ffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xcc01, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x5) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) 2018/05/19 11:19:23 executing program 6: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 2018/05/19 11:19:23 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', r1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000140)={r2, 0x6}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000180)=@ioapic={0x100001, 0x9, 0x3, 0x1, 0x0, [{0x3, 0x167a, 0x0, [], 0x4}, {0x1, 0xfffffffffffffff9, 0x3ff, [], 0x5d4f2230}, {0x61f0, 0x0, 0x8000, [], 0x7}, {0x8, 0x8000, 0xfffffffffffffffc, [], 0xad72}, {0xcc2869, 0x2, 0xfffffffffffffffc, [], 0x7}, {0x8, 0x3, 0x4a9f, [], 0xff}, {0x1e3, 0x2111, 0x4, [], 0x8001}, {0x3, 0x2, 0x3, [], 0x8}, {0x0, 0x6be0, 0x8, [], 0x5}, {0x4, 0x8, 0x5, [], 0x6}, {0xd5, 0x5, 0x673, [], 0x4}, {0x80000000, 0x8, 0x5, [], 0x4}, {0xfffffffffffffffe, 0x2b0, 0x3, [], 0x5}, {0x26, 0x2, 0xfffffffffffff800, [], 0xfffffffffffffffe}, {0x5, 0x20, 0x5, [], 0x7f}, {0x6, 0x1, 0xfff, [], 0xfffffffffffffffd}, {0x9401, 0x4, 0x9, [], 0x8}, {0x3, 0x100000001, 0xfffffffffffeffff, [], 0xa0ac}, {0x9, 0xffffffffffffffff, 0xffffffffffffff0b, [], 0x3f}, {0xdd, 0x8, 0x100000000, [], 0x7ff}, {0x8001, 0xffffffff, 0x1000, [], 0x8382}, {0xfff, 0x8, 0x1, [], 0x7}, {0x9, 0x744, 0x6, [], 0x1}, {0x8, 0x3ff, 0xaade09de00000000}]}) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e20, 0x679b, @empty, 0x41}, {0xa, 0x4e20, 0x1f, @mcast1={0xff, 0x1, [], 0x1}, 0x40}, 0x800, [0x3f, 0x2, 0x0, 0x7f, 0x8, 0x4, 0x5, 0x5]}, 0x5c) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000300)=""/4096) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000001300)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001340)={0x7, {{0xa, 0x4e22, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x1ff}}, {{0xa, 0x4e21, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x200}}}, 0x108) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001480)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x50, r4, 0x400, 0x70bd25, 0x25dfdbfd, {0x8}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffff801}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000001640)={0x0, 0xda, "87e4394ec6b94353fd32e977f64310587384c216d37eb797771675c813211dfed86ccf2f2aff40e9cda5403e21e9bf8d129f1a977f7a2f566102674b2e4eb4f7479efd0dfb82d297d4603b6e24f98b6dc07a1944306362fa6af20314db216f388bc4591d9c75262814b9fff93ee0b3683d4e931ef5c0efbc87cb7d985f3d81f0b73c54be2b8b2329f9a99dca58c317d6b5974a275ad2f619fefbb58b55fd21b281a56992bd0962b8f849b343778326b2d2bdda5e8379f186ae8efccf4996332a608f32f9723835243fc7d37030018a90450ba8b6c2ae02626330"}, &(0x7f0000001740)=0xe2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000017c0)={r5, 0x0, &(0x7f0000001780)}, &(0x7f0000001800)=0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000001840)={0x4, 0x6, 0x1ff, 0x7}, 0x8) clock_gettime(0x3, &(0x7f0000001880)) recvfrom$ipx(r0, &(0x7f00000018c0)=""/17, 0x11, 0x20, 0x0, 0x0) init_module(&(0x7f0000001900)='fdinfo\x00', 0x7, &(0x7f0000001940)='IPVS\x00') ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000001980)) clock_gettime(0x6, &(0x7f00000019c0)) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000001a00)=0x1, &(0x7f0000001a40)=0x4) recvfrom$ipx(r0, &(0x7f0000001a80)=""/4096, 0x1000, 0x40, &(0x7f0000002a80)={0x4, 0x8, 0x4, "709651f363fa"}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000002b40)={r5, 0x2d, "dfbc1435993e2f10495d420685c9adda90453af2146a9f046612a21fcb64d9b5e600c76085e39eb11c20c36581"}, &(0x7f0000002b80)=0x35) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000002bc0)=0x801d) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000002c00)) [ 