.316484] blkg_alloc+0x11c/0x7f0 [ 2151.320127] ? blkcg_reset_stats+0x3c0/0x3c0 [ 2151.324543] ? __raw_spin_lock_init+0x1c/0x100 [ 2151.329134] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2151.334150] ? __lockdep_init_map+0x105/0x590 [ 2151.338654] ? kasan_check_write+0x14/0x20 [ 2151.342892] ? percpu_ref_init+0x1f7/0x280 [ 2151.347126] ? blk_delay_queue+0x1a0/0x1a0 [ 2151.351363] ? percpu_ref_noop_confirm_switch+0x10/0x10 [ 2151.356735] blkcg_init_queue+0x27/0x480 [ 2151.360799] blk_alloc_queue_node+0x9b6/0xf20 [ 2151.365312] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2151.370344] ? lockdep_init_map+0x9/0x10 [ 2151.374404] ? debug_mutex_init+0x2d/0x60 [ 2151.378560] ? __mutex_init+0x1ef/0x280 [ 2151.382557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2151.388105] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2151.392895] ? idr_alloc+0x145/0x1a0 [ 2151.396618] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 2018/06/05 23:27:53 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c57, r1) [ 2151.401814] blk_mq_init_queue+0x4b/0xb0 [ 2151.405880] loop_add+0x32b/0x9c0 [ 2151.409328] ? loop_lookup+0x102/0x220 [ 2151.413215] ? loop_queue_rq+0x640/0x640 [ 2151.417283] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2151.422476] loop_control_ioctl+0x178/0x500 [ 2151.426796] ? loop_add+0x9c0/0x9c0 [ 2151.430426] ? __ia32_compat_sys_ioctl+0xf4/0x640 [ 2151.435274] ? write_comp_data+0x6c/0x70 [ 2151.439343] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2151.444537] ? loop_add+0x9c0/0x9c0 [ 2151.448177] __ia32_compat_sys_ioctl+0x221/0x640 2018/06/05 23:27:53 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x402c582a, 0x0) [ 2151.452954] do_fast_syscall_32+0x345/0xf9b [ 2151.457299] ? do_int80_syscall_32+0x880/0x880 [ 2151.461896] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2151.466749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2151.472288] ? syscall_return_slowpath+0x30f/0x5c0 [ 2151.477227] ? sysret32_from_system_call+0x5/0x46 [ 2151.482088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2151.487037] entry_SYSENTER_compat+0x70/0x7f [ 2151.491447] RIP: 0023:0xf7f1ccb9 2018/06/05 23:27:53 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c74, 0x0) 2018/06/05 23:27:53 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c65, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2151.494807] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2151.514310] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2151.522030] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2151.529374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2151.536647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2151.543921] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2151.551200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:54 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c5c, 0x0) 2018/06/05 23:27:54 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x92ffffff00000000, &(0x7f000000a000)) 2018/06/05 23:27:54 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c27, r1) [ 2151.814113] device bridge_slave_1 left promiscuous mode [ 2151.819678] bridge0: port 2(bridge_slave_1) entered disabled state 2018/06/05 23:27:54 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c03, 0x0) [ 2151.871652] device bridge_slave_0 left promiscuous mode [ 2151.877292] bridge0: port 1(bridge_slave_0) entered disabled state 2018/06/05 23:27:54 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c23, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2152.061440] IPVS: ftp: loaded support on port[0] = 21 [ 2152.070301] team0 (unregistering): Port device team_slave_1 removed 2018/06/05 23:27:54 executing program 7 (fault-call:8 fault-nth:21): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:54 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c12, 0x0) 2018/06/05 23:27:54 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xffffffffffffffff]}, 0x6) [ 2152.104445] team0 (unregistering): Port device team_slave_0 removed [ 2152.134317] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2152.187145] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/06/05 23:27:54 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4401000000000000, &(0x7f000000a000)) [ 2152.270910] FAULT_INJECTION: forcing a failure. [ 2152.270910] name failslab, interval 1, probability 0, space 0, times 0 [ 2152.282687] CPU: 0 PID: 5901 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2152.289631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2152.290969] bond0 (unregistering): Released all slaves [ 2152.299025] Call Trace: [ 2152.307212] dump_stack+0x1b9/0x294 [ 2152.310855] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2152.316067] should_fail.cold.4+0xa/0x1a 2018/06/05 23:27:54 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c0f, 0x0) 2018/06/05 23:27:54 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c37, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2152.320145] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2152.325258] ? lock_downgrade+0x8e0/0x8e0 [ 2152.329416] ? graph_lock+0x170/0x170 [ 2152.333221] ? kasan_check_read+0x11/0x20 [ 2152.337384] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2152.341802] ? find_held_lock+0x36/0x1c0 [ 2152.345881] ? __lock_is_held+0xb5/0x140 [ 2152.349974] ? check_same_owner+0x320/0x320 [ 2152.354299] ? __sanitizer_cov_trace_pc+0x2b/0x50 [ 2152.359218] ? rcu_note_context_switch+0x710/0x710 [ 2152.364141] __should_failslab+0x124/0x180 2018/06/05 23:27:54 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x20000) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x0, @broadcast=0xffffffff, 0x4e20, 0x0, 'none\x00', 0x10, 0xcf, 0x50}, {@empty, 0x4e24, 0x2000, 0x7f, 0x7, 0xfffffffffffffffa}}, 0x44) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)=0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r2, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:54 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5460, 0x0) [ 2152.368380] should_failslab+0x9/0x14 [ 2152.372177] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2152.377290] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2152.382315] ? lock_downgrade+0x8e0/0x8e0 [ 2152.386474] blk_throtl_init+0xc5/0x630 [ 2152.390453] ? rcu_is_watching+0x85/0x140 [ 2152.394605] ? blk_throtl_drain+0x7e0/0x7e0 [ 2152.398938] ? _raw_spin_unlock_irq+0x56/0x70 [ 2152.403449] blkcg_init_queue+0x1ef/0x480 [ 2152.407606] blk_alloc_queue_node+0x9b6/0xf20 [ 2152.412110] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2152.412369] binder: 5913:5914 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2152.417127] ? lockdep_init_map+0x9/0x10 [ 2152.417144] ? debug_mutex_init+0x2d/0x60 [ 2152.417159] ? __mutex_init+0x1ef/0x280 [ 2152.417193] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2152.417209] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2152.417233] ? idr_alloc+0x145/0x1a0 [ 2152.417252] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2152.455198] blk_mq_init_queue+0x4b/0xb0 [ 2152.459263] loop_add+0x32b/0x9c0 [ 2152.462710] ? loop_lookup+0x102/0x220 [ 2152.466592] ? loop_queue_rq+0x640/0x640 [ 2152.470639] ? __fget_light+0x2ef/0x430 [ 2152.474601] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2152.479775] loop_control_ioctl+0x178/0x500 [ 2152.484082] ? loop_add+0x9c0/0x9c0 [ 2152.487694] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2152.493216] ? fput+0x130/0x1a0 [ 2152.496492] ? ksys_write+0x1a6/0x250 [ 2152.500294] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2152.505469] ? loop_add+0x9c0/0x9c0 [ 2152.509085] __ia32_compat_sys_ioctl+0x221/0x640 [ 2152.513840] do_fast_syscall_32+0x345/0xf9b [ 2152.518149] ? do_int80_syscall_32+0x880/0x880 [ 2152.522713] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2152.527544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2152.533075] ? syscall_return_slowpath+0x30f/0x5c0 [ 2152.538002] ? sysret32_from_system_call+0x5/0x46 [ 2152.542845] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2152.547672] entry_SYSENTER_compat+0x70/0x7f [ 2152.552059] RIP: 0023:0xf7f1ccb9 [ 2152.555418] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2152.574670] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2152.582368] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2152.589620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2152.596883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2152.604146] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2152.611409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:55 executing program 7 (fault-call:8 fault-nth:22): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:55 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfdffffff, &(0x7f000000a000)) 2018/06/05 23:27:55 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c67, 0x0) 2018/06/05 23:27:55 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c3b, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:55 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c23, 0x0) [ 2153.183734] FAULT_INJECTION: forcing a failure. [ 2153.183734] name failslab, interval 1, probability 0, space 0, times 0 [ 2153.195556] CPU: 0 PID: 5937 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2153.202486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2153.211861] Call Trace: [ 2153.214459] dump_stack+0x1b9/0x294 [ 2153.218151] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2153.223335] ? print_usage_bug+0xc0/0xc0 [ 2153.227429] should_fail.cold.4+0xa/0x1a [ 2153.231502] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2153.236613] ? mark_held_locks+0xc9/0x160 [ 2153.240768] ? retint_kernel+0x10/0x10 [ 2153.244654] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2153.249674] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2153.254436] ? retint_kernel+0x10/0x10 [ 2153.258338] ? rcu_all_qs+0x2d/0x2b0 [ 2153.262052] ? rcu_note_context_switch+0x710/0x710 [ 2153.266984] __should_failslab+0x124/0x180 [ 2153.271217] should_failslab+0x9/0x14 [ 2153.275015] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2153.280117] ? retint_kernel+0x10/0x10 [ 2153.284097] throtl_pd_alloc+0xd7/0x970 [ 2153.288072] ? blk_throtl_dispatch_work_fn+0x480/0x480 [ 2153.293346] ? retint_kernel+0x10/0x10 [ 2153.297234] ? blk_throtl_dispatch_work_fn+0x480/0x480 [ 2153.302516] ? blk_throtl_dispatch_work_fn+0x480/0x480 [ 2153.307794] blkcg_activate_policy+0xf4/0x580 [ 2153.312295] blk_throtl_init+0x3d0/0x630 [ 2153.316356] ? blk_throtl_drain+0x7e0/0x7e0 [ 2153.320705] ? blkcg_init_queue+0x3b7/0x480 [ 2153.325036] ? __sanitizer_cov_trace_pc+0x1/0x50 [ 2153.329802] blkcg_init_queue+0x1ef/0x480 [ 2153.333949] blk_alloc_queue_node+0x9b6/0xf20 [ 2153.338455] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2153.343478] ? lockdep_init_map+0x9/0x10 [ 2153.347536] ? debug_mutex_init+0x2d/0x60 [ 2153.351684] ? __mutex_init+0x1ef/0x280 [ 2153.355862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2153.361399] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2153.366162] ? idr_alloc+0x145/0x1a0 [ 2153.369882] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2153.375101] blk_mq_init_queue+0x4b/0xb0 [ 2153.379164] loop_add+0x32b/0x9c0 [ 2153.382617] ? loop_lookup+0x102/0x220 [ 2153.386503] ? loop_queue_rq+0x640/0x640 [ 2153.390569] ? __fget_light+0x2ef/0x430 [ 2153.394548] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2153.399743] loop_control_ioctl+0x178/0x500 [ 2153.404064] ? loop_add+0x9c0/0x9c0 [ 2153.407694] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2153.413229] ? fput+0x130/0x1a0 [ 2153.416520] ? ksys_write+0x1a6/0x250 [ 2153.420327] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2153.425514] ? loop_add+0x9c0/0x9c0 [ 2153.429144] __ia32_compat_sys_ioctl+0x221/0x640 [ 2153.433911] do_fast_syscall_32+0x345/0xf9b [ 2153.434862] binder_alloc: binder_alloc_mmap_handler: 5913 20001000-20004000 already mapped failed -16 [ 2153.438233] ? do_int80_syscall_32+0x880/0x880 [ 2153.438251] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2153.438272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2153.438287] ? syscall_return_slowpath+0x30f/0x5c0 [ 2153.438306] ? sysret32_from_system_call+0x5/0x46 [ 2153.438326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2153.477162] entry_SYSENTER_compat+0x70/0x7f [ 2153.481566] RIP: 0023:0xf7f1ccb9 [ 2153.484923] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2153.504289] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2153.512003] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2153.519276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2153.526566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2153.533832] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2153.541098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2153.681788] binder: BINDER_SET_CONTEXT_MGR already set [ 2153.934690] binder: 5913:5945 ioctl 40046207 0 returned -16 [ 2153.990976] binder: send failed reply for transaction 136 to 5913:5914 [ 2154.001132] binder: undelivered TRANSACTION_COMPLETE [ 2154.006288] binder: undelivered TRANSACTION_ERROR: 29189 [ 2154.199585] bridge0: port 1(bridge_slave_0) entered blocking state [ 2154.205990] bridge0: port 1(bridge_slave_0) entered disabled state [ 2154.213281] device bridge_slave_0 entered promiscuous mode [ 2154.249980] bridge0: port 2(bridge_slave_1) entered blocking state [ 2154.256471] bridge0: port 2(bridge_slave_1) entered disabled state [ 2154.263727] device bridge_slave_1 entered promiscuous mode [ 2154.301362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2154.337218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2154.444294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2154.474401] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2154.641378] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2154.648872] team0: Port device team_slave_0 added [ 2154.675686] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2154.682830] team0: Port device team_slave_1 added [ 2154.707150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2154.733410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2154.758657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2154.783738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2155.001549] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.007924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2155.014560] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.020923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2155.796008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2155.875006] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2155.951576] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2155.957769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2155.965350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2156.038853] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:27:59 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c61, r1) 2018/06/05 23:27:59 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1650]}, 0x6) 2018/06/05 23:27:59 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff97, &(0x7f000000a000)) 2018/06/05 23:27:59 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c46, 0x0) 2018/06/05 23:27:59 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c26, 0x0) 2018/06/05 23:27:59 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c08, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:27:59 executing program 7 (fault-call:8 fault-nth:23): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:27:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xe3ce, 0x800) setsockopt$inet_tcp_buf(r1, 0x6, 0x16, &(0x7f0000000240)="da5b79dae9386d0491bf991338da0426bb0595b75bc1b53fe3df24207b13d347be62b1e9676bfdf18fb56ac9ebc5c63c291b3c4175a16027438d0fb8d6c162d7c49e247f2442abb4eb", 0x49) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x200000004e20, @rand_addr=0x400}, 0xc) r2 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc010643a, &(0x7f0000000040)={0x2c00003e, 0x10000, 0x3d}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200)=0x0) migrate_pages(r3, 0xffffffff, &(0x7f0000000140)=0x1000, &(0x7f0000000180)=0x7f) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:27:59 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c79, 0x0) 2018/06/05 23:27:59 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9, &(0x7f000000a000)) [ 2156.725979] FAULT_INJECTION: forcing a failure. [ 2156.725979] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.737517] CPU: 1 PID: 6215 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2156.744448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.753903] Call Trace: [ 2156.756502] dump_stack+0x1b9/0x294 [ 2156.760144] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2156.765352] should_fail.cold.4+0xa/0x1a [ 2156.769432] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2156.774542] ? retint_kernel+0x10/0x10 [ 2156.778427] ? graph_lock+0x170/0x170 [ 2156.782229] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2156.786990] ? retint_kernel+0x10/0x10 [ 2156.790878] ? __lock_is_held+0xb5/0x140 [ 2156.794957] ? check_same_owner+0x320/0x320 [ 2156.799275] ? rcu_note_context_switch+0x710/0x710 [ 2156.804202] __should_failslab+0x124/0x180 [ 2156.808446] should_failslab+0x9/0x14 [ 2156.812245] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2156.817351] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2156.822442] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2156.827211] throtl_pd_alloc+0xd7/0x970 [ 2156.831184] ? blk_throtl_dispatch_work_fn+0x480/0x480 [ 2156.836456] ? _raw_spin_unlock_irq+0x56/0x70 [ 2156.840955] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2156.846498] ? blk_throtl_dispatch_work_fn+0x480/0x480 [ 2156.851785] blkcg_activate_policy+0xf4/0x580 [ 2156.856294] blk_throtl_init+0x3d0/0x630 [ 2156.860348] ? blk_throtl_drain+0x7e0/0x7e0 [ 2156.864657] ? _raw_spin_unlock_irq+0x56/0x70 [ 2156.869154] blkcg_init_queue+0x1ef/0x480 [ 2156.873295] blk_alloc_queue_node+0x9b6/0xf20 [ 2156.877776] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2156.882788] ? lockdep_init_map+0x9/0x10 [ 2156.886847] ? debug_mutex_init+0x2d/0x60 [ 2156.890995] ? __mutex_init+0x1ef/0x280 [ 2156.894969] ? blk_mq_alloc_rqs+0x6/0x9a0 [ 2156.899107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2156.904646] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2156.909397] ? idr_alloc+0x145/0x1a0 [ 2156.913124] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2156.918320] blk_mq_init_queue+0x4b/0xb0 [ 2156.922387] loop_add+0x32b/0x9c0 [ 2156.925856] ? loop_lookup+0x102/0x220 [ 2156.929728] ? loop_queue_rq+0x640/0x640 [ 2156.933781] ? __fget_light+0x2ef/0x430 [ 2156.937841] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2156.943030] loop_control_ioctl+0x178/0x500 [ 2156.947345] ? loop_add+0x9c0/0x9c0 [ 2156.950966] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2156.956505] ? fput+0x130/0x1a0 [ 2156.959787] ? ksys_write+0x1a6/0x250 [ 2156.963587] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2156.968759] ? loop_add+0x9c0/0x9c0 [ 2156.972374] __ia32_compat_sys_ioctl+0x221/0x640 [ 2156.977125] do_fast_syscall_32+0x345/0xf9b [ 2156.981441] ? do_int80_syscall_32+0x880/0x880 [ 2156.986013] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2156.990862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2156.996401] ? syscall_return_slowpath+0x30f/0x5c0 [ 2157.001333] ? sysret32_from_system_call+0x5/0x46 [ 2157.006175] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2157.011013] entry_SYSENTER_compat+0x70/0x7f [ 2157.015410] RIP: 0023:0xf7f1ccb9 [ 2157.018749] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2157.038050] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2157.045753] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2157.053022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2157.060287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2157.067549] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2157.074817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:27:59 executing program 7 (fault-call:8 fault-nth:24): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 2157.243316] FAULT_INJECTION: forcing a failure. [ 2157.243316] name failslab, interval 1, probability 0, space 0, times 0 [ 2157.255071] CPU: 0 PID: 6241 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2157.262016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.271370] Call Trace: [ 2157.273961] dump_stack+0x1b9/0x294 [ 2157.277595] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2157.282789] ? should_fail+0x780/0xbcd [ 2157.286679] should_fail.cold.4+0xa/0x1a [ 2157.290746] ? retint_kernel+0x10/0x10 [ 2157.294639] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2157.299753] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2157.304513] ? graph_lock+0x170/0x170 [ 2157.308315] ? retint_kernel+0x10/0x10 [ 2157.312220] ? __lock_is_held+0xb5/0x140 [ 2157.316293] ? check_same_owner+0x320/0x320 [ 2157.320624] ? rcu_note_context_switch+0x710/0x710 [ 2157.325561] ? throtl_peek_queued+0x1a0/0x1a0 [ 2157.330060] __should_failslab+0x124/0x180 [ 2157.334300] should_failslab+0x9/0x14 [ 2157.338114] kmem_cache_alloc_trace+0x2cb/0x780 [ 2157.342791] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2157.347820] ? blk_mq_can_queue+0x50/0x50 [ 2157.351971] ? plug_ctx_cmp+0x110/0x110 [ 2157.355953] blk_stat_alloc_callback+0x5b/0x280 [ 2157.360631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2157.366185] blk_mq_init_allocated_queue+0x125/0x1580 [ 2157.371404] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2157.376427] ? lockdep_init_map+0x9/0x10 [ 2157.380491] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2157.384983] ? __mutex_init+0x1ef/0x280 [ 2157.388982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2157.394521] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2157.399292] ? idr_alloc+0x145/0x1a0 [ 2157.403012] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2157.408214] blk_mq_init_queue+0x63/0xb0 [ 2157.412280] loop_add+0x32b/0x9c0 [ 2157.415732] ? loop_lookup+0x102/0x220 [ 2157.419618] ? loop_queue_rq+0x640/0x640 [ 2157.423682] ? retint_kernel+0x10/0x10 [ 2157.427577] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2157.432768] loop_control_ioctl+0x178/0x500 [ 2157.437088] ? loop_add+0x9c0/0x9c0 [ 2157.440715] ? retint_kernel+0x10/0x10 [ 2157.444612] ? __ia32_compat_sys_ioctl+0x1b5/0x640 [ 2157.449536] ? loop_add+0x9c0/0x9c0 [ 2157.453176] __ia32_compat_sys_ioctl+0x221/0x640 [ 2157.457941] do_fast_syscall_32+0x345/0xf9b [ 2157.462268] ? do_int80_syscall_32+0x880/0x880 [ 2157.466859] ? _raw_spin_unlock_irq+0x27/0x70 [ 2157.471359] ? finish_task_switch+0x1ca/0x840 [ 2157.475868] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2157.481410] ? syscall_return_slowpath+0x30f/0x5c0 [ 2157.486353] ? sysret32_from_system_call+0x5/0x46 [ 2157.491218] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2157.496185] entry_SYSENTER_compat+0x70/0x7f [ 2157.500594] RIP: 0023:0xf7f1ccb9 [ 2157.503950] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2157.523340] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2157.531058] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 2018/06/05 23:27:59 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c43, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2157.538344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2157.545603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2157.552856] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2157.560204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:00 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c53, r1) 2018/06/05 23:28:00 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c3a, 0x0) 2018/06/05 23:28:00 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0189436, 0x0) 2018/06/05 23:28:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syncfs(r0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={0x0, 0xfff}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e24, 0x70, @mcast2={0xff, 0x2, [], 0x1}, 0x41}}}, 0x84) connect$inet(r0, &(0x7f0000000080)={0x2, 0x1000000, @multicast1=0xe0000001}, 0xffffff7c) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000180)=0x4369dd07, 0x4) sendto$inet(r0, &(0x7f0000000280)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0xfffffffffffffe6f) 2018/06/05 23:28:00 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x7a00000000000000, &(0x7f000000a000)) 2018/06/05 23:28:00 executing program 7 (fault-call:8 fault-nth:25): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:00 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x402c582a, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:00 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x8055000000000000]}, 0x6) 2018/06/05 23:28:00 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x541b, 0x0) 2018/06/05 23:28:00 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c4a, 0x0) [ 2157.998813] FAULT_INJECTION: forcing a failure. [ 2157.998813] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.012651] CPU: 0 PID: 6263 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2158.019587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2158.028935] Call Trace: [ 2158.031525] dump_stack+0x1b9/0x294 [ 2158.035159] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2158.040357] ? finish_task_switch+0x1ca/0x840 [ 2158.044854] ? finish_task_switch+0x182/0x840 [ 2158.049357] should_fail.cold.4+0xa/0x1a [ 2158.053426] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2158.058537] ? __schedule+0x809/0x1e30 [ 2158.062431] ? do_fast_syscall_32+0x345/0xf9b [ 2158.066925] ? entry_SYSENTER_compat+0x70/0x7f [ 2158.071517] ? __sched_text_start+0x8/0x8 [ 2158.075664] ? find_held_lock+0x36/0x1c0 [ 2158.079732] ? __lock_is_held+0xb5/0x140 [ 2158.083807] ? check_same_owner+0x320/0x320 [ 2158.088143] __should_failslab+0x124/0x180 [ 2158.092380] should_failslab+0x9/0x14 [ 2158.096194] __kmalloc+0x2c8/0x760 2018/06/05 23:28:00 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c48, r1) [ 2158.099733] ? kmem_cache_alloc_trace+0x616/0x780 [ 2158.104581] ? blk_stat_alloc_callback+0x84/0x280 [ 2158.109424] ? blk_mq_can_queue+0x50/0x50 [ 2158.113568] ? plug_ctx_cmp+0x110/0x110 [ 2158.117553] blk_stat_alloc_callback+0x84/0x280 [ 2158.122240] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2158.127791] blk_mq_init_allocated_queue+0x125/0x1580 [ 2158.132993] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2158.138027] ? lockdep_init_map+0x9/0x10 [ 2158.142146] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2158.146652] ? __mutex_init+0x1ef/0x280 [ 2158.150652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2158.156198] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2158.160971] ? idr_alloc+0x145/0x1a0 [ 2158.164789] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2158.169994] blk_mq_init_queue+0x63/0xb0 [ 2158.174065] loop_add+0x32b/0x9c0 [ 2158.177514] ? loop_lookup+0x102/0x220 [ 2158.181397] ? loop_queue_rq+0x640/0x640 [ 2158.185447] ? retint_kernel+0x10/0x10 [ 2158.189324] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2158.194503] loop_control_ioctl+0x178/0x500 [ 2158.198809] ? loop_add+0x9c0/0x9c0 [ 2158.202422] ? retint_kernel+0x10/0x10 [ 2158.206314] ? __ia32_compat_sys_ioctl+0x1b5/0x640 [ 2158.211250] ? loop_add+0x9c0/0x9c0 [ 2158.214864] __ia32_compat_sys_ioctl+0x221/0x640 [ 2158.219619] do_fast_syscall_32+0x345/0xf9b [ 2158.223943] ? do_int80_syscall_32+0x880/0x880 [ 2158.228525] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2158.233381] ? sysret32_from_system_call+0x5/0x46 [ 2158.238229] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2158.243073] entry_SYSENTER_compat+0x70/0x7f [ 2158.247483] RIP: 0023:0xf7f1ccb9 [ 2158.250844] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2158.270132] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2158.277851] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2158.285125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2158.292393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2158.299666] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2158.306915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:00 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c30, 0x0) 2018/06/05 23:28:00 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c60, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:00 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0xc020660b, r1) 2018/06/05 23:28:00 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6800000000000000, &(0x7f000000a000)) 2018/06/05 23:28:01 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c10, 0x0) 2018/06/05 23:28:01 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c18, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2158.598386] device bridge_slave_1 left promiscuous mode [ 2158.603990] bridge0: port 2(bridge_slave_1) entered disabled state 2018/06/05 23:28:01 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c42, 0x0) [ 2158.675514] device bridge_slave_0 left promiscuous mode [ 2158.681138] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.726125] IPVS: ftp: loaded support on port[0] = 21 [ 2158.836773] team0 (unregistering): Port device team_slave_1 removed [ 2158.863694] team0 (unregistering): Port device team_slave_0 removed [ 2158.898302] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2158.960936] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2159.039803] bond0 (unregistering): Released all slaves [ 2159.660927] bridge0: port 1(bridge_slave_0) entered blocking state [ 2159.667373] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.676247] device bridge_slave_0 entered promiscuous mode [ 2159.713246] bridge0: port 2(bridge_slave_1) entered blocking state [ 2159.719646] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.727365] device bridge_slave_1 entered promiscuous mode [ 2159.765516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2159.802610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2159.910877] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2159.949735] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2160.118628] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2160.126005] team0: Port device team_slave_0 added [ 2160.162623] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2160.169994] team0: Port device team_slave_1 added [ 2160.197548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2160.237409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2160.275904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2160.301199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2160.552619] bridge0: port 2(bridge_slave_1) entered blocking state [ 2160.558998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2160.565655] bridge0: port 1(bridge_slave_0) entered blocking state [ 2160.572058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2160.579296] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2161.356908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2161.435858] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2161.442195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2161.519563] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2161.525731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2161.532860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2161.604521] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:28:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x600000000000000]}, 0x6) 2018/06/05 23:28:04 executing program 7 (fault-call:8 fault-nth:26): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8fffffff, &(0x7f000000a000)) 2018/06/05 23:28:04 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c2b, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:04 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c39, 0x0) 2018/06/05 23:28:04 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c1b, r1) 2018/06/05 23:28:04 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c4a, 0x0) 2018/06/05 23:28:04 executing program 3: getpeername(0xffffffffffffff9c, &(0x7f0000002300)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f0000001c00)=0x80) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000002280), &(0x7f0000004dc0)=0x4) getpeername(0xffffffffffffff9c, &(0x7f0000000340)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f00000003c0)=0x80) sendmmsg$nfc_llcp(r1, &(0x7f0000004a80)=[{&(0x7f0000000400)={0x27, 0x1, 0x2, 0x7, 0x7, 0x80000000, "799262afc1f13e652dbf920ac7a44008d0bc94a4201bba4536121b5ca993bf5ec7bed41614f6229ddea27c1c8c366f83668a2220cdde2236813fdbe622b3f8", 0x36}, 0x58, &(0x7f0000001880)=[{&(0x7f0000000480)="3d1ee9f909ba6e8ff963268a5b329faad3cbaf31debca77196b7468d9cacf743a4e5a427705c8363d19600678d9b819bf1c940dbbefcfe4319d1ada3145a5e7b5a74cc4edd226af9d067445a51b6d04e6d9fbfef43bf9939005a5a66cf0cbe1322722a0f7f2b4d7f56e27a56a93f", 0x6e}, {&(0x7f0000001580)="21d783c4204bd68e2aa4ff3b8014d83c438d368a222370afbc3e3701360dbee1636d3bbd9791f16822b43eee5e532a54c2a1f3c98457ac2694dbb791f24455f98cf635a277e55f550f5b949ad046a0aba73b1b80df7e2dfaf1f547be768fc2e994578cd21eb6d84029a3b7d7b45153c8ede6c89804939fccb4d70267e34fb60316010d0c822bcd4f4468f1507dbdf46b73f18e083c7d2d40c3c751b144d91adb93086a2fdf60e0d7b8087bd76b3629050cb72cfffce39fc3552c0cfac48d1c1a3f15c2863ea06a", 0xc7}, {&(0x7f0000001680)="e43da5c2143359edfc3d7c63bb3c12284f45c70efcff465df943236625d6e5bb6f422699dcc0d26b40715adf15df6fdc3ee7e24023fe8e0374f307505c268ec7d614de9590a61028fcc5ff385c85f189897fd26f174080574383a2c80d958272d6b56a22935f31031b257b9b76975b17ec96f863f158926ee31d33cd70b929d9499bd5e6cee62e71f21c691cdf46563f87b31eb6070f9a46162fefce3337f7de584443d89f0f7bfa2f7e4aa2e711d52b103cef", 0xb3}, {&(0x7f0000001740)="bfcd4c37f6a7593a8c64afcc491dbd4db0f509d1cf2b88279dd57f7d0603aee9b7f1f2895d788cce1aa6d3257713a3833e489b251231d41f68b1944dac9cf2267b5f172713d692bb426781294320f0e72bfbbdbc324fbdad23d0a7d6040b83e44bb599c9e25f2f5c58ab80238c8929b16b3c6546f34cded4b5cf49e2f99d593886949e1b7250168787752722cc838f3767a274a89b6363d3c0f724c73ea17a172b98d969d884fc369f9ec3372c942ccd939bf4239160c4320765eab6310720f3e1ccd1c20a693b35b098b67252660521057a0498f29d5f1af0100b539f441460", 0xe0}, {&(0x7f0000001840)="05f4b63db4f26e70", 0x8}], 0x5, &(0x7f00000018c0)={0x88, 0x108, 0x9, "a152133ee2f335165a7a50978173e935ec16dc935033896aff9a426e34816e40007aff0560203f675e3c6112473dec3f734711e87dac301317d6494f945e2c0e093cf7b9c90b9c1be3eda3656cd3a027f830e8ac6092554b2461ee46ee6946e0c017693288f63e83902670a6eb42fccac9b47b8afd6839982682c878"}, 0x88, 0x20004001}, {&(0x7f0000001980)={0x27, 0x0, 0x1, 0x1, 0x2, 0x3ff, "b64adda2341c9111ac52a7b8362ed904cef073dc626d00b6ad71199417e53c403849c8ee08fe3a912b13f0953847f8869b18c2d52dddcbe4e0c64d0d431ce9", 0x31}, 0x58, &(0x7f0000001bc0)=[{&(0x7f0000001a00)="03b008eff89f43f985a9b8e7203135d4bb70be05caf4ee993ae4f7f97a10324b740f9b96ab1e6a5fa8c054caeb807d0eb0c9848e0eb1888c73ee671f2062628c9a00a2658b74cdebb82f396adb3c440b4841b82f08a89027573ebc34e431cede58eada745bfdd76f2eb0a764e15ebc8db3e167021e719a18f9828ba2913b6942ad133ba03c871952f596", 0x8a}, {&(0x7f0000001ac0)="88a14e74219cf513ccf651db185f7ce5409bd56b7f69424704a15deef7036f40eae57954a18d282557004af2167040bb8461ab8b50e256ba5ea1ae2b761dcb07e6550d793da70f63ea86ec87289f974ae16df1e502630ae27777159898e4c9eb7a9127ecfc687836888525cd3b6a61a4ceca36046b7565687f9333700690ccaea321e4cbf1a624b08a5b0317ba7dce8026c2ab4d00544a27dd4ff02438d8a72e260e3dffde0f04bf280ce39d670eab0bfcf3a070f07c9a479877edbd3d0ba4da728768", 0xc3}], 0x2, &(0x7f0000004d00)=ANY=[@ANYBLOB="180000001f010000380000001f51a5a15046ade545000000de36258b68511ee40e8ab2f17a658811b5d72d8181a1ffe231fc7ef5b1e59dfce32e863d43a4112ea35c1a6e99384dcb7ee5032d50015da23bf8a12eb719ac781341d079eef6188d6f6631c1e2b765105a3673f67e8ddd342bace42b2cfb4c10289279e00d3dfb7d19017d66bc33bd71979f0c56d754952227916ebdaf792629d512a422215c184a82"], 0xa1, 0x4000}, {&(0x7f0000001c40)={0x27, 0x0, 0x2, 0x7, 0x10001, 0xfffffffffffffffc, "682d0bf6a12b7dd7762f817ba1b7871fb216d69f21c40361bc5e88348713083958c49090fc17e42500dd955050419817b702a08a24d888dfc1742d501d88e9", 0x24}, 0x58, &(0x7f0000001d80)=[{&(0x7f0000001cc0)="7a760be0b36d5c4f980cc6b4647fa3d92d9e01768490d82f7164366934c00a32b397547235b3579bc14cf46c7afbad48ac5b32e479aa42", 0x37}, {&(0x7f0000001d00)="349fb842fec03084efc8eabae33300cb3432911d985e5adf645fd1072e5a30ed277859be19e8620d1a8f296e00c6b02c619f6913cea43c0620927fb529e3d8e8c7d781363d8ade6482f60762c9e2422f06116b349a05fdda9b22599294b0", 0x5e}], 0x2, &(0x7f0000001dc0)={0xec, 0x84, 0xffffffff, "97678dc1b40b2963d96dbe42be75800db9d7a7edd03e3b6b5f1d94b5d94f77c1c01dd04d2c5904b718d819950cf06ea23f4fec80b1dc66cf4ca2748e91dc173a607815f874c1caf53d0fda52f14e28b1c7c85f6681e9e0663bc128774bc1b7a1e379de4b56c74928fd05b55a64bf94c90076eb30e4f1e681e75059926fd07f7a19d6017518ca47d0b6d276080fd411854b75a4f442803aa095f9a3210549f74d4855ba65c7880ac0ef9b99b91fd1321a3e0886ea1955d9ad6f382cfc49e1ccec87719e783b9ede0c7abdc9fb60da22b2280d37ec4141544e9cd18c052dc12c"}, 0xec, 0x4}, {&(0x7f0000001ec0)={0x27, 0x1, 0x0, 0x1, 0x5b, 0x9, "d76014d71e6a8cf4616088336092f917700ebce7c3492942e9717e6bca591d75c782b2e9c4deac5bdcb8db4e513c35feccc1aac0b4c188482ede54ed35c457", 0x6}, 0x58, &(0x7f00000020c0)=[{&(0x7f0000001f40)="d73a9bd028b210f08d272818e92231689f5f3f03eaae1d24de993575628cc566800fe5091085d4ed8245209f2c8631fb1c46b37c174d8b52a8f4483d46d98e1983d8b9d3de6691722faf6cd09368c759506c293d4d162f181b0919610926f33e8e32eea0f01a4645aed7fc3aa9c3d03496dc12cd", 0x74}, {&(0x7f0000001fc0)="d682261b8d12eedc0629e7e242701749cde9a0d548403bc8fcaff82e94e7db65d2ad8e36c1c8987fd5b188f31168782c3e2ce742d70e41b7cc2bf93a82aee0cb2f44b996a5ee9c71b32bf4b8b0b90a319001fe96c44b0e4ac3954ef0bc671837bfe94962", 0x64}, {&(0x7f0000002040)="108ead858c5dd8d39eab5a9ab19b60e39967963fd0484397c8ae04dac6c62cbce234db2f89581de913bae638cac53b22d1f3fac448b6d2025de9671c19", 0x3d}, {&(0x7f0000002080)}], 0x4, &(0x7f0000002100)={0x6c, 0x10e, 0x40, "49f85209176614dd42cf03d95db22df1395ef9b9c293216abf85026898fe67b97840ebb2d56a6a31be3831e8d7db533d25ed7caae65916810134f19cb49719f98145da8a8172b4f62f16687e3c710d8ed7d401ef03288fc85fdd89b8dc48c769"}, 0x6c, 0x800}, {&(0x7f0000002180)={0x27, 0x0, 0x2, 0x7, 0x3cbc5179, 0x9, "3c6626ddf4c636a73273a8fbd79d5d13788a35cbe4841d6705de1a98ba94f7e13f2158836d2fe00a1182140aab9db80018ca9e0579013d97ff84c915bb6fb1", 0x4}, 0x58, &(0x7f00000022c0)=[{&(0x7f0000002200)="7f407108d7c445dbc6403367ef97c93f142dc4340d3b34f54a279104a357b99d8359275b5741ce421119d12a664233e9075597ac000522e0995dc1433a0ca4d50ae565b85012419bc4841d66ee79828dd70dafc8e6c23d", 0x57}, {&(0x7f0000002280)}], 0x2, &(0x7f0000004b80)=ANY=[@ANYBLOB="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"], 0x157, 0x4000010}, {&(0x7f0000002380)={0x27, 0x0, 0x1, 0x7, 0x81, 0x1800000000000, "6d7a6fe124ee0b4d0aa0aa7af4ba21c2a2763951576b256c0e04284b4d4a10baa3cc4de8f42f71b30737ff5f97039ec74362c3e2a3ef289a4440918c200e4b", 0x3e}, 0x58, &(0x7f0000003640)=[{&(0x7f0000002400)="edfd948665b0c758b9edbef53f26da298f9b68a2c8e746ee754b13a8e679d0021b8d18804377b4db2309d9d8c18cf3f773de9af03e3ca124360094aa094ac95fe42c1b3565c1b33d382004ac5049741bed94d2e7bad0cf9992f877ceec4a4c16e15a7afb1502818337a68fd7b0f51f1439beab8100becd64c43693df12849f801a2db1a9", 0x84}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="3beb50eb956ba30e8c219349c2cc67bef1586948585300a89ff91fef278d76188c0055af0af800b39f68c7e0eecd349b5eb41fd8a8ec3fcb9eb52e53970e9a9782f1f376707bcc483fa43dbfbb1e8e4b4068c6bbf8e06859020a3bba5d2194ef1fc21c50268cd30009c397842643f6c3191a37919a1d9f4a519766761ad5b95d8356b934b7f36b0a78a5fb558554dae8d8463514d42996c8a10c122df493eb4ac1723fc35ef13824771ae4d21ec3c3242aa48dd2045b57c8db77de00c39b943c45843ccb05a1671e9ec0947d33fda8d3450131feb7d99a96", 0xd8}, {&(0x7f00000035c0)="f40d22b52d140726aae71f8bec2a0f4ea7baf8175f6975488b8feac912d206de438d67ceac8c59d2e08b0087bc37a37667602c708f29995ef91b4fb311ed0fe72e8222554bf4e367a46008a62733e6e2a0c3a9169e4925931ba4c01bdc74cab4", 0x60}], 0x4, 0x0, 0x0, 0x10}, {&(0x7f0000003680)={0x27, 0x1, 0x2, 0x2, 0x9, 0x3ff, "dd936343eae7a170b1f6e732f0373b9684863be5c35329a3ba332c74ea1d63fb4e7e03c4d8dea97e96a975ba82a818ded04288dd81e478ab394dd5eb2509af", 0x32}, 0x58, &(0x7f00000049c0)=[{&(0x7f0000003700)="9d99e0a60b04de4a090d582626a778c62cbfdae907c28eb6ead28a0443dc07eccd0694e7cb5360b492de6b0855ba9255f18789749bcd16b852fe1d8c275abc0859b991249169b326cbc9dba00a269cdc23e030b9bb09f48bbae5daf37baa4837a6b16d79fe0f9cb57d51d365a43912bccac030c8b9459d72e3ee313eba5e644b56d9ab64783ee9615fad1f88b816eb9327b7ee8d928489930a4e90506e479c5928bbae992735dcb1ec8e1ce2d4603d8903188bbbeae73349f216", 