316.260962] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 316.268558] FAT-fs (loop5): Filesystem has been set read-only [ 316.285155] FAULT_INJECTION: forcing a failure. [ 316.285155] name failslab, interval 1, probability 0, space 0, times 0 [ 316.296818] CPU: 0 PID: 20659 Comm: syz-executor5 Not tainted 4.17.0-rc5+ #58 [ 316.304129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.313488] Call Trace: [ 316.316081] dump_stack+0x1b9/0x294 [ 316.319722] ? dump_stack_print_info.cold.2+0x52/0x52 [ 316.324923] ? __kernel_text_address+0xd/0x40 [ 316.329422] ? unwind_get_return_address+0x61/0xa0 [ 316.334369] should_fail.cold.4+0xa/0x1a [ 316.338430] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 316.343549] ? save_stack+0xa9/0xd0 [ 316.347175] ? kasan_kmalloc+0xc4/0xe0 [ 316.351058] ? kasan_slab_alloc+0x12/0x20 [ 316.355196] ? kmem_cache_alloc+0x12e/0x760 [ 316.359523] ? mempool_alloc_slab+0x44/0x60 [ 316.363867] ? mempool_alloc+0x18b/0x490 [ 316.367936] ? bio_alloc_bioset+0x3a1/0x7f0 [ 316.372270] ? mpage_alloc.isra.7+0x62/0x2d0 [ 316.376680] ? __mpage_writepage+0x154d/0x1a60 [ 316.381251] ? write_cache_pages+0x920/0x1690 [ 316.385761] ? mpage_writepages+0x140/0x300 [ 316.390077] ? fat_writepages+0x24/0x30 [ 316.394046] ? do_writepages+0x9a/0x1a0 [ 316.398023] ? __filemap_fdatawrite_range+0x333/0x470 [ 316.403219] ? filemap_write_and_wait_range+0x48/0xd0 [ 316.408400] ? __generic_file_write_iter+0x4f2/0x630 [ 316.413493] ? generic_file_write_iter+0x430/0x850 [ 316.418410] ? __vfs_write+0x64d/0x960 [ 316.422288] ? vfs_write+0x1f8/0x560 [ 316.425992] ? ksys_write+0xf9/0x250 [ 316.429701] ? __x64_sys_write+0x73/0xb0 [ 316.433754] ? graph_lock+0x170/0x170 [ 316.437541] ? perf_trace_lock_acquire+0x4f1/0x980 [ 316.442464] ? print_usage_bug+0xc0/0xc0 [ 316.446527] ? graph_lock+0x170/0x170 [ 316.450325] ? graph_lock+0x170/0x170 [ 316.454137] ? __lock_is_held+0xb5/0x140 [ 316.458225] __should_failslab+0x124/0x180 [ 316.462456] should_failslab+0x9/0x14 [ 316.466248] kmem_cache_alloc+0x47/0x760 [ 316.470303] ? rcu_note_context_switch+0x710/0x710 [ 316.475222] ? rcu_read_lock_sched_held+0x108/0x120 [ 316.480236] ? mempool_free+0x370/0x370 [ 316.484211] mempool_alloc_slab+0x44/0x60 [ 316.488359] mempool_alloc+0x18b/0x490 [ 316.492246] ? remove_element.isra.4+0x1c0/0x1c0 [ 316.496999] ? kasan_check_write+0x14/0x20 [ 316.501232] ? bio_init+0x138/0x250 [ 316.504852] ? bio_add_page+0x3b0/0x3b0 [ 316.508824] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 316.514025] bvec_alloc+0x12a/0x2d0 [ 316.517660] bio_alloc_bioset+0x484/0x7f0 [ 316.521818] ? bvec_alloc+0x2d0/0x2d0 [ 316.525624] ? find_held_lock+0x36/0x1c0 [ 316.529687] mpage_alloc.isra.7+0x62/0x2d0 [ 316.533941] __mpage_writepage+0x154d/0x1a60 [ 316.538375] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 316.543413] ? percpu_counter_add_batch+0xf2/0x150 [ 316.548348] ? clean_buffers+0x2f0/0x2f0 [ 316.552410] ? balance_dirty_pages_ratelimited+0x1f50/0x1f50 [ 316.558204] ? graph_lock+0x170/0x170 [ 316.561993] ? __lock_is_held+0xb5/0x140 [ 316.566072] ? __lock_is_held+0xb5/0x140 [ 316.570139] write_cache_pages+0x920/0x1690 [ 316.574465] ? clean_buffers+0x2f0/0x2f0 [ 316.578528] ? clear_page_dirty_for_io+0x1200/0x1200 [ 316.583629] ? debug_check_no_locks_freed+0x310/0x310 [ 316.588813] ? perf_tp_event+0xc30/0xc30 [ 316.592864] ? wait_for_stable_page+0x186/0x350 [ 316.597530] ? set_page_dirty_lock+0x180/0x180 [ 316.602119] ? memset+0x31/0x40 [ 316.605395] ? perf_trace_lock_acquire+0x4f1/0x980 [ 316.611625] ? graph_lock+0x170/0x170 [ 316.615423] ? balance_dirty_pages+0x3780/0x3780 [ 316.620176] ? perf_trace_lock+0x900/0x900 [ 316.624407] ? blk_start_plug+0xc4/0x360 [ 316.628808] ? blk_lld_busy+0x70/0x70 [ 316.632604] ? find_held_lock+0x36/0x1c0 [ 316.636669] ? lock_downgrade+0x8e0/0x8e0 [ 316.640811] ? fat_add_cluster+0x140/0x140 [ 316.645045] mpage_writepages+0x140/0x300 [ 316.649185] ? mpage_end_io+0x1c0/0x1c0 [ 316.653150] ? fat_add_cluster+0x140/0x140 [ 316.657378] ? __filemap_fdatawrite_range+0x2ec/0x470 [ 316.662574] ? _raw_spin_unlock+0x22/0x30 [ 316.666722] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 316.672007] fat_writepages+0x24/0x30 [ 316.675809] ? fat_readpages+0x40/0x40 [ 316.679695] do_writepages+0x9a/0x1a0 [ 316.683500] __filemap_fdatawrite_range+0x333/0x470 [ 316.688530] ? delete_from_page_cache_batch+0xf70/0xf70 [ 316.693925] ? generic_file_direct_write+0x1db/0x4b0 [ 316.699039] filemap_write_and_wait_range+0x48/0xd0 [ 316.704059] __generic_file_write_iter+0x4f2/0x630 [ 316.708999] generic_file_write_iter+0x430/0x850 [ 316.713765] ? __generic_file_write_iter+0x630/0x630 [ 316.718876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.724418] ? iov_iter_init+0xc9/0x1f0 [ 316.728405] __vfs_write+0x64d/0x960 [ 316.732133] ? kernel_read+0x120/0x120 [ 316.736043] ? __lock_is_held+0xb5/0x140 [ 316.740121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.745656] ? __sb_start_write+0x17f/0x300 [ 316.749976] vfs_write+0x1f8/0x560 [ 316.753515] ksys_write+0xf9/0x250 [ 316.757061] ? __ia32_sys_read+0xb0/0xb0 [ 316.761133] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 316.765980] __x64_sys_write+0x73/0xb0 [ 316.769870] do_syscall_64+0x1b1/0x800 [ 316.773750] ? finish_task_switch+0x1ca/0x840 [ 316.778239] ? syscall_return_slowpath+0x5c0/0x5c0 [ 316.783164] ? syscall_return_slowpath+0x30f/0x5c0 [ 316.788098] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 316.793477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.798340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.803522] RIP: 0033:0x455a09 2018/05/19 11:19:23 executing program 5 (fault-call:5 fault-nth:6): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 316.806710] RSP: 002b:00007fa76e399c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.814413] RAX: ffffffffffffffda RBX: 00007fa76e39a6d4 RCX: 0000000000455a09 [ 316.821684] RDX: 000000000000003a RSI: 0000000020000200 RDI: 0000000000000014 [ 316.828972] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 316.836247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 316.843513] R13: 0000000000000790 R14: 00000000006ff620 R15: 0000000000000005 2018/05/19 11:19:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c"}, {&(0x7f0000000000)="c34a64d1d03cd7d2"}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4"}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d"}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478"}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf"}], 0x0, &(0x7f0000000800)=[@cred={0x0, 0x1, 0x2}, @rights={0x0, 0x1, 0x1}, @cred={0x0, 0x1, 0x2}], 0x0, 0x1}], 0x492492492492518, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:23 executing program 2: r0 = add_key(&(0x7f0000000440)='syzkaller\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000004c0)="cab870e42fce52997f65acfd872d289901f814925cf3d8d7438996347585f794bad4aa30", 0x24, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = socket$unix(0x1, 0x7, 0x0) recvfrom$unix(r2, &(0x7f0000000300)=""/121, 0x79, 0x10020, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x7, 