0xba}, {&(0x7f00000037c0)="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", 0x1000}, {&(0x7f00000047c0)="e42cc6aae3189c73cd5204fa907b8a3faa4663afd90a7dab3ee1f3dc0dd8f6dfce0f9c0efab361903609ac9c590bea5f4b00be492afc2fdd2cc08e28e13f27371de9b64d2f4ec5b67ee99da882a33991569650e2f5ce2851ca31c3ca0b624d211bd52bf726e5657dac8196d0a849ae4a1fac376e2a58270627fbe2387826b892e8b3083e9f94c1fdffd2c5c1e0d63a32", 0x90}, {&(0x7f0000004880)="5d523858f3c324723ea0a1e48f9a9374530ab5109726e53612826d509035ee16ef2f7444f04ce9346c82e1c0994aacde3df6ddb29ee40abe317a6a937c68529572bdf15d03798a0b5a9c0f5405a3c58686d534fd8ae91ed89216a68f8833fbd3546be0fbcd40f0dd95710c14735caa721142a93094b5646e3e7a5dba9eaed84bc49256", 0x83}, {&(0x7f0000004940)="d062df294bfecce40c0fb49a507317b5dfae7eb106e9b6087f8fb01bc89eb0be78d7ff726ac7416114d2a952ab526d02bc7eda4d98cdfde069dd72c5eb200886af5cebcecd65fdb146de56f04de0a2c08707b7a2dabd4df16c395fab647a2cecab7a0a22427af43482a9088b2270bc43737711eecc6fc2d82d3143", 0x7b}], 0x5, &(0x7f0000004a00)={0x60, 0x110, 0x9, "37b900b597f059d60ffc135aa1a176b3628d2f14fa0ad2a0304a057c9678047f2067bcf637988888410531655ccddb411e4c62749fa1d88d76ad94f17b55ddeb0becd0221e388d948eb3a63693acbc4ab5"}, 0x60, 0x20000004}], 0x7, 0x800) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000002080)=0x200, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r3 = dup(r2) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000180)={0x100000001, 0x3ff, 0xc47d, 0x9}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000100)=0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000140)=r5) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r2, &(0x7f0000000200)="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", 0xb1, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x27c) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000004e00)) sendto$inet(r2, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 2162.235644] FAULT_INJECTION: forcing a failure. [ 2162.235644] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.247262] CPU: 0 PID: 6581 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2162.254196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2162.263553] Call Trace: [ 2162.266139] dump_stack+0x1b9/0x294 [ 2162.269778] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2162.274985] should_fail.cold.4+0xa/0x1a [ 2162.279126] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2162.284231] ? graph_lock+0x170/0x170 [ 2162.288037] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2162.293583] ? find_held_lock+0x36/0x1c0 [ 2162.297648] ? __lock_is_held+0xb5/0x140 [ 2162.301720] ? check_same_owner+0x320/0x320 [ 2162.306044] ? blk_mq_can_queue+0x50/0x50 [ 2162.310197] ? rcu_note_context_switch+0x710/0x710 [ 2162.315123] ? kobject_init+0x226/0x2d0 [ 2162.319098] __should_failslab+0x124/0x180 [ 2162.323327] should_failslab+0x9/0x14 [ 2162.327123] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2162.332225] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2162.337239] ? find_next_bit+0x104/0x130 [ 2162.341325] __kmalloc_node+0x33/0x70 [ 2162.345135] blk_mq_init_allocated_queue+0x220/0x1580 [ 2162.350414] ? blk_init_allocated_queue+0x5f0/0x5f0 [ 2162.355433] ? lockdep_init_map+0x9/0x10 [ 2162.359502] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2162.363994] ? __mutex_init+0x1ef/0x280 [ 2162.367992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2162.373543] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2162.378299] ? idr_alloc+0x145/0x1a0 [ 2162.382009] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2162.387219] blk_mq_init_queue+0x63/0xb0 [ 2162.391272] loop_add+0x32b/0x9c0 [ 2162.394719] ? loop_lookup+0x102/0x220 [ 2162.398603] ? loop_queue_rq+0x640/0x640 [ 2162.402679] ? __fget_light+0x2ef/0x430 [ 2162.406655] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2162.411849] loop_control_ioctl+0x178/0x500 [ 2162.416165] ? loop_add+0x9c0/0x9c0 [ 2162.419777] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2162.425302] ? fput+0x130/0x1a0 [ 2162.428577] ? ksys_write+0x1a6/0x250 [ 2162.432372] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2162.437556] ? loop_add+0x9c0/0x9c0 [ 2162.441197] __ia32_compat_sys_ioctl+0x221/0x640 [ 2162.445954] do_fast_syscall_32+0x345/0xf9b [ 2162.450295] ? do_int80_syscall_32+0x880/0x880 [ 2162.454874] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2162.459712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2162.465236] ? syscall_return_slowpath+0x30f/0x5c0 [ 2162.470247] ? sysret32_from_system_call+0x5/0x46 [ 2162.475089] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2162.479931] entry_SYSENTER_compat+0x70/0x7f [ 2162.484336] RIP: 0023:0xf7f1ccb9 [ 2162.487688] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2162.506956] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2162.514650] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2162.521906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2162.529170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2162.536445] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2162.543706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x92ffffff, &(0x7f000000a000)) 2018/06/05 23:28:05 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c35, 0x0) 2018/06/05 23:28:05 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c2a, 0x0) 2018/06/05 23:28:05 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c2e, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:05 executing program 7 (fault-call:8 fault-nth:27): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000040)=0x50) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x1, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000300)={0x1, 0x1, [@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xb}]}) sysinfo(&(0x7f0000000200)=""/254) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xc1) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:05 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c4d, r1) 2018/06/05 23:28:05 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1000000000000000]}, 0x6) 2018/06/05 23:28:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6c00, &(0x7f000000a000)) [ 2163.383671] FAULT_INJECTION: forcing a failure. [ 2163.383671] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.395744] CPU: 0 PID: 6615 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2163.402672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.412024] Call Trace: [ 2163.414606] dump_stack+0x1b9/0x294 [ 2163.418224] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2163.423405] ? perf_trace_lock_acquire+0xe3/0x980 [ 2163.428234] ? mark_held_locks+0xc9/0x160 [ 2163.432379] should_fail.cold.4+0xa/0x1a [ 2163.436433] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2163.441528] ? retint_kernel+0x10/0x10 [ 2163.445407] ? graph_lock+0x170/0x170 [ 2163.449199] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2163.453946] ? retint_kernel+0x10/0x10 [ 2163.457826] ? __lock_is_held+0xb5/0x140 [ 2163.461891] ? check_same_owner+0x320/0x320 [ 2163.466208] ? rcu_note_context_switch+0x710/0x710 [ 2163.471128] __should_failslab+0x124/0x180 [ 2163.475357] should_failslab+0x9/0x14 [ 2163.479152] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2163.484246] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2163.489771] ? find_next_bit+0x104/0x130 [ 2163.493841] __kmalloc_node+0x33/0x70 [ 2163.497641] blk_mq_realloc_hw_ctxs+0x2ad/0x1370 [ 2163.502407] ? blk_mq_free_map_and_requests+0x160/0x160 [ 2163.507766] ? __lock_is_held+0xb5/0x140 [ 2163.511826] ? __kmalloc_node+0x33/0x70 [ 2163.515785] ? __kmalloc_node+0x33/0x70 [ 2163.519753] ? rcu_read_lock_sched_held+0x108/0x120 [ 2163.524767] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2163.530038] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2163.535050] ? kasan_unpoison_shadow+0x35/0x50 [ 2163.539621] ? kasan_kmalloc+0xc4/0xe0 [ 2163.543508] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 2163.548690] ? lockdep_init_map+0x9/0x10 [ 2163.552741] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2163.557226] ? __mutex_init+0x1ef/0x280 [ 2163.561208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2163.566738] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2163.571665] ? retint_kernel+0x10/0x10 [ 2163.575542] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2163.580729] blk_mq_init_queue+0x63/0xb0 [ 2163.584780] loop_add+0x32b/0x9c0 [ 2163.588220] ? loop_lookup+0x102/0x220 [ 2163.592095] ? loop_queue_rq+0x640/0x640 [ 2163.596150] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2163.601340] loop_control_ioctl+0x178/0x500 [ 2163.605652] ? loop_add+0x9c0/0x9c0 [ 2163.609269] ? __ia32_compat_sys_ioctl+0xf4/0x640 [ 2163.614099] ? write_comp_data+0x1/0x70 [ 2163.618064] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2163.623241] ? loop_add+0x9c0/0x9c0 [ 2163.626856] __ia32_compat_sys_ioctl+0x221/0x640 [ 2163.631744] do_fast_syscall_32+0x345/0xf9b [ 2163.636059] ? do_int80_syscall_32+0x880/0x880 [ 2163.640630] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2163.645462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2163.650993] ? syscall_return_slowpath+0x30f/0x5c0 [ 2163.655924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2163.661448] ? retint_user+0x18/0x18 [ 2163.665155] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2163.670006] entry_SYSENTER_compat+0x70/0x7f [ 2163.674408] RIP: 0023:0xf7f1ccb9 [ 2163.677752] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2163.697093] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2163.704791] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2163.712043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2163.719295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2163.726548] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 2018/06/05 23:28:06 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c7d, 0x0) [ 2163.733802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:06 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c4e, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:06 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c09, 0x0) 2018/06/05 23:28:06 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c76, 0x0) 2018/06/05 23:28:06 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c1a, r1) 2018/06/05 23:28:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x3ba, &(0x7f000000a000)) 2018/06/05 23:28:06 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c13, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:06 executing program 7 (fault-call:8 fault-nth:28): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:06 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c31, 0x0) 2018/06/05 23:28:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff99, &(0x7f000000a000)) 2018/06/05 23:28:06 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4000000]}, 0x6) 2018/06/05 23:28:06 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c48, 0x0) 2018/06/05 23:28:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'securityposix_acl_access[$proc'}], 0xa, "c0ec0a3d8d13d428d6cd642ef75ff9804b7eb39a6c54653ea3cb592603a259a562684b33d3634f41f0f91282b8b45d3693c821cdc39bfb1cb741d42bbfb57c25511d6ce5d6418d031e89e30f5ab0957b8585d76e8a2a5bbcdf6ccd9c5403456bb4068e113e64275029def3ddfdc798be193ca357e294f667639cbc28f67dd3c236e3b21709941188a320160a11371cf91f05f86dbcbecb7d7b7688bfc21a479e464df7d110de687ed8a29b609aa8438f020666edfab77880749a99c71853f8b2d66e919fd610eecd6cec6db9024c471b15e38de47fb41f0d8a7fbbdbbf4742ff4a6537e858f16206f9fda9f6"}, 0x116) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:06 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c47, r1) [ 2164.247286] device bridge_slave_1 left promiscuous mode [ 2164.252855] bridge0: port 2(bridge_slave_1) entered disabled state [ 2164.272596] device bridge_slave_0 left promiscuous mode [ 2164.278125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2164.361954] team0 (unregistering): Port device team_slave_1 removed [ 2164.400770] team0 (unregistering): Port device team_slave_0 removed 2018/06/05 23:28:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x2000000000000000, &(0x7f000000a000)) [ 2164.436256] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2164.458194] IPVS: ftp: loaded support on port[0] = 21 [ 2164.469481] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2164.499854] bond0 (unregistering): Released all slaves 2018/06/05 23:28:06 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c69, 0x0) 2018/06/05 23:28:06 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c11, 0x0) 2018/06/05 23:28:07 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c6e, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2164.639790] FAULT_INJECTION: forcing a failure. [ 2164.639790] name failslab, interval 1, probability 0, space 0, times 0 [ 2164.651387] CPU: 1 PID: 6677 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2164.658320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.667682] Call Trace: [ 2164.670283] dump_stack+0x1b9/0x294 [ 2164.673919] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2164.679115] ? perf_trace_lock_acquire+0xe3/0x980 [ 2164.683971] ? retint_kernel+0x10/0x10 [ 2164.687875] should_fail.cold.4+0xa/0x1a [ 2164.691942] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2164.697055] ? lock_downgrade+0x8e0/0x8e0 [ 2164.701207] ? graph_lock+0x170/0x170 [ 2164.705010] ? lock_downgrade+0x8e0/0x8e0 [ 2164.709172] ? find_held_lock+0x36/0x1c0 [ 2164.713250] ? __lock_is_held+0xb5/0x140 [ 2164.717330] ? check_same_owner+0x320/0x320 [ 2164.721662] ? rcu_note_context_switch+0x710/0x710 [ 2164.726600] __should_failslab+0x124/0x180 [ 2164.730845] should_failslab+0x9/0x14 [ 2164.734650] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2164.739772] ? retint_kernel+0x10/0x10 [ 2164.743673] __kmalloc_node+0x33/0x70 [ 2164.747479] blk_mq_realloc_hw_ctxs+0x2ad/0x1370 [ 2164.752253] ? blk_mq_free_map_and_requests+0x160/0x160 [ 2164.757624] ? retint_kernel+0x10/0x10 [ 2164.761528] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2164.766554] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2164.771324] ? retint_kernel+0x10/0x10 [ 2164.775240] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 2164.780442] ? lockdep_init_map+0x9/0x10 [ 2164.784504] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2164.789003] ? __mutex_init+0x1ef/0x280 [ 2164.793008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2164.798729] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2164.803508] ? idr_alloc+0x145/0x1a0 [ 2164.807238] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2164.812448] blk_mq_init_queue+0x63/0xb0 [ 2164.816516] loop_add+0x32b/0x9c0 [ 2164.819974] ? loop_lookup+0x102/0x220 [ 2164.823865] ? loop_queue_rq+0x640/0x640 [ 2164.827936] ? __fget_light+0x2ef/0x430 [ 2164.831917] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2164.837812] loop_control_ioctl+0x178/0x500 [ 2164.842250] ? loop_add+0x9c0/0x9c0 [ 2164.845889] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2164.851435] ? fput+0x130/0x1a0 [ 2164.854729] ? ksys_write+0x1a6/0x250 [ 2164.858548] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2164.863752] ? loop_add+0x9c0/0x9c0 [ 2164.867389] __ia32_compat_sys_ioctl+0x221/0x640 [ 2164.872162] do_fast_syscall_32+0x345/0xf9b [ 2164.876494] ? do_int80_syscall_32+0x880/0x880 [ 2164.881081] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2164.885958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2164.891504] ? syscall_return_slowpath+0x30f/0x5c0 [ 2164.896450] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2164.901992] ? retint_user+0x18/0x18 [ 2164.905716] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2164.910573] entry_SYSENTER_compat+0x70/0x7f [ 2164.914987] RIP: 0023:0xf7f1ccb9 [ 2164.918343] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2164.938106] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2164.945806] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2164.953066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2164.960320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2164.967575] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2164.974837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:07 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c77, 0x0) 2018/06/05 23:28:07 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c1d, 0x0) 2018/06/05 23:28:07 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xe00000000000000, &(0x7f000000a000)) [ 2165.995513] bridge0: port 1(bridge_slave_0) entered blocking state [ 2166.001926] bridge0: port 1(bridge_slave_0) entered disabled state [ 2166.010154] device bridge_slave_0 entered promiscuous mode [ 2166.047846] bridge0: port 2(bridge_slave_1) entered blocking state [ 2166.054253] bridge0: port 2(bridge_slave_1) entered disabled state [ 2166.061689] device bridge_slave_1 entered promiscuous mode [ 2166.096989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2166.132723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2166.241273] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2166.280853] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2166.438194] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2166.445531] team0: Port device team_slave_0 added [ 2166.474160] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2166.481507] team0: Port device team_slave_1 added [ 2166.516847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2166.556885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2166.584721] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2166.591785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2166.600288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2166.619872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2166.626941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2166.635541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2166.850437] bridge0: port 2(bridge_slave_1) entered blocking state [ 2166.856832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2166.863466] bridge0: port 1(bridge_slave_0) entered blocking state [ 2166.869857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2166.877195] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2167.199207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2167.658566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2167.735497] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2167.810527] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2167.816714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2167.823784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2167.896770] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:28:10 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c70, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:10 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1100]}, 0x6) 2018/06/05 23:28:10 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c34, 0x0) 2018/06/05 23:28:10 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c0b, 0x0) 2018/06/05 23:28:10 executing program 7 (fault-call:8 fault-nth:29): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8901000000000000, &(0x7f000000a000)) 2018/06/05 23:28:10 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c0b, r1) 2018/06/05 23:28:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3, 0x200) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x6, 0x100000000, 0x1815, 0x3, 0x0, 0x1ff, 0x800, 0x0, 0x6be5, 0x200, 0x1, 0x9f8, 0x6, 0xe72, 0x7, 0xfffffffffffffff9, 0x100000001, 0x0, 0x380000000000, 0x101, 0x7f, 0x3, 0x5, 0x300000000000000, 0x400, 0x10000, 0x101, 0x0, 0x2, 0x0, 0x2, 0x843, 0x7, 0x0, 0x89, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x10000, 0xe8c, 0x6, 0x3, 0x5, 0x8, 0x5}, r1, 0x7, r2, 0x0) 2018/06/05 23:28:10 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c5c, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2168.567964] FAULT_INJECTION: forcing a failure. [ 2168.567964] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.579686] CPU: 1 PID: 6988 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2168.586620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.595971] Call