0x400000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) sendfile(r2, r2, &(0x7f0000000280), 0x3) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000040)={0x80000000, 0x200, 0x9}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="12", 0x29d, r4) 2018/05/19 11:19:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000040)=0x401, 0xffffffe1) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0) 2018/05/19 11:19:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x19, 0x8c, 0x4, 0x0, 0xffffffffffffff9c, 0x8000}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000140)="1bcf9903bfc4c1d0c81a9f1c25df7da9bbc782aa71678f76", &(0x7f0000000000)="eb925d4a0f29282a6401d491"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000bc0), &(0x7f0000000c00)="eef17ff1bc18f3620770e7670e4d7238e505e8b3c0a3741e3c806ad89fa0b8b9074582889fada60070dda44419546c038816de25b50400b0440c2f706799c41074ba667be114a9322c2a768c8f7aaa1f2247617c38405681edd6b63e79cac298d682dc746a9dabcd3ec50c26c96cb90f774aa318cf90d743ab52d06e8ab086d381b6b4beb422a0b142d17f0567161a28862bbb81162831b2b38717d0fd3a16f5ed910246c906e43725583c"}, 0x152) pipe2(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socket(0x2, 0x80000, 0x1) r3 = getpid() sendmsg$nl_netfilter(r1, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000240)={0x558, 0x4, 0xb, 0x1, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x3}, [@typed={0x4, 0x85}, @nested={0x374, 0x4c, [@generic="bd", @typed={0xfc, 0x31, @binary="ebb985c555720ec0e4d47f2d055d525557ba6c60b049aee070ced88f930bde5bd04f592ee482ab26b3a271ee5c18ae0fd1779755b143c0cd6c4f75f27453d99116c6fdb2bbc589bde7672c7109aafdf76e4425ddffe11a85aba76af0a93800bef2b7b16e050ee53ec9c997c75d0c3e91a3884314bc22b419d2c24bc2aa58df115bf7e37708a1653267091308aa0451300e22d68bfba0e8a9952bf09da80726c75dcfca056ae03be11e133ac83b23c404f513f5b42e45a6b99ec505b679f38d10795fd70db9a39fb597ae322dc1175b9983e2afffc21edc78e9b2f4e99bf767450774b469f2236a591301b4f37db6d2f1a69158aa65533e"}, @typed={0xe4, 0x1f, @binary="032b1eec59688beb15ab85bce21956343907249ecdd8dd70077e4ea462c2837b419d924f45ad090385e6316353d9eeeb51d2203e84e09385110469b2fce294777ceca5c298e20bb7156748c5ccf40c6253961135a9ae48b06cfdcb64ba850b564bce4f3fa96d3b4fa5e0929e6f4b88b69b31e8206b7886d9750ef8c2e7c6312dcc9f785893decd0c32ef57d4b9c2aa4a0cf13a757e5429a525e15faf937f1be7d035f9db0dbc1e45aed20c9f74b18e619177c5812b6f9e13958e9ac7bd781aedb8ff8f509a95046ebcfa19070474fb76e7cea01bc02a66b6bd305aa4e7ab"}, @typed={0x8, 0x8b, @ipv4=@broadcast=0xffffffff}, @typed={0x8, 0x53, @ipv4=@multicast1=0xe0000001}, @generic="4b026d91e1db91a9e931398b1c47f1ac48738d21e7938c4f398c93e2b654368b68049d82153b6ec710947835aa5315b62bfdc25ea791249149f7a38e9d11e8b088494cb37b9844a587fe08130c67d225601ede4ee9b1dfe166ceed62652a5ab7761ec2281cc4e0c6e819ec84436a921c309a0329b70fdcc6c2ac7f98ee89de092735739d7ccb1cd70fc9166bcb912c294b646b1170f697a8c42250bc18614a1d812563aaae4ad87048bfad00ff3c3c91d197ea09ad8bed600cae35dbf59367c6b09e7c459f33a44613ff7cd46669", @typed={0xa8, 0x22, @binary="30ccbbb105b467c7ba7fa471e616d0f35a5fd64280f29270c9c6db5ef618b9d90c0c794d255cd766611515b9b38292648ce727f82f84721808133d9156e6d0a49e9e607f32d5e5b6b2ffed81aef70cec26464536816bece4bd96c6b4ddaebf50770f579612223dc7aa1598bac6ec989846b3e9c7f9f625e9647cc602866c3ed5fe31635c524ce8edd4360a6b671690e20d85bb47cbf0156f62fbdaa54273f81acd0cb8"}, @typed={0x8, 0x61, @pid=r3}]}, @generic="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", @nested={0xd0, 0xf, [@typed={0xc, 0x58, @binary="e398d62fa816ad"}, @generic="5fbb103d6bb34415021e83765c0b030019d2e6d4", @typed={0x14, 