Trace: [ 2168.598571] dump_stack+0x1b9/0x294 [ 2168.602216] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2168.607417] ? should_fail+0x20a/0xbcd [ 2168.611319] should_fail.cold.4+0xa/0x1a [ 2168.615392] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2168.620505] ? unwind_get_return_address+0x61/0xa0 [ 2168.625436] ? __save_stack_trace+0x7e/0xd0 [ 2168.629782] ? graph_lock+0x170/0x170 [ 2168.633599] ? find_held_lock+0x36/0x1c0 [ 2168.637669] ? __lock_is_held+0xb5/0x140 [ 2168.641749] ? check_same_owner+0x320/0x320 [ 2168.646076] ? rcu_note_context_switch+0x710/0x710 [ 2168.651028] __should_failslab+0x124/0x180 [ 2168.655265] should_failslab+0x9/0x14 [ 2168.659072] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2168.664174] ? __kmalloc_node+0x33/0x70 [ 2168.668149] ? __kmalloc_node+0x33/0x70 [ 2168.672316] ? rcu_read_lock_sched_held+0x108/0x120 [ 2168.677351] __kmalloc_node+0x33/0x70 [ 2168.681180] sbitmap_init_node+0x290/0x460 [ 2168.685420] blk_mq_realloc_hw_ctxs+0x73f/0x1370 [ 2168.690217] ? blk_mq_free_map_and_requests+0x160/0x160 [ 2168.695591] ? __lock_is_held+0xb5/0x140 [ 2168.699663] ? __kmalloc_node+0x33/0x70 [ 2168.703657] ? __kmalloc_node+0x33/0x70 [ 2168.707635] ? rcu_read_lock_sched_held+0x108/0x120 [ 2168.712653] ? kmem_cache_alloc_node_trace+0x34e/0x770 2018/06/05 23:28:11 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c59, 0x0) 2018/06/05 23:28:11 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c1d, 0x0) [ 2168.717936] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2168.722963] ? kasan_unpoison_shadow+0x35/0x50 [ 2168.727550] ? kasan_kmalloc+0xc4/0xe0 [ 2168.731459] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 2168.736661] ? lockdep_init_map+0x9/0x10 [ 2168.740728] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2168.745232] ? __mutex_init+0x1ef/0x280 [ 2168.749234] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2168.754782] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2168.759559] ? idr_alloc+0x145/0x1a0 [ 2168.763284] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2168.768494] blk_mq_init_queue+0x63/0xb0 [ 2168.772554] loop_add+0x32b/0x9c0 [ 2168.776009] ? loop_lookup+0x102/0x220 [ 2168.779896] ? loop_queue_rq+0x640/0x640 [ 2168.783957] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2168.789153] loop_control_ioctl+0x178/0x500 [ 2168.793468] ? loop_add+0x9c0/0x9c0 [ 2168.797092] ? retint_kernel+0x10/0x10 [ 2168.800973] ? __ia32_compat_sys_ioctl+0x1b5/0x640 [ 2168.806249] ? loop_add+0x9c0/0x9c0 [ 2168.809883] __ia32_compat_sys_ioctl+0x221/0x640 [ 2168.814636] do_fast_syscall_32+0x345/0xf9b [ 2168.818968] ? do_int80_syscall_32+0x880/0x880 [ 2168.823558] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2168.828406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2168.833937] ? syscall_return_slowpath+0x30f/0x5c0 [ 2168.838871] ? sysret32_from_system_call+0x5/0x46 [ 2168.843713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2168.848546] entry_SYSENTER_compat+0x70/0x7f [ 2168.852935] RIP: 0023:0xf7f1ccb9 [ 2168.856275] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2168.875561] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2168.883275] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2168.890541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2168.897796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2168.905056] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2168.912329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:11 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x81ffffff, &(0x7f000000a000)) 2018/06/05 23:28:11 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c06, 0x0) 2018/06/05 23:28:11 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x700, &(0x7f000000a000)) 2018/06/05 23:28:11 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c2f, 0x0) 2018/06/05 23:28:11 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c4d, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:11 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xee41500]}, 0x6) 2018/06/05 23:28:12 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c5a, 0x0) 2018/06/05 23:28:12 executing program 7 (fault-call:8 fault-nth:30): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:12 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c18, r1) 2018/06/05 23:28:12 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c15, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:12 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c62, 0x0) 2018/06/05 23:28:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) listen(r1, 0xcc) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) accept4$inet6(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x0) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:12 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x8]}, 0x6) 2018/06/05 23:28:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xf401, &(0x7f000000a000)) 2018/06/05 23:28:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1fffff, &(0x7f000000a000)) [ 2170.743775] FAULT_INJECTION: forcing a failure. [ 2170.743775] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.755176] CPU: 1 PID: 7058 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2170.762107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2170.771467] Call Trace: [ 2170.774066] dump_stack+0x1b9/0x294 [ 2170.777706] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2170.782905] ? perf_trace_lock_acquire+0xe3/0x980 [ 2170.787760] ? kasan_check_read+0x11/0x20 [ 2170.791919] should_fail.cold.4+0xa/0x1a [ 2170.795984] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2170.801092] ? is_bpf_text_address+0xd7/0x170 [ 2170.805597] ? kernel_text_address+0x79/0xf0 [ 2170.810021] ? graph_lock+0x170/0x170 [ 2170.813830] ? unwind_get_return_address+0x61/0xa0 [ 2170.818771] ? find_held_lock+0x36/0x1c0 [ 2170.822839] ? __lock_is_held+0xb5/0x140 [ 2170.826917] ? check_same_owner+0x320/0x320 [ 2170.831240] ? graph_lock+0x170/0x170 [ 2170.835037] ? __lock_is_held+0xb5/0x140 [ 2170.839109] ? rcu_note_context_switch+0x710/0x710 [ 2170.844048] __should_failslab+0x124/0x180 [ 2170.848293] should_failslab+0x9/0x14 [ 2170.852097] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2170.857207] ? __lock_is_held+0xb5/0x140 [ 2170.861301] blk_alloc_flush_queue+0xc5/0x3d0 [ 2170.865806] ? blk_insert_flush+0xaf0/0xaf0 [ 2170.870136] ? kasan_unpoison_shadow+0x35/0x50 [ 2170.874725] ? kasan_kmalloc+0xc4/0xe0 [ 2170.878616] ? __kmalloc_node+0x47/0x70 [ 2170.882600] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2170.887626] ? blk_mq_sched_init_hctx+0x117/0x1a0 2018/06/05 23:28:13 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c1e, r1) [ 2170.892479] blk_mq_realloc_hw_ctxs+0x976/0x1370 [ 2170.897258] ? blk_mq_free_map_and_requests+0x160/0x160 [ 2170.902620] ? __lock_is_held+0xb5/0x140 [ 2170.906691] ? __kmalloc_node+0x33/0x70 [ 2170.910674] ? rcu_read_lock_sched_held+0x108/0x120 [ 2170.915696] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2170.920980] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2170.926090] ? kasan_unpoison_shadow+0x35/0x50 [ 2170.930677] ? kasan_kmalloc+0xc4/0xe0 [ 2170.934580] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 2170.939778] ? lockdep_init_map+0x9/0x10 2018/06/05 23:28:13 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c1e, 0x0) [ 2170.943931] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2170.948430] ? __mutex_init+0x1ef/0x280 [ 2170.952429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2170.957970] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2170.962745] ? idr_alloc+0x145/0x1a0 [ 2170.966456] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2170.971647] blk_mq_init_queue+0x63/0xb0 [ 2170.975736] loop_add+0x32b/0x9c0 [ 2170.979173] ? loop_lookup+0x102/0x220 [ 2170.983071] ? loop_queue_rq+0x640/0x640 [ 2170.987141] ? __fget_light+0x2ef/0x430 [ 2170.991119] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2170.996323] loop_control_ioctl+0x178/0x500 [ 2171.000639] ? loop_add+0x9c0/0x9c0 [ 2171.004271] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2171.009808] ? fput+0x130/0x1a0 [ 2171.013093] ? ksys_write+0x1a6/0x250 [ 2171.016891] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2171.022162] ? loop_add+0x9c0/0x9c0 [ 2171.025787] __ia32_compat_sys_ioctl+0x221/0x640 [ 2171.030536] do_fast_syscall_32+0x345/0xf9b [ 2171.034853] ? do_int80_syscall_32+0x880/0x880 [ 2171.039426] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2171.044277] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2171.049851] ? syscall_return_slowpath+0x30f/0x5c0 [ 2171.054783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2171.060322] ? retint_user+0x18/0x18 [ 2171.064037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2171.068883] entry_SYSENTER_compat+0x70/0x7f [ 2171.073276] RIP: 0023:0xf7f1ccb9 2018/06/05 23:28:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff8c, &(0x7f000000a000)) [ 2171.076625] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2171.095920] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2171.103624] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2171.110881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2171.118142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2171.125415] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2171.132683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:13 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c3c, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:13 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c5c, 0x0) 2018/06/05 23:28:13 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c27, 0x0) 2018/06/05 23:28:13 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c39, r1) [ 2171.424402] device bridge_slave_1 left promiscuous mode [ 2171.430076] bridge0: port 2(bridge_slave_1) entered disabled state [ 2171.464170] device bridge_slave_0 left promiscuous mode [ 2171.469780] bridge0: port 1(bridge_slave_0) entered disabled state [ 2171.611910] team0 (unregistering): Port device team_slave_1 removed [ 2171.624809] IPVS: ftp: loaded support on port[0] = 21 [ 2171.645555] team0 (unregistering): Port device team_slave_0 removed [ 2171.667245] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2171.694058] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2171.718843] bond0 (unregistering): Released all slaves [ 2172.304996] bridge0: port 1(bridge_slave_0) entered blocking state [ 2172.311510] bridge0: port 1(bridge_slave_0) entered disabled state [ 2172.319376] device bridge_slave_0 entered promiscuous mode [ 2172.356736] bridge0: port 2(bridge_slave_1) entered blocking state [ 2172.363140] bridge0: port 2(bridge_slave_1) entered disabled state [ 2172.370997] device bridge_slave_1 entered promiscuous mode [ 2172.407600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2172.446112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2172.552824] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2172.593253] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2172.764169] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2172.771980] team0: Port device team_slave_0 added [ 2172.807717] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2172.814909] team0: Port device team_slave_1 added [ 2172.843434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2172.883394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2172.922690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2172.948641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2173.197522] bridge0: port 2(bridge_slave_1) entered blocking state [ 2173.203914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2173.210556] bridge0: port 1(bridge_slave_0) entered blocking state [ 2173.216931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2174.000662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2174.077548] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2174.155103] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2174.161294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2174.169057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2174.242461] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:28:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x384, &(0x7f000000a000)) 2018/06/05 23:28:17 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0xc0189436, r1) 2018/06/05 23:28:17 executing program 7 (fault-call:8 fault-nth:31): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:17 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c42, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:17 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c1a, 0x0) 2018/06/05 23:28:17 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c7e, 0x0) 2018/06/05 23:28:17 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x594]}, 0x6) 2018/06/05 23:28:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x2000000000000168) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001a40)=0x14, 0x80800) bind$can_raw(r1, &(0x7f0000001a80)={0x1d, r2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:17 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c28, 0x0) [ 2174.935058] FAULT_INJECTION: forcing a failure. [ 2174.935058] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.946796] CPU: 1 PID: 7376 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2174.953727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2174.963084] Call Trace: [ 2174.965683] dump_stack+0x1b9/0x294 [ 2174.969324] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2174.974518] ? perf_trace_lock_acquire+0xe3/0x980 [ 2174.979367] ? __kernel_text_address+0xd/0x40 2018/06/05 23:28:17 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c0d, r1) [ 2174.983877] ? unwind_get_return_address+0x61/0xa0 [ 2174.988815] should_fail.cold.4+0xa/0x1a [ 2174.992883] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2174.998006] ? save_stack+0xa9/0xd0 [ 2175.001646] ? graph_lock+0x170/0x170 [ 2175.005456] ? blk_mq_realloc_hw_ctxs+0x976/0x1370 [ 2175.010396] ? blk_mq_init_allocated_queue+0x2b8/0x1580 [ 2175.015777] ? blk_mq_init_queue+0x63/0xb0 [ 2175.020026] ? loop_add+0x32b/0x9c0 [ 2175.023665] ? __ia32_compat_sys_ioctl+0x221/0x640 [ 2175.028604] ? find_held_lock+0x36/0x1c0 [ 2175.032674] ? __lock_is_held+0xb5/0x140 [ 2175.036755] ? check_same_owner+0x320/0x320 [ 2175.041170] ? rcu_note_context_switch+0x710/0x710 [ 2175.046111] __should_failslab+0x124/0x180 [ 2175.050356] should_failslab+0x9/0x14 [ 2175.054162] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2175.059279] ? __raw_spin_lock_init+0x1c/0x100 [ 2175.063868] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2175.068894] __kmalloc_node+0x33/0x70 [ 2175.072704] blk_alloc_flush_queue+0x178/0x3d0 [ 2175.077288] ? blk_insert_flush+0xaf0/0xaf0 [ 2175.081616] ? kasan_unpoison_shadow+0x35/0x50 [ 2175.086208] ? kasan_kmalloc+0xc4/0xe0 [ 2175.090101] ? __kmalloc_node+0x47/0x70 [ 2175.094087] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2175.099117] ? blk_mq_sched_init_hctx+0x117/0x1a0 [ 2175.103964] blk_mq_realloc_hw_ctxs+0x976/0x1370 [ 2175.108734] ? blk_mq_free_map_and_requests+0x160/0x160 [ 2175.114100] ? __lock_is_held+0xb5/0x140 [ 2175.118266] ? __kmalloc_node+0x33/0x70 [ 2175.122244] ? rcu_read_lock_sched_held+0x108/0x120 [ 2175.127324] ? kmem_cache_alloc_node_trace+0x34e/0x770 2018/06/05 23:28:17 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c58, 0x0) 2018/06/05 23:28:17 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c27, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2175.132619] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2175.137643] ? kasan_unpoison_shadow+0x35/0x50 [ 2175.142229] ? kasan_kmalloc+0xc4/0xe0 [ 2175.146134] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 2175.151333] ? lockdep_init_map+0x9/0x10 [ 2175.155397] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2175.159905] ? __mutex_init+0x1ef/0x280 [ 2175.163916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2175.169451] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2175.174197] ? idr_alloc+0x145/0x1a0 [ 2175.177916] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2175.183121] blk_mq_init_queue+0x63/0xb0 [ 2175.187188] loop_add+0x32b/0x9c0 [ 2175.190637] ? loop_lookup+0x102/0x220 [ 2175.194529] ? loop_queue_rq+0x640/0x640 [ 2175.198590] ? __fget_light+0x2ef/0x430 [ 2175.202559] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2175.207739] loop_control_ioctl+0x178/0x500 [ 2175.212054] ? loop_add+0x9c0/0x9c0 [ 2175.215678] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2175.221216] ? fput+0x130/0x1a0 [ 2175.224497] ? ksys_write+0x1a6/0x250 [ 2175.228301] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2175.233483] ? loop_add+0x9c0/0x9c0 [ 2175.237111] __ia32_compat_sys_ioctl+0x221/0x640 [ 2175.241860] do_fast_syscall_32+0x345/0xf9b [ 2175.246167] ? do_int80_syscall_32+0x880/0x880 [ 2175.250733] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2175.255568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2175.261090] ? syscall_return_slowpath+0x30f/0x5c0 [ 2175.266018] ? sysret32_from_system_call+0x5/0x46 [ 2175.270855] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2175.275696] entry_SYSENTER_compat+0x70/0x7f [ 2175.280122] RIP: 0023:0xf7f1ccb9 [ 2175.283471] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2175.302875] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2175.310582] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2175.317850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2175.325181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2175.332453] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2175.339725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:17 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c07, 0x0) 2018/06/05 23:28:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xf6ffffff00000000, &(0x7f000000a000)) 2018/06/05 23:28:17 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c26, r1) [ 2175.624300] device bridge_slave_1 left promiscuous mode [ 2175.630000] bridge0: port 2(bridge_slave_1) entered disabled state [ 2175.702079] device bridge_slave_0 left promiscuous mode [ 2175.707710] bridge0: port 1(bridge_slave_0) entered disabled state [ 2175.803884] IPVS: ftp: loaded support on port[0] = 21 [ 2175.880745] team0 (unregistering): Port device team_slave_1 removed [ 2175.894804] team0 (unregistering): Port device team_slave_0 removed [ 2175.907715] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2175.922882] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2175.948454] bond0 (unregistering): Released all slaves [ 2176.545150] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.551661] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.559209] device bridge_slave_0 entered promiscuous mode [ 2176.596661] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.603162] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.610515] device bridge_slave_1 entered promiscuous mode [ 2176.646293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2176.681159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2176.787714] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2176.827294] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2176.997264] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2177.004713] team0: Port device team_slave_0 added [ 2177.040351] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2177.047828] team0: Port device team_slave_1 added [ 2177.078372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2177.116885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2177.156803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2177.192301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2177.434556] bridge0: port 2(bridge_slave_1) entered blocking state [ 2177.440938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2177.447571] bridge0: port 1(bridge_slave_0) entered blocking state [ 