0x68, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @generic="45f3df38c141631d4393c7b3b46b7fa4e5aef4dc68273b0a4219e0b9b7adfff8098e67ea7979168d13e1b490ca03e0410a93653db0daef41bf19bc01a80b01a99c9196d391d23b6a4f3c3122facb720c3844e1dd1a710a5224b5b454bd1089f7235726cfbba13543659248e04a241403555fdff4af7cfdfe20553cec07c69ec9539109e2f8f358eb70f17631c6196ef04d48707266b1"]}]}, 0x558}, 0x1, 0x0, 0x0, 0x24040004}, 0x8000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000a40)={0x2, &(0x7f00000001c0)=[{0x2, 0x6, 0xff, 0xfffffffffffffff9}, {0x3, 0x8000, 0x1ff, 0x10000}]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r2, &(0x7f0000000840)="1c3018a4d390a81289ffcedc8efb180c93743f92819d910e6fce0f9661eb0c58ad66766a17a9b5f45a9ecb973b29683e8959ed347aec9a4ea2fdad3c589ddbfe9c82f8b2ee408ae3f9e0733ad3f68a2b62dbe057246d1aaa291229b34990b744422b49a895381775abef7d0461c93b740baa495cbc5637090490e8451a7e7bca084b", &(0x7f0000000900)="dbdc04a16826232a0efd7eb09560a1457ca74f01f3433f73bdfe50ace68565b517c70c57ac7baf6fc66f16b30f73b36f7d69a3825e28e69f8c90abab14e5605444c6a37df634cf79b60937ed6480d58299b9a79b8ccccfbea4a996be6f5e246cd562375fe3b662cb26992aab753640d9b057ff995472b838d00033fb514fe915f082e1d0d5660fb7a119016fdfbf8408ff810bfe70308ce9db536c04dfa11d1da997c698462c4eb2d9591c6eba0457755e7e732394c1106799b7a7dd3e0749ce", 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xdbd5, 0x4000) getpeername$packet(r0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000022c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)=@gettclass={0x24, 0x2a, 0x0, 0x70bd2a, 0x25dfdbfd, {0x0, r4, {0xb}, {0xffff, 0x4}, {0x2, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0xc080) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x4) [ 317.036731] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:23 executing program 6: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="a899cac268107c2a08", 0x9, 0xfffffffffffffffb) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x109000) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000000c0)=""/38, &(0x7f0000000100)=0x19) linkat(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00', 0x1400) keyctl$revoke(0x3, r0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x2, 0x30, 0x1c1}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback={0x0, 0x1}, 0x7}}, 0x4, 0x80}, &(0x7f00000001c0)=0x90) socket$inet_dccp(0x2, 0x6, 0x0) getsockname$ipx(r1, &(0x7f0000000300), &(0x7f0000000340)=0x10) 2018/05/19 11:19:24 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x80002) r1 = open(&(0x7f0000000100)='./file0\x00', 0x119000, 0x188) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000140)=""/231) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f00000000c0), 0x4) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000000)="10", 0x1, 0xfffffffffffffffb) 2018/05/19 11:19:24 executing program 6: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000080)=0x80) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, {0x306, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x40, {0x2, 0x4e22, @loopback=0x7f000001}, 'bond_slave_0\x00'}) keyctl$revoke(0x3, r0) 2018/05/19 11:19:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0xfffffffffffffcef) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000540), &(0x7f00003a3fff)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000005c0)="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", &(0x7f00000001c0)="86a067e105e123d5c70998c34ddc19cf2f654cdb1a0a829ede2fd8713d4404d812a330b5b777780efba3bfdbcb9823b52913593a8f2e9b576c07e9e19241ce67c6b6b694cbfe444c552911c0296a4f098f51f1fe34d7518de2253aaae0d4cf747b9207d955b06acaa924b5ae85491af88fedb32c2ac81b5ddfb10268fc0984f02169dc72fcb38d5df2fd52bf44253281f1c9f4da57", 0x1}, 