2177.453928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2177.461270] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2178.240287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2178.319377] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2178.397412] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2178.403971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2178.411633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2178.424133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2178.488573] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:28:21 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c6b, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:21 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c82, 0x0) 2018/06/05 23:28:21 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c15, 0x0) 2018/06/05 23:28:21 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe]}, 0x6) 2018/06/05 23:28:21 executing program 7 (fault-call:8 fault-nth:32): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffff1f0000000000, &(0x7f000000a000)) 2018/06/05 23:28:21 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c23, r1) 2018/06/05 23:28:21 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f00000004c0), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000200)={0x200, {{0x2, 0x4e20, @loopback=0x7f000001}}, {{0x2, 0x4e21}}}, 0x104) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:21 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c59, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:21 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x0) 2018/06/05 23:28:21 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c6c, 0x0) [ 2179.148069] FAULT_INJECTION: forcing a failure. [ 2179.148069] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.160192] CPU: 1 PID: 7685 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2179.167141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2179.176586] Call Trace: [ 2179.179187] dump_stack+0x1b9/0x294 [ 2179.182809] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2179.187991] ? perf_trace_lock_acquire+0xe3/0x980 [ 2179.193100] ? lock_release+0xa10/0xa10 [ 2179.197099] should_fail.cold.4+0xa/0x1a [ 2179.201190] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2179.206284] ? kasan_check_write+0x14/0x20 [ 2179.210506] ? __mutex_lock+0x7d9/0x17f0 [ 2179.214608] ? graph_lock+0x170/0x170 [ 2179.218407] ? graph_lock+0x170/0x170 [ 2179.222209] ? find_held_lock+0x36/0x1c0 [ 2179.226266] ? __lock_is_held+0xb5/0x140 [ 2179.230331] ? check_same_owner+0x320/0x320 [ 2179.234643] ? lock_downgrade+0x8e0/0x8e0 [ 2179.238781] ? rcu_note_context_switch+0x710/0x710 [ 2179.243707] ? graph_lock+0x170/0x170 [ 2179.247515] __should_failslab+0x124/0x180 [ 2179.251762] should_failslab+0x9/0x14 [ 2179.255561] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2179.260676] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2179.266222] ? find_next_bit+0x104/0x130 [ 2179.270294] blk_mq_init_tags+0x79/0x2b0 [ 2179.274361] blk_mq_alloc_rq_map+0x9f/0x220 [ 2179.278701] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 2179.284064] blk_mq_init_sched+0x1e1/0x5a0 [ 2179.288309] elevator_init_mq+0xd7/0x160 [ 2179.292381] blk_mq_init_allocated_queue+0xf19/0x1580 [ 2179.297584] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2179.302088] ? __mutex_init+0x1ef/0x280 [ 2179.306082] ? mark_held_locks+0xc9/0x160 [ 2179.310229] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2179.315249] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2179.320006] ? retint_kernel+0x10/0x10 [ 2179.323913] blk_mq_init_queue+0x63/0xb0 [ 2179.327972] loop_add+0x32b/0x9c0 [ 2179.331418] ? loop_lookup+0x102/0x220 [ 2179.335303] ? loop_queue_rq+0x640/0x640 [ 2179.339355] ? retint_kernel+0x10/0x10 [ 2179.343244] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2179.348450] loop_control_ioctl+0x178/0x500 [ 2179.352758] ? loop_add+0x9c0/0x9c0 [ 2179.356384] ? retint_kernel+0x10/0x10 [ 2179.360288] ? loop_add+0x9c0/0x9c0 [ 2179.363921] ? loop_add+0x9c0/0x9c0 [ 2179.367555] __ia32_compat_sys_ioctl+0x221/0x640 [ 2179.372339] do_fast_syscall_32+0x345/0xf9b [ 2179.376660] ? do_int80_syscall_32+0x880/0x880 [ 2179.381243] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2179.386089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2179.391654] ? syscall_return_slowpath+0x30f/0x5c0 [ 2179.396584] ? sysret32_from_system_call+0x5/0x46 [ 2179.401439] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2179.406283] entry_SYSENTER_compat+0x70/0x7f [ 2179.410688] RIP: 0023:0xf7f1ccb9 [ 2179.414129] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2179.433486] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2179.441198] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2179.448468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2179.455729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2179.462992] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2179.470258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:21 executing program 7 (fault-call:8 fault-nth:33): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:21 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c82, r1) 2018/06/05 23:28:22 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x91ffffff00000000, &(0x7f000000a000)) [ 2179.718624] FAULT_INJECTION: forcing a failure. [ 2179.718624] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.742433] CPU: 1 PID: 7713 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2179.749380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2179.758819] Call Trace: [ 2179.761413] dump_stack+0x1b9/0x294 [ 2179.765050] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2179.770250] ? should_fail.cold.4+0x5/0x1a [ 2179.774493] should_fail.cold.4+0xa/0x1a [ 2179.778556] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2179.783665] ? rcu_report_qs_rnp+0x790/0x790 [ 2179.788085] ? graph_lock+0x170/0x170 [ 2179.791888] ? is_bpf_text_address+0xd7/0x170 [ 2179.796383] ? find_held_lock+0x36/0x1c0 [ 2179.800882] ? __lock_is_held+0xb5/0x140 [ 2179.804958] ? check_same_owner+0x320/0x320 [ 2179.809280] ? kasan_kmalloc+0xc4/0xe0 [ 2179.813172] ? rcu_note_context_switch+0x710/0x710 [ 2179.818107] ? mark_held_locks+0xc9/0x160 [ 2179.822344] ? blk_mq_init_queue+0x63/0xb0 [ 2179.826587] __should_failslab+0x124/0x180 [ 2179.830831] should_failslab+0x9/0x14 [ 2179.834718] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2179.839837] __kmalloc_node+0x33/0x70 [ 2179.843646] sbitmap_init_node+0x290/0x460 [ 2179.847897] sbitmap_queue_init_node+0xaa/0x840 [ 2179.852590] ? sbitmap_init_node+0x460/0x460 [ 2179.857022] ? rcu_read_lock_sched_held+0x108/0x120 [ 2179.862049] ? kmem_cache_alloc_node_trace+0x34e/0x770 2018/06/05 23:28:22 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c2f, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:22 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c61, 0x0) [ 2179.867337] blk_mq_init_tags+0x11b/0x2b0 [ 2179.871487] blk_mq_alloc_rq_map+0x9f/0x220 [ 2179.875907] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 2179.881287] blk_mq_init_sched+0x1e1/0x5a0 [ 2179.885531] elevator_init_mq+0xd7/0x160 [ 2179.889582] blk_mq_init_allocated_queue+0xf19/0x1580 [ 2179.894775] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2179.899261] ? __mutex_init+0x1ef/0x280 [ 2179.903235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2179.908762] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2179.913511] ? idr_alloc+0x145/0x1a0 [ 2179.917215] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2179.922395] blk_mq_init_queue+0x63/0xb0 [ 2179.926445] loop_add+0x32b/0x9c0 [ 2179.929924] ? loop_lookup+0x102/0x220 [ 2179.933808] ? loop_queue_rq+0x640/0x640 [ 2179.937874] ? retint_kernel+0x10/0x10 [ 2179.941762] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2179.946948] loop_control_ioctl+0x178/0x500 [ 2179.951262] ? loop_add+0x9c0/0x9c0 [ 2179.954884] ? retint_kernel+0x10/0x10 [ 2179.958768] ? loop_add+0x9c0/0x9c0 [ 2179.962386] ? loop_add+0x9c0/0x9c0 [ 2179.966001] __ia32_compat_sys_ioctl+0x221/0x640 [ 2179.970761] do_fast_syscall_32+0x345/0xf9b [ 2179.975076] ? do_int80_syscall_32+0x880/0x880 [ 2179.979647] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2179.984483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2179.990024] ? syscall_return_slowpath+0x30f/0x5c0 [ 2179.994948] ? sysret32_from_system_call+0x5/0x46 [ 2179.999794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2180.004643] entry_SYSENTER_compat+0x70/0x7f [ 2180.009046] RIP: 0023:0xf7f1ccb9 [ 2180.012406] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2180.031587] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2180.039300] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2180.046568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2180.053833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2180.061091] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2180.068346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:22 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c4b, r1) 2018/06/05 23:28:22 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c04, 0x0) 2018/06/05 23:28:22 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x1100000000000000]}, 0x6) 2018/06/05 23:28:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:22 executing program 7 (fault-call:8 fault-nth:34): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:22 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c57, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:22 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8fffffff00000000, &(0x7f000000a000)) 2018/06/05 23:28:22 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c64, 0x0) 2018/06/05 23:28:22 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c53, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:23 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0xc020660b, 0x0) 2018/06/05 23:28:23 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c64, 0x0) [ 2180.687954] FAULT_INJECTION: forcing a failure. [ 2180.687954] name failslab, interval 1, probability 0, space 0, times 0 [ 2180.699421] CPU: 1 PID: 7740 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2180.706367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2180.715898] Call Trace: [ 2180.718509] dump_stack+0x1b9/0x294 [ 2180.722159] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2180.727364] ? perf_trace_lock_acquire+0xe3/0x980 [ 2180.732222] should_fail.cold.4+0xa/0x1a [ 2180.736301] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2180.741416] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2180.746440] ? graph_lock+0x170/0x170 [ 2180.750254] ? find_held_lock+0x36/0x1c0 [ 2180.754327] ? __lock_is_held+0xb5/0x140 [ 2180.758425] ? check_same_owner+0x320/0x320 [ 2180.762755] ? __kmalloc_node+0x33/0x70 [ 2180.766739] ? rcu_note_context_switch+0x710/0x710 [ 2180.771676] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2180.776961] __should_failslab+0x124/0x180 [ 2180.781206] should_failslab+0x9/0x14 2018/06/05 23:28:23 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c31, r1) [ 2180.785016] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2180.790126] ? __kmalloc_node+0x47/0x70 [ 2180.794107] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2180.799135] ? find_next_bit+0x104/0x130 [ 2180.803218] sbitmap_queue_init_node+0x31c/0x840 [ 2180.808084] ? sbitmap_init_node+0x460/0x460 [ 2180.812525] ? rcu_read_lock_sched_held+0x108/0x120 [ 2180.817553] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2180.822845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2180.828406] ? find_next_bit+0x104/0x130 [ 2180.832486] blk_mq_init_tags+0x11b/0x2b0 [ 2180.836649] blk_mq_alloc_rq_map+0x9f/0x220 [ 2180.840986] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 2180.846381] blk_mq_init_sched+0x1e1/0x5a0 [ 2180.850621] elevator_init_mq+0xd7/0x160 [ 2180.854717] blk_mq_init_allocated_queue+0xf19/0x1580 [ 2180.859916] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2180.864398] ? __mutex_init+0x1ef/0x280 [ 2180.868373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2180.873897] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2180.878646] ? idr_alloc+0x145/0x1a0 [ 2180.882364] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2180.887559] blk_mq_init_queue+0x63/0xb0 [ 2180.891611] loop_add+0x32b/0x9c0 [ 2180.895053] ? loop_lookup+0x102/0x220 [ 2180.898928] ? loop_queue_rq+0x640/0x640 [ 2180.902984] ? __fget_light+0x2ef/0x430 [ 2180.906978] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2180.912262] loop_control_ioctl+0x178/0x500 [ 2180.916570] ? loop_add+0x9c0/0x9c0 [ 2180.920195] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2180.925726] ? fput+0x130/0x1a0 [ 2180.929006] ? ksys_write+0x1a6/0x250 [ 2180.932808] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2180.938082] ? loop_add+0x9c0/0x9c0 [ 2180.941718] __ia32_compat_sys_ioctl+0x221/0x640 [ 2180.946506] do_fast_syscall_32+0x345/0xf9b [ 2180.950831] ? do_int80_syscall_32+0x880/0x880 [ 2180.955423] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2180.960282] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2180.965828] ? syscall_return_slowpath+0x30f/0x5c0 [ 2180.970759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2180.976307] ? retint_user+0x18/0x18 [ 2180.980034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2180.984885] entry_SYSENTER_compat+0x70/0x7f [ 2180.989982] RIP: 0023:0xf7f1ccb9 [ 2180.993332] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2181.012635] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2181.020345] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2181.027602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2181.034948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2181.042202] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2181.049456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:23 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c49, r1) 2018/06/05 23:28:23 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c77, 0x0) 2018/06/05 23:28:23 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4c000000, &(0x7f000000a000)) 2018/06/05 23:28:23 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c1b, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2181.359979] device bridge_slave_1 left promiscuous mode [ 2181.365748] bridge0: port 2(bridge_slave_1) entered disabled state 2018/06/05 23:28:23 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c63, 0x0) [ 2181.422412] device bridge_slave_0 left promiscuous mode [ 2181.428183] bridge0: port 1(bridge_slave_0) entered disabled state 2018/06/05 23:28:23 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x10100000000]}, 0x6) [ 2181.540645] IPVS: ftp: loaded support on port[0] = 21 2018/06/05 23:28:23 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c4b, 0x0) [ 2181.578541] team0 (unregistering): Port device team_slave_1 removed [ 2181.597365] team0 (unregistering): Port device team_slave_0 removed [ 2181.612194] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2181.653219] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2181.748549] bond0 (unregistering): Released all slaves 2018/06/05 23:28:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:24 executing program 7 (fault-call:8 fault-nth:35): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:24 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c5a, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:24 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x3, &(0x7f000000a000)) 2018/06/05 23:28:24 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c45, 0x0) 2018/06/05 23:28:24 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c29, 0x0) [ 2182.147075] FAULT_INJECTION: forcing a failure. [ 2182.147075] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.158816] CPU: 0 PID: 7806 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2182.165745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2182.175112] Call Trace: [ 2182.177708] dump_stack+0x1b9/0x294 [ 2182.181365] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2182.186579] ? perf_trace_lock_acquire+0xe3/0x980 [ 2182.191439] ? find_next_zero_bit+0x111/0x140 [ 2182.195954] should_fail.cold.4+0xa/0x1a [ 2182.200035] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2182.205158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2182.210708] ? graph_lock+0x170/0x170 [ 2182.214528] ? find_held_lock+0x36/0x1c0 [ 2182.218600] ? __lock_is_held+0xb5/0x140 [ 2182.222685] ? check_same_owner+0x320/0x320 [ 2182.227013] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2182.232043] ? rcu_note_context_switch+0x710/0x710 [ 2182.236975] ? __lockdep_init_map+0x105/0x590 [ 2182.241478] __should_failslab+0x124/0x180 [ 2182.245708] should_failslab+0x9/0x14 [ 2182.249500] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2182.254688] ? init_wait_entry+0x1b0/0x1b0 [ 2182.258929] sbitmap_queue_init_node+0x31c/0x840 [ 2182.263681] ? sbitmap_init_node+0x460/0x460 [ 2182.268081] ? rcu_read_lock_sched_held+0x108/0x120 [ 2182.273091] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2182.278359] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2182.283895] ? find_next_bit+0x104/0x130 [ 2182.287956] blk_mq_init_tags+0x17c/0x2b0 [ 2182.292099] blk_mq_alloc_rq_map+0x9f/0x220 [ 2182.296418] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 2182.301787] blk_mq_init_sched+0x1e1/0x5a0 [ 2182.306028] elevator_init_mq+0xd7/0x160 [ 2182.310088] blk_mq_init_allocated_queue+0xf19/0x1580 [ 2182.315274] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2182.319759] ? __mutex_init+0x1ef/0x280 [ 2182.323858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2182.329383] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2182.334138] ? idr_alloc+0x145/0x1a0 [ 2182.337845] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2182.343032] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2182.347780] blk_mq_init_queue+0x63/0xb0 [ 2182.351841] loop_add+0x32b/0x9c0 [ 2182.355285] ? loop_queue_rq+0x640/0x640 [ 2182.359356] loop_control_ioctl+0x178/0x500 [ 2182.363668] ? loop_add+0x9c0/0x9c0 [ 2182.367288] ? __ia32_compat_sys_ioctl+0xf4/0x640 [ 2182.372128] ? write_comp_data+0x22/0x70 [ 2182.376190] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2182.381366] ? loop_add+0x9c0/0x9c0 [ 2182.384990] __ia32_compat_sys_ioctl+0x221/0x640 [ 2182.389743] do_fast_syscall_32+0x345/0xf9b [ 2182.394057] ? do_int80_syscall_32+0x880/0x880 [ 2182.398629] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2182.403464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2182.408992] ? syscall_return_slowpath+0x30f/0x5c0 [ 2182.413920] ? sysret32_from_system_call+0x5/0x46 [ 2182.418772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2182.423607] entry_SYSENTER_compat+0x70/0x7f [ 2182.428001] RIP: 0023:0xf7f1ccb9 2018/06/05 23:28:24 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c67, 0x0) 2018/06/05 23:28:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1a, 0x2000) r2 = openat$cgroup_type(r1, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) fcntl$addseals(r2, 0x409, 0x4) [ 2182.431353] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2182.450688] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2182.458394] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2182.465660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2182.472925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2182.480182] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2182.487440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:25 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c5d, 0x0) [ 2183.272549] bridge0: port 1(bridge_slave_0) entered blocking state [ 2183.278961] bridge0: port 1(bridge_slave_0) entered disabled state [ 2183.286350] device bridge_slave_0 entered promiscuous mode [ 2183.324963] bridge0: port 2(bridge_slave_1) entered blocking state [ 2183.331379] bridge0: port 2(bridge_slave_1) entered disabled state [ 2183.339116] device bridge_slave_1 entered promiscuous mode [ 2183.376998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2183.415412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2183.523949] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2183.563232] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2183.743598] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2183.750944] team0: Port device team_slave_0 added [ 2183.787242] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2183.795143] team0: Port device team_slave_1 added [ 2183.832086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2183.871541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2183.903840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2183.942671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2184.207414] bridge0: port 2(bridge_slave_1) entered blocking state [ 2184.213789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2184.220430] bridge0: port 1(bridge_slave_0) entered blocking state [ 2184.226806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2184.234157] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2185.023197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2185.102983] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2185.178234] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2185.184392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2185.191989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2185.202606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2185.271367] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:28:28 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c2c, r1) 2018/06/05 23:28:28 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xee4150000000000]}, 0x6) 2018/06/05 23:28:28 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c6a, 0x0) 2018/06/05 23:28:28 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c6d, 0x0) 2018/06/05 23:28:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x44010000, &(0x7f000000a000)) 2018/06/05 23:28:28 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c03, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:28 executing program 7 (fault-call:8 fault-nth:36): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040)=0x4000, 0x4) readv(r0, &(0x7f00000001c0), 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:28 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c7d, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:28 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5421, 0x0) 2018/06/05 23:28:28 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c4f, 0x0) [ 2185.969076] FAULT_INJECTION: forcing a failure. [ 2185.969076] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.980525] CPU: 1 PID: 8102 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2185.987473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2185.996839] Call Trace: [ 2185.999445] dump_stack+0x1b9/0x294 [ 2186.003093] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2186.008302] ? do_fast_syscall_32+0x345/0xf9b [ 2186.012806] ? entry_SYSENTER_compat+0x70/0x7f 2018/06/05 23:28:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = memfd_create(&(0x7f0000000180)='/dev/sequencer\x00', 0x3) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f0000000240)={0xa09, 0x80000001, 0x400, 0x4296, 0x4, 0xfffffffffffffffa}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x2, 0x101000) getsockopt$inet6_int(r3, 0x29, 0x7b, &(0x7f0000003d40), &(0x7f0000003d80)=0x4) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 2186.017404] should_fail.cold.4+0xa/0x1a [ 2186.021475] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2186.026605] ? mark_held_locks+0xc9/0x160 [ 2186.030767] ? graph_lock+0x170/0x170 [ 2186.034589] ? __raw_spin_lock_init+0x1c/0x100 [ 2186.039181] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2186.044202] ? __lockdep_init_map+0x105/0x590 [ 2186.048775] ? __lockdep_init_map+0x105/0x590 [ 2186.053286] ? __lock_is_held+0xb5/0x140 [ 2186.057347] ? __init_waitqueue_head+0x96/0x140 [ 2186.062036] ? check_same_owner+0x320/0x320 [ 2186.066357] ? sbitmap_queue_init_node+0xc6/0x840 [ 2186.071204] ? rcu_note_context_switch+0x710/0x710 [ 2186.076145] __should_failslab+0x124/0x180 [ 2186.080389] should_failslab+0x9/0x14 [ 2186.084193] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2186.089390] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2186.094937] ? find_next_bit+0x104/0x130 [ 2186.099004] __kmalloc_node+0x33/0x70 [ 2186.102818] blk_mq_alloc_rq_map+0xcc/0x220 [ 2186.107250] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 2186.112707] blk_mq_init_sched+0x1e1/0x5a0 [ 2186.116947] elevator_init_mq+0xd7/0x160 [ 2186.121006] blk_mq_init_allocated_queue+0xf19/0x1580 [ 2186.126224] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2186.130727] ? __mutex_init+0x1ef/0x280 [ 2186.134714] ? mark_held_locks+0xc9/0x160 [ 2186.138869] ? retint_kernel+0x10/0x10 [ 2186.142777] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2186.147800] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2186.152584] blk_mq_init_queue+0x63/0xb0 [ 2186.156656] loop_add+0x32b/0x9c0 [ 2186.160099] ? loop_lookup+0x102/0x220 [ 2186.163981] ? loop_queue_rq+0x640/0x640 [ 2186.168047] ? retint_kernel+0x10/0x10 [ 2186.171948] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2186.177147] loop_control_ioctl+0x178/0x500 [ 2186.181480] ? loop_add+0x9c0/0x9c0 [ 2186.185106] ? retint_kernel+0x10/0x10 [ 2186.188993] ? loop_add+0x9c0/0x9c0 [ 2186.192639] ? loop_add+0x9c0/0x9c0 [ 2186.196274] __ia32_compat_sys_ioctl+0x221/0x640 [ 2186.201049] do_fast_syscall_32+0x345/0xf9b [ 2186.205387] ? do_int80_syscall_32+0x880/0x880 [ 2186.209983] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2186.214827] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2186.220353] ? syscall_return_slowpath+0x30f/0x5c0 [ 2186.225285] ? sysret32_from_system_call+0x5/0x46 [ 2186.230131] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2186.234993] entry_SYSENTER_compat+0x70/0x7f [ 2186.239918] RIP: 0023:0xf7f1ccb9 [ 2186.243279] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2186.262705] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 2018/06/05 23:28:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xedc000000000, &(0x7f000000a000)) [ 2186.270406] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2186.277747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2186.285004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2186.292268] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2186.299533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:28 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c22, 0x0) 2018/06/05 23:28:29 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c14, r1) 2018/06/05 23:28:29 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c6a, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:29 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c56, 0x0) 2018/06/05 23:28:29 executing program 7 (fault-call:8 fault-nth:37): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:29 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c53, 0x0) 2018/06/05 23:28:29 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xc0ffffff]}, 0x6) 2018/06/05 23:28:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xf5ffffff, &(0x7f000000a000)) 2018/06/05 23:28:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xf6ffffff, &(0x7f000000a000)) 2018/06/05 23:28:29 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5452, 0x0) [ 2187.140592] FAULT_INJECTION: forcing a failure. [ 2187.140592] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.152048] CPU: 0 PID: 8151 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2187.158987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2187.168426] Call Trace: [ 2187.171134] dump_stack+0x1b9/0x294 [ 2187.174854] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2187.180077] should_fail.cold.4+0xa/0x1a [ 2187.184157] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2187.189354] ? mark_held_locks+0xc9/0x160 [ 2187.193503] ? graph_lock+0x170/0x170 [ 2187.197306] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2187.202333] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2187.207185] ? __lock_is_held+0xb5/0x140 [ 2187.211263] ? check_same_owner+0x320/0x320 [ 2187.215588] ? rcu_note_context_switch+0x710/0x710 [ 2187.220521] __should_failslab+0x124/0x180 [ 2187.224760] should_failslab+0x9/0x14 [ 2187.228583] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2187.233692] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2187.239238] ? kasan_unpoison_shadow+0x35/0x50 [ 2187.243836] __kmalloc_node+0x33/0x70 [ 2187.247661] blk_mq_alloc_rq_map+0x10d/0x220 [ 2187.252085] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 2187.257455] blk_mq_init_sched+0x1e1/0x5a0 [ 2187.261699] elevator_init_mq+0xd7/0x160 [ 2187.265764] blk_mq_init_allocated_queue+0xf19/0x1580 [ 2187.271067] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2187.275563] ? __mutex_init+0x1ef/0x280 [ 2187.279557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2187.285349] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 2018/06/05 23:28:29 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c28, r1) 2018/06/05 23:28:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x3f00, &(0x7f000000a000)) 2018/06/05 23:28:29 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c24, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2187.290115] ? idr_alloc+0x145/0x1a0 [ 2187.293832] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2187.299027] blk_mq_init_queue+0x63/0xb0 [ 2187.303103] loop_add+0x32b/0x9c0 [ 2187.306554] ? loop_lookup+0x102/0x220 [ 2187.310455] ? loop_queue_rq+0x640/0x640 [ 2187.314548] ? __fget_light+0x2ef/0x430 [ 2187.318537] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2187.323736] loop_control_ioctl+0x178/0x500 [ 2187.328063] ? loop_add+0x9c0/0x9c0 [ 2187.331698] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2187.337221] ? fput+0x130/0x1a0 [ 2187.340496] ? ksys_write+0x1a6/0x250 [ 2187.344283] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2187.349457] ? loop_add+0x9c0/0x9c0 [ 2187.353077] __ia32_compat_sys_ioctl+0x221/0x640 [ 2187.357832] do_fast_syscall_32+0x345/0xf9b [ 2187.362164] ? do_int80_syscall_32+0x880/0x880 [ 2187.366754] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2187.371604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2187.377136] ? syscall_return_slowpath+0x30f/0x5c0 [ 2187.382059] ? sysret32_from_system_call+0x5/0x46 [ 2187.386897] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2187.391725] entry_SYSENTER_compat+0x70/0x7f [ 2187.396118] RIP: 0023:0xf7f1ccb9 [ 2187.399460] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2187.418691] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2187.426407] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2187.433923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2187.441180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2187.448440] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2187.455693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2187.723664] device bridge_slave_1 left promiscuous mode [ 2187.729249] bridge0: port 2(bridge_slave_1) entered disabled state [ 2187.752648] device bridge_slave_0 left promiscuous mode [ 2187.758390] bridge0: port 1(bridge_slave_0) entered disabled state [ 2187.804092] team0 (unregistering): Port device team_slave_1 removed [ 2187.815095] team0 (unregistering): Port device team_slave_0 removed [ 2187.825544] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2187.841316] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/06/05 23:28:30 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c0a, 0x0) 2018/06/05 23:28:30 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1100, &(0x7f000000a000)) 2018/06/05 23:28:30 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c6d, r1) 2018/06/05 23:28:30 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c3a, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:30 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c62, 0x0) 2018/06/05 23:28:30 executing program 7 (fault-call:8 fault-nth:38): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:30 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xa00]}, 0x6) 2018/06/05 23:28:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x8) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 2187.875899] bond0 (unregistering): Released all slaves 2018/06/05 23:28:30 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfffffe00, &(0x7f000000a000)) [ 2188.110843] IPVS: ftp: loaded support on port[0] = 21 [ 2188.146529] FAULT_INJECTION: forcing a failure. [ 2188.146529] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.158285] CPU: 1 PID: 8201 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2188.165225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2188.174614] Call Trace: [ 2188.177205] dump_stack+0x1b9/0x294 [ 2188.180828] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2188.186031] ? is_bpf_text_address+0xd7/0x170 [ 2188.190532] should_fail.cold.4+0xa/0x1a [ 2188.194591] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2188.199699] ? graph_lock+0x170/0x170 [ 2188.203496] ? save_stack+0xa9/0xd0 [ 2188.207113] ? save_stack+0x43/0xd0 [ 2188.210813] ? kasan_kmalloc+0xc4/0xe0 [ 2188.214690] ? __kmalloc_node+0x47/0x70 [ 2188.218654] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 2188.223150] ? blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 2188.228674] ? blk_mq_init_sched+0x1e1/0x5a0 [ 2188.233070] ? elevator_init_mq+0xd7/0x160 [ 2188.237389] ? blk_mq_init_allocated_queue+0xf19/0x1580 [ 2188.242751] ? blk_mq_init_queue+0x63/0xb0 [ 2188.246980] ? __lock_is_held+0xb5/0x140 [ 2188.251067] ? check_same_owner+0x320/0x320 [ 2188.255400] ? rcu_note_context_switch+0x710/0x710 [ 2188.260324] __should_failslab+0x124/0x180 [ 2188.264560] should_failslab+0x9/0x14 [ 2188.268353] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2188.273446] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2188.278986] ? kasan_unpoison_shadow+0x35/0x50 [ 2188.283567] __kmalloc_node+0x33/0x70 [ 2188.287363] blk_mq_alloc_rq_map+0x10d/0x220 [ 2188.291767] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 2188.297128] blk_mq_init_sched+0x1e1/0x5a0 [ 2188.301363] elevator_init_mq+0xd7/0x160 [ 2188.305418] blk_mq_init_allocated_queue+0xf19/0x1580 [ 2188.310603] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2188.315090] ? __mutex_init+0x1ef/0x280 [ 2188.319161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2188.324697] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2188.329452] ? idr_alloc+0x145/0x1a0 [ 2188.333351] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2188.338536] blk_mq_init_queue+0x63/0xb0 [ 2188.342587] loop_add+0x32b/0x9c0 [ 2188.346034] ? loop_lookup+0x102/0x220 [ 2188.349910] ? loop_queue_rq+0x640/0x640 [ 2188.353962] ? retint_kernel+0x10/0x10 [ 2188.357853] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2188.363039] loop_control_ioctl+0x178/0x500 [ 2188.367350] ? loop_add+0x9c0/0x9c0 [ 2188.370968] ? retint_kernel+0x10/0x10 [ 2188.375539] ? loop_add+0x9c0/0x9c0 [ 2188.379162] ? loop_add+0x9c0/0x9c0 [ 2188.382778] __ia32_compat_sys_ioctl+0x221/0x640 [ 2188.387531] do_fast_syscall_32+0x345/0xf9b [ 2188.391856] ? do_int80_syscall_32+0x880/0x880 [ 2188.396429] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2188.401265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2188.406794] ? syscall_return_slowpath+0x30f/0x5c0 [ 2188.411727] ? sysret32_from_system_call+0x5/0x46 [ 2188.416561] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2188.421397] entry_SYSENTER_compat+0x70/0x7f [ 2188.425794] RIP: 0023:0xf7f1ccb9 2018/06/05 23:28:30 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c65, 0x0) 2018/06/05 23:28:30 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c32, 0x0) 2018/06/05 23:28:30 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c25, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2188.429140] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2188.448489] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2188.456287] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2188.463542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2188.470807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2188.478072] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2188.485325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:30 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9effffff00000000, &(0x7f000000a000)) 2018/06/05 23:28:31 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xfffffffe]}, 0x6) 2018/06/05 23:28:31 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c0f, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:31 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c68, 0x0) 2018/06/05 23:28:31 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9effffff, &(0x7f000000a000)) 2018/06/05 23:28:31 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c37, 0x0) [ 2189.719338] bridge0: port 1(bridge_slave_0) entered blocking state [ 2189.726051] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.733504] device bridge_slave_0 entered promiscuous mode [ 2189.771554] bridge0: port 2(bridge_slave_1) entered blocking state [ 2189.778111] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.785888] device bridge_slave_1 entered promiscuous mode [ 2189.823685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2189.861694] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2189.999422] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2190.037735] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2190.201290] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2190.208702] team0: Port device team_slave_0 added [ 2190.232613] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2190.239701] team0: Port device team_slave_1 added [ 2190.273388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2190.312592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2190.342673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2190.370367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2190.588086] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.594463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2190.601196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2190.607560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2190.614788] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2191.401259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2191.478112] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2191.551957] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2191.558181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2191.565678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2191.585114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2191.647436] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:28:34 executing program 7 (fault-call:8 fault-nth:39): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:34 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x20000000, &(0x7f000000a000)) 2018/06/05 23:28:34 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0xc0189436, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:34 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5421, 0x0) 2018/06/05 23:28:34 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c08, 0x0) 2018/06/05 23:28:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x100000000, 0x400) fstatfs(r0, &(0x7f0000000200)=""/235) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000140)={@multicast2, @multicast2}, &(0x7f0000000180)=0x8) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000300)={0x2, 0x3, @local={0xac, 0x14, 0x14, 0xaa}}, 0x19f) 2018/06/05 23:28:34 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c69, r1) 2018/06/05 23:28:34 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe00000000000000]}, 0x6) [ 2192.338934] FAULT_INJECTION: forcing a failure. [ 2192.338934] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2192.354290] CPU: 0 PID: 8522 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2192.361344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2192.370710] Call Trace: [ 2192.373570] dump_stack+0x1b9/0x294 [ 2192.377223] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2192.382421] ? preempt_notifier_register+0x1e0/0x1e0 [ 2192.387518] should_fail.cold.4+0xa/0x1a [ 2192.391585] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2192.396706] ? __schedule+0x809/0x1e30 [ 2192.400606] ? __sched_text_start+0x8/0x8 [ 2192.404758] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2192.409600] ? __lock_is_held+0xb5/0x140 [ 2192.413673] ? check_same_owner+0x320/0x320 [ 2192.418014] __alloc_pages_nodemask+0x34e/0xd70 [ 2192.422700] ? blk_mq_init_sched+0x1e1/0x5a0 [ 2192.427120] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 2192.432140] ? save_stack+0x43/0xd0 [ 2192.435763] ? kasan_kmalloc+0xc4/0xe0 [ 2192.439640] ? __kmalloc_node+0x47/0x70 [ 2192.443605] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 2192.448190] ? blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 2192.453739] ? blk_mq_init_sched+0x1e1/0x5a0 [ 2192.458154] ? elevator_init_mq+0xd7/0x160 [ 2192.462392] ? blk_mq_init_allocated_queue+0xf19/0x1580 [ 2192.467756] ? blk_mq_init_queue+0x63/0xb0 [ 2192.471997] ? loop_add+0x32b/0x9c0 [ 2192.475637] ? memset+0x31/0x40 [ 2192.478928] ? loop_init_request+0x7b/0x170 [ 2192.483267] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2192.488300] ? blk_mq_hw_queue_to_node+0xd9/0x180 [ 2192.493140] blk_mq_alloc_rqs+0x317/0x9a0 [ 2192.497292] ? blk_mq_alloc_rq_map+0x220/0x220 [ 2192.501864] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2192.507153] ? kasan_unpoison_shadow+0x35/0x50 [ 2192.511746] ? __kmalloc_node+0x47/0x70 [ 2192.515726] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2192.520321] blk_mq_sched_alloc_tags.isra.13+0xd8/0x160 [ 2192.525688] blk_mq_init_sched+0x1e1/0x5a0 [ 2192.529917] elevator_init_mq+0xd7/0x160 [ 2192.533972] blk_mq_init_allocated_queue+0xf19/0x1580 [ 2192.539167] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2192.543697] ? __mutex_init+0x1ef/0x280 [ 2192.547700] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2192.553235] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2192.558004] ? retint_kernel+0x10/0x10 [ 2192.561891] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2192.567088] blk_mq_init_queue+0x63/0xb0 [ 2192.571147] loop_add+0x32b/0x9c0 [ 2192.574585] ? loop_lookup+0x102/0x220 [ 2192.578461] ? loop_queue_rq+0x640/0x640 [ 2192.582520] ? __fget_light+0x2ef/0x430 [ 2192.586500] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2192.591701] loop_control_ioctl+0x178/0x500 [ 2192.596030] ? loop_add+0x9c0/0x9c0 [ 2192.599655] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2192.605213] ? fput+0x130/0x1a0 [ 2192.608518] ? ksys_write+0x1a6/0x250 [ 2192.612334] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2192.617530] ? loop_add+0x9c0/0x9c0 [ 2192.621250] __ia32_compat_sys_ioctl+0x221/0x640 [ 2192.626015] do_fast_syscall_32+0x345/0xf9b [ 2192.630347] ? do_int80_syscall_32+0x880/0x880 [ 2192.634930] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2192.639768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2192.645294] ? syscall_return_slowpath+0x30f/0x5c0 [ 2192.650216] ? sysret32_from_system_call+0x5/0x46 [ 2192.655054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2192.659889] entry_SYSENTER_compat+0x70/0x7f [ 2192.664288] RIP: 0023:0xf7f1ccb9 [ 2192.667636] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2192.686975] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2192.694680] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2192.701935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2192.709194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2192.716449] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2192.723705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:35 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c5b, 0x0) 2018/06/05 23:28:35 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c7e, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:35 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x900, &(0x7f000000a000)) 2018/06/05 23:28:35 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c21, 0x0) 2018/06/05 23:28:35 executing program 7 (fault-call:8 fault-nth:40): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:35 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c32, r1) 2018/06/05 23:28:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xe000000]}, 0x6) 2018/06/05 23:28:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140)=0x3b8, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000100)={{0x3f, 0x2, 0x0, 0xffff, 0x400, 0x10}, 0x4}) 2018/06/05 23:28:35 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c17, 0x0) 2018/06/05 23:28:35 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c17, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:35 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c09, 0x0) [ 2193.573471] FAULT_INJECTION: forcing a failure. [ 2193.573471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2193.586131] CPU: 1 PID: 8557 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2193.593062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2193.602421] Call Trace: [ 2193.605051] dump_stack+0x1b9/0x294 [ 2193.608692] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2193.613898] ? preempt_notifier_register+0x1e0/0x1e0 [ 2193.619104] should_fail.cold.4+0xa/0x1a [ 2193.623174] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2193.628285] ? __schedule+0x809/0x1e30 [ 2193.632186] ? __sched_text_start+0x8/0x8 [ 2193.636349] ? __lock_is_held+0xb5/0x140 [ 2193.640453] ? check_same_owner+0x320/0x320 [ 2193.644799] __alloc_pages_nodemask+0x34e/0xd70 [ 2193.649472] ? __save_stack_trace+0x7e/0xd0 [ 2193.653820] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 2193.658854] ? save_stack+0x43/0xd0 [ 2193.662483] ? kasan_kmalloc+0xc4/0xe0 [ 2193.666427] ? __kmalloc_node+0x47/0x70 [ 2193.671316] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 2193.675906] ? blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 2193.681447] ? blk_mq_init_sched+0x1e1/0x5a0 [ 2193.685867] ? elevator_init_mq+0xd7/0x160 [ 2193.690118] ? blk_mq_init_allocated_queue+0xf19/0x1580 [ 2193.695492] ? blk_mq_init_queue+0x63/0xb0 [ 2193.699731] ? loop_add+0x32b/0x9c0 [ 2193.703369] ? memset+0x31/0x40 [ 2193.706659] ? loop_init_request+0x7b/0x170 [ 2193.710999] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2193.716036] ? blk_mq_hw_queue_to_node+0xd9/0x180 [ 2193.724281] blk_mq_alloc_rqs+0x317/0x9a0 [ 2193.728443] ? blk_mq_alloc_rq_map+0x220/0x220 [ 2193.733028] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 2193.738310] ? kasan_unpoison_shadow+0x35/0x50 [ 2193.742895] ? __kmalloc_node+0x47/0x70 [ 2193.746859] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2193.751441] blk_mq_sched_alloc_tags.isra.13+0xd8/0x160 [ 2193.756796] blk_mq_init_sched+0x1e1/0x5a0 [ 2193.761039] elevator_init_mq+0xd7/0x160 [ 2193.765115] blk_mq_init_allocated_queue+0xf19/0x1580 [ 2193.770330] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2193.776127] ? __mutex_init+0x1ef/0x280 [ 2193.780135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2193.785671] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2193.790430] ? idr_alloc+0x145/0x1a0 [ 2193.794151] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2193.799339] blk_mq_init_queue+0x63/0xb0 [ 2193.803411] loop_add+0x32b/0x9c0 [ 2193.806864] ? loop_lookup+0x102/0x220 [ 2193.810757] ? loop_queue_rq+0x640/0x640 [ 2193.814803] ? retint_kernel+0x10/0x10 [ 2193.818688] ? __sanitizer_cov_trace_switch+0x53/0x90 2018/06/05 23:28:36 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c3b, r1) [ 2193.823877] loop_control_ioctl+0x178/0x500 [ 2193.828188] ? loop_add+0x9c0/0x9c0 [ 2193.831815] ? retint_kernel+0x10/0x10 [ 2193.835693] ? loop_add+0x9c0/0x9c0 [ 2193.839337] ? loop_add+0x9c0/0x9c0 [ 2193.842974] __ia32_compat_sys_ioctl+0x221/0x640 [ 2193.847744] do_fast_syscall_32+0x345/0xf9b [ 2193.852085] ? do_int80_syscall_32+0x880/0x880 [ 2193.856697] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2193.861552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2193.867145] ? syscall_return_slowpath+0x30f/0x5c0 [ 2193.872090] ? sysret32_from_system_call+0x5/0x46 [ 2193.876943] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2193.881788] entry_SYSENTER_compat+0x70/0x7f [ 2193.886183] RIP: 0023:0xf7f1ccb9 [ 2193.889527] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2193.908809] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2193.916510] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 2018/06/05 23:28:36 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x900000000000000, &(0x7f000000a000)) [ 2193.923766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2193.931029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2193.938310] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2193.945578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2194.268229] device bridge_slave_1 left promiscuous mode [ 2194.273805] bridge0: port 2(bridge_slave_1) entered disabled state [ 2194.397489] device bridge_slave_0 left promiscuous mode [ 2194.403131] bridge0: port 1(bridge_slave_0) entered disabled state 2018/06/05 23:28:36 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c41, r1) 2018/06/05 23:28:36 executing program 7 (fault-call:8 fault-nth:41): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:36 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c73, 0x0) 2018/06/05 23:28:36 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c10, 0x0) 2018/06/05 23:28:36 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x50160000]}, 0x6) 2018/06/05 23:28:36 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c7b, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:36 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x114, &(0x7f000000a000)) 2018/06/05 23:28:36 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8000, 0x4000) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 2194.593925] team0 (unregistering): Port device team_slave_1 removed [ 2194.606596] team0 (unregistering): Port device team_slave_0 removed [ 2194.620421] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2194.671315] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2194.709183] FAULT_INJECTION: forcing a failure. [ 2194.709183] name failslab, interval 1, probability 0, space 0, times 0 [ 2194.721659] CPU: 1 PID: 8602 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2194.728604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2194.735704] IPVS: ftp: loaded support on port[0] = 21 [ 2194.738057] Call Trace: [ 2194.745869] dump_stack+0x1b9/0x294 [ 2194.749602] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2194.754809] ? perf_trace_lock_acquire+0xe3/0x980 [ 2194.759689] should_fail.cold.4+0xa/0x1a [ 2194.763773] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/06/05 23:28:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 2194.768896] ? print_usage_bug+0xc0/0xc0 [ 2194.772976] ? loop_add+0x32b/0x9c0 [ 2194.775122] bond0 (unregistering): Released all slaves [ 2194.776639] ? loop_control_ioctl+0x178/0x500 [ 2194.776660] ? __ia32_compat_sys_ioctl+0x221/0x640 [ 2194.776678] ? do_fast_syscall_32+0x345/0xf9b [ 2194.776694] ? entry_SYSENTER_compat+0x70/0x7f [ 2194.776709] ? graph_lock+0x170/0x170 [ 2194.776730] ? find_held_lock+0x36/0x1c0 [ 2194.808316] ? __lock_is_held+0xb5/0x140 [ 2194.812423] ? check_same_owner+0x320/0x320 [ 2194.816762] ? rcu_note_context_switch+0x710/0x710 [ 2194.821791] __should_failslab+0x124/0x180 [ 2194.826048] should_failslab+0x9/0x14 [ 2194.829863] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2194.834978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2194.840520] dd_init_queue+0x109/0x5e0 [ 2194.844395] ? retint_kernel+0x10/0x10 [ 2194.848279] ? dd_exit_queue+0x240/0x240 [ 2194.852333] ? entry_SYSENTER_compat+0x70/0x7f [ 2194.856924] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 2194.861511] ? blk_mq_alloc_rq_map+0x142/0x220 [ 2194.866094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2194.871632] ? blk_mq_sched_alloc_tags.isra.13+0xee/0x160 [ 2194.877160] blk_mq_init_sched+0x27b/0x5a0 [ 2194.881385] elevator_init_mq+0xd7/0x160 [ 2194.885459] blk_mq_init_allocated_queue+0xf19/0x1580 [ 2194.890665] ? blk_mq_map_swqueue+0xae0/0xae0 [ 2194.895160] ? __mutex_init+0x1ef/0x280 [ 2194.899135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2194.904661] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 2194.909417] ? idr_alloc+0x145/0x1a0 [ 2194.913166] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 2194.918357] blk_mq_init_queue+0x63/0xb0 [ 2194.922405] loop_add+0x32b/0x9c0 [ 2194.925847] ? loop_lookup+0x102/0x220 [ 2194.929736] ? loop_queue_rq+0x640/0x640 [ 2194.933799] ? retint_kernel+0x10/0x10 [ 2194.937681] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2194.942866] loop_control_ioctl+0x178/0x500 [ 2194.947183] ? loop_add+0x9c0/0x9c0 [ 2194.950800] ? retint_kernel+0x10/0x10 [ 2194.954688] ? __ia32_compat_sys_ioctl+0x1b5/0x640 [ 2194.959610] ? loop_add+0x9c0/0x9c0 [ 2194.963235] __ia32_compat_sys_ioctl+0x221/0x640 [ 2194.968024] do_fast_syscall_32+0x345/0xf9b [ 2194.972354] ? do_int80_syscall_32+0x880/0x880 [ 2194.976937] ? _raw_spin_unlock_irq+0x27/0x70 [ 2194.981439] ? finish_task_switch+0x1ca/0x840 [ 2194.985943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2194.991465] ? syscall_return_slowpath+0x30f/0x5c0 [ 2194.996395] ? sysret32_from_system_call+0x5/0x46 [ 2195.001235] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2195.006081] entry_SYSENTER_compat+0x70/0x7f [ 2195.010471] RIP: 0023:0xf7f1ccb9 [ 2195.013813] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2195.033076] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2195.040777] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2195.048038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2195.055308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2195.062585] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2195.069855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:37 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c4b, 0x0) 2018/06/05 23:28:37 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c4c, 0x0) 2018/06/05 23:28:37 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x300000000000000, &(0x7f000000a000)) 2018/06/05 23:28:37 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c63, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:37 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c13, 0x0) 2018/06/05 23:28:38 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c38, 0x0) 2018/06/05 23:28:38 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x8000000]}, 0x6) [ 2196.345205] bridge0: port 1(bridge_slave_0) entered blocking state [ 2196.351787] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.359716] device bridge_slave_0 entered promiscuous mode [ 2196.400246] bridge0: port 2(bridge_slave_1) entered blocking state [ 2196.407346] bridge0: port 2(bridge_slave_1) entered disabled state [ 2196.414636] device bridge_slave_1 entered promiscuous mode [ 2196.453102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2196.492227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2196.607716] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2196.662965] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2196.836460] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2196.844013] team0: Port device team_slave_0 added [ 2196.879141] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2196.886541] team0: Port device team_slave_1 added [ 2196.920360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2196.958296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2196.997631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2197.026872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2197.268175] bridge0: port 2(bridge_slave_1) entered blocking state [ 2197.274546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2197.281188] bridge0: port 1(bridge_slave_0) entered blocking state [ 2197.287556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2197.295191] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2198.073405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2198.153236] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2198.175435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2198.240726] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2198.246913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2198.254292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2198.327613] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:28:41 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c25, 0x0) 2018/06/05 23:28:41 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c66, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f0000000040)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:41 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c42, r1) 2018/06/05 23:28:41 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x5016]}, 0x6) 2018/06/05 23:28:41 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9cffffff00000000, &(0x7f000000a000)) 2018/06/05 23:28:41 executing program 7 (fault-call:8 fault-nth:42): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:41 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c3a, 0x0) 2018/06/05 23:28:41 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x2, 0x0) 2018/06/05 23:28:41 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c5e, 0x0) [ 2199.048075] FAULT_INJECTION: forcing a failure. [ 2199.048075] name failslab, interval 1, probability 0, space 0, times 0 [ 2199.059710] CPU: 0 PID: 8921 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2199.066649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2199.076009] Call Trace: [ 2199.078606] dump_stack+0x1b9/0x294 [ 2199.082248] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2199.087451] ? finish_task_switch+0x1ca/0x840 [ 2199.091949] ? finish_task_switch+0x182/0x840 [ 2199.096452] should_fail.cold.4+0xa/0x1a [ 2199.100520] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2199.105635] ? __schedule+0x809/0x1e30 [ 2199.109532] ? __sched_text_start+0x8/0x8 [ 2199.113678] ? find_held_lock+0x36/0x1c0 [ 2199.117749] ? __lock_is_held+0xb5/0x140 [ 2199.121833] ? check_same_owner+0x320/0x320 [ 2199.126155] ? print_usage_bug+0xc0/0xc0 [ 2199.130236] __should_failslab+0x124/0x180 [ 2199.134479] should_failslab+0x9/0x14 [ 2199.138295] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2199.143502] __alloc_disk_node+0xc1/0x500 2018/06/05 23:28:41 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c33, r1) [ 2199.147657] ? disk_expand_part_tbl+0x3c0/0x3c0 [ 2199.152339] ? trace_hardirqs_on+0xd/0x10 [ 2199.156491] ? blk_queue_flag_set+0xf6/0x160 [ 2199.160904] loop_add+0x40e/0x9c0 [ 2199.164361] ? loop_queue_rq+0x640/0x640 [ 2199.168424] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2199.173188] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2199.178388] loop_control_ioctl+0x178/0x500 [ 2199.182711] ? loop_add+0x9c0/0x9c0 [ 2199.186353] ? __ia32_compat_sys_ioctl+0xf4/0x640 [ 2199.191229] ? audit_kill_trees+0x430/0x430 [ 2199.195575] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2199.200808] ? loop_add+0x9c0/0x9c0 [ 2199.204448] __ia32_compat_sys_ioctl+0x221/0x640 [ 2199.209229] do_fast_syscall_32+0x345/0xf9b [ 2199.213563] ? do_int80_syscall_32+0x880/0x880 [ 2199.218152] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2199.223005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2199.228549] ? syscall_return_slowpath+0x30f/0x5c0 [ 2199.233486] ? sysret32_from_system_call+0x5/0x46 [ 2199.238356] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2199.243229] entry_SYSENTER_compat+0x70/0x7f [ 2199.247632] RIP: 0023:0xf7f1ccb9 [ 2199.250975] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2199.270295] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2199.278010] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2199.285284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2199.292556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2199.299835] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2199.307099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:41 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c14, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:41 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xf5ffffff00000000, &(0x7f000000a000)) 2018/06/05 23:28:41 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4cc0, 0x0) 2018/06/05 23:28:41 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c66, r1) [ 2199.578005] device bridge_slave_1 left promiscuous mode [ 2199.583764] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.617400] device bridge_slave_0 left promiscuous mode [ 2199.623060] bridge0: port 1(bridge_slave_0) entered disabled state 2018/06/05 23:28:42 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c7a, 0x0) 2018/06/05 23:28:42 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c44, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2199.776141] team0 (unregistering): Port device team_slave_1 removed [ 2199.821935] team0 (unregistering): Port device team_slave_0 removed [ 2199.821954] IPVS: ftp: loaded support on port[0] = 21 [ 2199.860746] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/06/05 23:28:42 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x5580]}, 0x6) [ 2199.906744] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2200.037097] bond0 (unregistering): Released all slaves 2018/06/05 23:28:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000100)=0x100) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e26, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x40000, &(0x7f0000000140)={0x2, 0x1, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:42 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9cffffff, &(0x7f000000a000)) 2018/06/05 23:28:42 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x402c582a, 0x0) 2018/06/05 23:28:42 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c5b, 0x0) 2018/06/05 23:28:42 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c76, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:42 executing program 7 (fault-call:8 fault-nth:43): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:42 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x50, &(0x7f000000a000)) 2018/06/05 23:28:42 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x40049409, 0x0) [ 2200.395987] FAULT_INJECTION: forcing a failure. [ 2200.395987] name failslab, interval 1, probability 0, space 0, times 0 [ 2200.407652] CPU: 1 PID: 8988 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2200.414586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2200.423944] Call Trace: [ 2200.426558] dump_stack+0x1b9/0x294 [ 2200.430190] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2200.435380] ? perf_trace_lock_acquire+0xe3/0x980 [ 2200.440246] should_fail.cold.4+0xa/0x1a [ 2200.444314] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2200.449438] ? retint_kernel+0x10/0x10 [ 2200.453330] ? graph_lock+0x170/0x170 [ 2200.457133] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2200.461899] ? retint_kernel+0x10/0x10 [ 2200.465795] ? __lock_is_held+0xb5/0x140 [ 2200.469963] ? check_same_owner+0x320/0x320 [ 2200.474295] ? rcu_note_context_switch+0x710/0x710 [ 2200.479229] __should_failslab+0x124/0x180 [ 2200.483470] should_failslab+0x9/0x14 [ 2200.487272] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2200.492374] ? lockdep_init_map+0x9/0x10 [ 2200.496442] __kmalloc_node+0x33/0x70 [ 2200.500249] disk_expand_part_tbl+0x236/0x3c0 [ 2200.504746] ? rcu_read_lock_sched_held+0x108/0x120 [ 2200.509763] ? blk_free_devt+0x60/0x60 [ 2200.513661] __alloc_disk_node+0x16f/0x500 [ 2200.517901] ? disk_expand_part_tbl+0x3c0/0x3c0 [ 2200.522568] ? trace_hardirqs_on+0xd/0x10 [ 2200.526730] ? blk_queue_flag_set+0xf6/0x160 [ 2200.531238] loop_add+0x40e/0x9c0 [ 2200.534697] ? loop_queue_rq+0x640/0x640 [ 2200.538767] ? __fget_light+0x2ef/0x430 [ 2200.542751] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2200.547943] loop_control_ioctl+0x178/0x500 [ 2200.552279] ? loop_add+0x9c0/0x9c0 [ 2200.555908] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2200.561451] ? exit_to_usermode_loop+0x87/0x310 [ 2200.566134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2200.571676] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2200.576864] ? loop_add+0x9c0/0x9c0 [ 2200.580497] __ia32_compat_sys_ioctl+0x221/0x640 [ 2200.585264] do_fast_syscall_32+0x345/0xf9b [ 2200.589590] ? do_int80_syscall_32+0x880/0x880 [ 2200.594182] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2200.599030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2200.604572] ? syscall_return_slowpath+0x30f/0x5c0 [ 2200.609546] ? sysret32_from_system_call+0x5/0x46 [ 2200.614487] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2200.619338] entry_SYSENTER_compat+0x70/0x7f [ 2200.623744] RIP: 0023:0xf7f1ccb9 [ 2200.627099] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 2018/06/05 23:28:43 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c70, 0x0) 2018/06/05 23:28:43 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x144, &(0x7f000000a000)) 2018/06/05 23:28:43 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x5421, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2200.646522] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2200.654255] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2200.661520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2200.668790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2200.676058] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2200.684457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:43 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c2e, 0x0) [ 2201.536171] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.542606] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.551653] device bridge_slave_0 entered promiscuous mode [ 2201.594622] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.601070] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.609883] device bridge_slave_1 entered promiscuous mode [ 2201.653935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2201.689591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2201.796826] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2201.834313] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2201.982648] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2201.990150] team0: Port device team_slave_0 added [ 2202.026626] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2202.034566] team0: Port device team_slave_1 added [ 2202.059563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2202.084681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2202.109483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2202.135614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2202.350405] bridge0: port 2(bridge_slave_1) entered blocking state [ 2202.356812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2202.363457] bridge0: port 1(bridge_slave_0) entered blocking state [ 2202.370064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2203.148396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2203.227106] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2203.305925] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2203.312120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2203.320435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2203.392795] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:28:46 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x5421, r1) 2018/06/05 23:28:46 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x4900]}, 0x6) 2018/06/05 23:28:46 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4c00000000000000, &(0x7f000000a000)) 2018/06/05 23:28:46 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c74, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:46 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c4e, 0x0) 2018/06/05 23:28:46 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c68, 0x0) 2018/06/05 23:28:46 executing program 7 (fault-call:8 fault-nth:44): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x100, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@empty, 0x0}, &(0x7f0000000140)=0x14) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@loopback={0x0, 0x1}, 0x4e23, 0x4, 0x4e22, 0x7, 0x2, 0xa0, 0x80, 0x0, r2, r3}, {0x4, 0x7, 0x5c1, 0x1, 0x81, 0xda31, 0x5, 0x3}, {0xc634, 0x5, 0x7b361d42, 0x6}, 0xff, 0x6e6bb6, 0x2, 0x0, 0x1, 0x3}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4d5, 0x6c}, 0xa, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x3507, 0x7, 0x1, 0x1ff, 0x1, 0x37, 0xbc8}}, 0xe8) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb1840c377929e2309cc3493a1b5433da6e1acb88481af91c8ad0aed871b18", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:28:46 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c55, 0x0) [ 2204.087985] FAULT_INJECTION: forcing a failure. [ 2204.087985] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.099684] CPU: 1 PID: 9297 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2204.106616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2204.115958] Call Trace: [ 2204.118552] dump_stack+0x1b9/0x294 [ 2204.122181] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2204.127380] ? should_fail.cold.4+0x5/0x1a [ 2204.131631] should_fail.cold.4+0xa/0x1a [ 2204.135693] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2204.140807] ? __schedule+0x809/0x1e30 [ 2204.144704] ? __sched_text_start+0x8/0x8 [ 2204.148844] ? lock_release+0x4d4/0xa10 [ 2204.152823] ? __lock_is_held+0xb5/0x140 [ 2204.156906] ? check_same_owner+0x320/0x320 [ 2204.161241] __should_failslab+0x124/0x180 [ 2204.165477] should_failslab+0x9/0x14 [ 2204.169275] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2204.174382] ? lockdep_init_map+0x9/0x10 [ 2204.178450] __kmalloc_node+0x33/0x70 [ 2204.182249] disk_expand_part_tbl+0x236/0x3c0 [ 2204.186735] ? rcu_read_lock_sched_held+0x108/0x120 [ 2204.191741] ? blk_free_devt+0x60/0x60 [ 2204.195621] __alloc_disk_node+0x16f/0x500 [ 2204.199845] ? disk_expand_part_tbl+0x3c0/0x3c0 [ 2204.204506] ? trace_hardirqs_on+0xd/0x10 [ 2204.208653] ? blk_queue_flag_set+0xf6/0x160 [ 2204.213139] loop_add+0x40e/0x9c0 [ 2204.216582] ? loop_queue_rq+0x640/0x640 [ 2204.220647] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2204.225668] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2204.230951] loop_control_ioctl+0x178/0x500 [ 2204.235275] ? loop_add+0x9c0/0x9c0 [ 2204.238926] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2204.244117] ? loop_add+0x9c0/0x9c0 [ 2204.247753] __ia32_compat_sys_ioctl+0x221/0x640 [ 2204.252524] do_fast_syscall_32+0x345/0xf9b [ 2204.256953] ? do_int80_syscall_32+0x880/0x880 [ 2204.261532] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2204.266383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2204.271928] ? syscall_return_slowpath+0x30f/0x5c0 [ 2204.276866] ? sysret32_from_system_call+0x5/0x46 [ 2204.281719] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2204.286566] entry_SYSENTER_compat+0x70/0x7f [ 2204.290982] RIP: 0023:0xf7f1ccb9 [ 2204.294344] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2204.313858] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2204.321571] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2204.328839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2204.336110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2204.343381] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2204.350649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/06/05 23:28:46 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c71, 0x0) 2018/06/05 23:28:46 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c7d, 0x0) 2018/06/05 23:28:47 executing program 1: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c0f, r1) 2018/06/05 23:28:47 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c61, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/06/05 23:28:47 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x11000000, &(0x7f000000a000)) 2018/06/05 23:28:47 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c2d, 0x0) 2018/06/05 23:28:47 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c66, 0x0) 2018/06/05 23:28:47 executing program 7 (fault-call:8 fault-nth:45): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2018/06/05 23:28:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0xfffffffffffffffc) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000001500)="42016466d9d228fa427845c72da5cf5f9a9e3f2d0d6cf2511b96a643341028e99daf21164061eb18433da6e1acb88481af91c8ad0aed871b18000000000000000000000000", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x373e, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xf4, r2, 0x10, 0x70bd25, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x90, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff]}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x10) 2018/06/05 23:28:47 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0)='"', 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0xfeffffff00000000]}, 0x6) 2018/06/05 23:28:47 executing program 2: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c69, 0x0) 2018/06/05 23:28:47 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x80080) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x20000009) sysfs$3(0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c2d, r2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2205.237626] FAULT_INJECTION: forcing a failure. [ 2205.237626] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.249520] CPU: 0 PID: 9338 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2205.256465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2205.265819] Call Trace: [ 2205.268417] dump_stack+0x1b9/0x294 [ 2205.272058] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2205.277274] ? finish_task_switch+0x1ca/0x840 [ 2205.281829] ? finish_task_switch+0x182/0x840 [ 2205.286345] should_fail.cold.4+0xa/0x1a [ 2205.290418] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2205.295539] ? __schedule+0x809/0x1e30 [ 2205.299443] ? __sched_text_start+0x8/0x8 [ 2205.303593] ? find_held_lock+0x36/0x1c0 [ 2205.307663] ? __lock_is_held+0xb5/0x140 [ 2205.311746] ? check_same_owner+0x320/0x320 [ 2205.316079] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2205.320847] __should_failslab+0x124/0x180 [ 2205.325094] should_failslab+0x9/0x14 [ 2205.328901] kmem_cache_alloc_trace+0x2cb/0x780 [ 2205.333581] ? device_create_groups_vargs+0x4a/0x270 [ 2205.338697] device_create_groups_vargs+0xa7/0x270 [ 2205.343635] device_create_vargs+0x46/0x60 [ 2205.347890] bdi_register_va.part.10+0xbb/0x9b0 [ 2205.352566] ? __lockdep_init_map+0x105/0x590 [ 2205.357072] ? cgwb_kill+0x630/0x630 [ 2205.360799] ? mark_held_locks+0xc9/0x160 [ 2205.364965] ? mark_held_locks+0xc9/0x160 [ 2205.369213] ? retint_kernel+0x10/0x10 [ 2205.373133] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2205.378169] bdi_register+0x101/0x110 [ 2205.381980] ? bdi_register_va+0x80/0x80 [ 2205.386061] bdi_register_owner+0x5e/0x100 [ 2205.390306] __device_add_disk+0xf07/0x1340 [ 2205.394633] ? vsnprintf+0x51a/0x1b40 [ 2205.398447] ? blk_alloc_devt+0x2a0/0x2a0 [ 2205.402623] ? mark_held_locks+0xc9/0x160 [ 2205.406771] ? retint_kernel+0x10/0x10 [ 2205.410654] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2205.415662] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2205.420414] ? retint_kernel+0x10/0x10 [ 2205.424303] device_add_disk+0x22/0x30 [ 2205.428179] loop_add+0x70b/0x9c0 [ 2205.431623] ? loop_queue_rq+0x640/0x640 [ 2205.435681] ? retint_kernel+0x10/0x10 [ 2205.439564] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2205.444752] loop_control_ioctl+0x178/0x500 [ 2205.449072] ? loop_add+0x9c0/0x9c0 [ 2205.452685] ? retint_kernel+0x10/0x10 [ 2205.456557] ? loop_add+0x9c0/0x9c0 [ 2205.460181] ? loop_add+0x9c0/0x9c0 [ 2205.463799] __ia32_compat_sys_ioctl+0x221/0x640 [ 2205.468551] do_fast_syscall_32+0x345/0xf9b [ 2205.472866] ? do_int80_syscall_32+0x880/0x880 [ 2205.477436] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2205.482281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2205.487807] ? syscall_return_slowpath+0x30f/0x5c0 [ 2205.492737] ? sysret32_from_system_call+0x5/0x46 [ 2205.497590] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2205.502427] entry_SYSENTER_compat+0x70/0x7f [ 2205.506821] RIP: 0023:0xf7f1ccb9 [ 2205.510167] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2205.529585] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2205.537282] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2205.544539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2205.551794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2205.559049] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2205.566316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2205.573927] WARNING: CPU: 0 PID: 9338 at block/genhd.c:697 __device_add_disk+0x104a/0x1340 [ 2205.582328] Kernel panic - not syncing: panic_on_warn set ... [ 2205.582328] [ 2205.589696] CPU: 0 PID: 9338 Comm: syz-executor7 Not tainted 4.17.0+ #110 [ 2205.596700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2205.606053] Call Trace: [ 2205.608646] dump_stack+0x1b9/0x294 [ 2205.612279] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2205.617477] ? __device_add_disk+0x1010/0x1340 [ 2205.622059] panic+0x22f/0x4de [ 2205.625255] ? add_taint.cold.5+0x16/0x16 [ 2205.629408] ? __warn.cold.8+0x148/0x1b3 [ 2205.633468] ? __device_add_disk+0x104a/0x1340 [ 2205.638048] __warn.cold.8+0x163/0x1b3 [ 2205.641932] ? __device_add_disk+0x104a/0x1340 [ 2205.646516] report_bug+0x252/0x2d0 [ 2205.650147] do_error_trap+0x1fc/0x4d0 [ 2205.654035] ? math_error+0x3f0/0x3f0 [ 2205.657835] ? mark_held_locks+0xc9/0x160 [ 2205.661987] ? retint_kernel+0x10/0x10 [ 2205.665885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2205.670732] do_invalid_op+0x1b/0x20 [ 2205.674459] invalid_op+0x14/0x20 [ 2205.677912] RIP: 0010:__device_add_disk+0x104a/0x1340 [ 2205.683091] Code: ff ff 48 89 df e8 26 60 71 fe e9 e1 f0 ff ff e8 9c 60 71 fe e9 86 f4 ff ff e8 e2 ef 34 fe 0f 0b e9 52 fb ff ff e8 d6 ef 34 fe <0f> 0b e9 cb fe ff ff 4c 89 f7 e8 77 60 71 fe e9 24 f1 ff ff e8 8d [ 2205.702340] RSP: 0018:ffff8801c07579f0 EFLAGS: 00010246 [ 2205.707712] RAX: 0000000000040000 RBX: ffff88018f5fae40 RCX: ffffc900052d2000 [ 2205.714995] RDX: 0000000000040000 RSI: ffffffff8344663a RDI: 0000000000000005 [ 2205.722267] RBP: ffff8801c0757bc0 R08: ffff88015b992600 R09: ffffed003b5c46d6 [ 2205.729532] R10: ffffed003b5c46d6 R11: ffff8801dae236b3 R12: 00000000fffffff4 [ 2205.736876] R13: ffff8801c0757b98 R14: ffff88018f5fb3a0 R15: ffff88018f5fae44 [ 2205.744161] ? __device_add_disk+0x104a/0x1340 [ 2205.748759] ? vsnprintf+0x51a/0x1b40 [ 2205.752573] ? blk_alloc_devt+0x2a0/0x2a0 [ 2205.756721] ? mark_held_locks+0xc9/0x160 [ 2205.760875] ? retint_kernel+0x10/0x10 [ 2205.764762] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2205.769779] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2205.774535] ? retint_kernel+0x10/0x10 [ 2205.778414] device_add_disk+0x22/0x30 [ 2205.782289] loop_add+0x70b/0x9c0 [ 2205.785731] ? loop_queue_rq+0x640/0x640 [ 2205.789795] ? retint_kernel+0x10/0x10 [ 2205.793675] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2205.798854] loop_control_ioctl+0x178/0x500 [ 2205.803165] ? loop_add+0x9c0/0x9c0 [ 2205.806787] ? retint_kernel+0x10/0x10 [ 2205.810667] ? loop_add+0x9c0/0x9c0 [ 2205.814282] ? loop_add+0x9c0/0x9c0 [ 2205.817907] __ia32_compat_sys_ioctl+0x221/0x640 [ 2205.822659] do_fast_syscall_32+0x345/0xf9b [ 2205.826965] ? do_int80_syscall_32+0x880/0x880 [ 2205.831541] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2205.836392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2205.841952] ? syscall_return_slowpath+0x30f/0x5c0 [ 2205.846881] ? sysret32_from_system_call+0x5/0x46 [ 2205.851725] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2205.856599] entry_SYSENTER_compat+0x70/0x7f [ 2205.861005] RIP: 0023:0xf7f1ccb9 [ 2205.864365] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2205.883645] RSP: 002b:00000000f5f180ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2205.891340] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000004c80 [ 2205.898604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2205.905873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2205.913134] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2205.920391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2205.928650] Dumping ftrace buffer: [ 2205.932518] (ftrace buffer empty) [ 2205.936221] Kernel Offset: disabled [ 2205.939830] Rebooting in 86400 seconds..