0x20) 2018/05/19 11:19:24 executing program 4: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={[{@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, [0x32, 0x0]}, 0x2c}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1, 0x1}, &(0x7f0000000180)=0x8) [ 317.326672] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 317.334473] FAT-fs (loop5): Filesystem has been set read-only [ 317.346421] FAULT_INJECTION: forcing a failure. [ 317.346421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 317.358277] CPU: 0 PID: 20707 Comm: syz-executor5 Not tainted 4.17.0-rc5+ #58 [ 317.365549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.374898] Call Trace: [ 317.377486] dump_stack+0x1b9/0x294 [ 317.381121] ? dump_stack_print_info.cold.2+0x52/0x52 [ 317.386324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.391864] ? tracing_generic_entry_update+0x18e/0x200 [ 317.397234] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.402780] should_fail.cold.4+0xa/0x1a [ 317.406844] ? debug_check_no_locks_freed+0x310/0x310 [ 317.412055] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 317.417187] ? perf_swevent_event+0x2e0/0x2e0 2018/05/19 11:19:24 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') [ 317.421728] ? debug_check_no_locks_freed+0x310/0x310 [ 317.427664] ? print_usage_bug+0xc0/0xc0 [ 317.431749] ? perf_trace_lock+0x900/0x900 [ 317.436011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.441575] ? group_sched_in+0x17d/0x400 [ 317.445729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.451265] ? should_fail+0x21b/0xbcd [ 317.455323] ? flexible_sched_in+0x11d/0xc10 [ 317.459749] __alloc_pages_nodemask+0x34e/0xd70 [ 317.464427] ? __lock_acquire+0x7f5/0x5140 [ 317.468672] ? find_held_lock+0x36/0x1c0 [ 317.472736] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 317.477847] ? debug_check_no_locks_freed+0x310/0x310 [ 317.483053] ? graph_lock+0x170/0x170 [ 317.486853] ? perf_tp_event+0xc30/0xc30 [ 317.490913] ? find_held_lock+0x36/0x1c0 [ 317.494973] ? __lock_acquire+0x7f5/0x5140 [ 317.499218] ? __lock_is_held+0xb5/0x140 [ 317.503277] cache_grow_begin+0x72/0x6c0 [ 317.507340] kmem_cache_alloc+0x689/0x760 [ 317.511504] ? mempool_free+0x370/0x370 [ 317.515475] mempool_alloc_slab+0x44/0x60 [ 317.519617] mempool_alloc+0x18b/0x490 [ 317.523502] ? remove_element.isra.4+0x1c0/0x1c0 [ 317.528254] ? perf_trace_lock+0x900/0x900 [ 317.532491] ? graph_lock+0x170/0x170 [ 317.536309] bio_alloc_bioset+0x3a1/0x7f0 [ 317.540449] ? bvec_alloc+0x2d0/0x2d0 [ 317.544239] ? find_held_lock+0x36/0x1c0 [ 317.548304] mpage_alloc.isra.7+0x62/0x2d0 [ 317.552542] __mpage_writepage+0x154d/0x1a60 [ 317.556949] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 317.561977] ? percpu_counter_add_batch+0xf2/0x150 [ 317.566916] ? clean_buffers+0x2f0/0x2f0 [ 317.570977] ? balance_dirty_pages_ratelimited+0x1f50/0x1f50 [ 317.576767] ? graph_lock+0x170/0x170 [ 317.580577] ? __lock_is_held+0xb5/0x140 [ 317.584646] ? __lock_is_held+0xb5/0x140 [ 317.588712] write_cache_pages+0x920/0x1690 [ 317.593057] ? clean_buffers+0x2f0/0x2f0 [ 317.597121] ? clear_page_dirty_for_io+0x1200/0x1200 [ 317.602274] ? debug_check_no_locks_freed+0x310/0x310 [ 317.607464] ? perf_tp_event+0xc30/0xc30 [ 317.611534] ? wait_for_stable_page+0x186/0x350 [ 317.616207] ? set_page_dirty_lock+0x180/0x180 [ 317.620790] ? memset+0x31/0x40 [ 317.624069] ? perf_trace_lock_acquire+0x4f1/0x980 [ 317.628987] ? graph_lock+0x170/0x170 [ 317.632780] ? balance_dirty_pages+0x3780/0x3780 [ 317.637538] ? perf_trace_lock+0x900/0x900 [ 317.641765] ? blk_start_plug+0xc4/0x360 [ 317.645818] ? blk_lld_busy+0x70/0x70 [ 317.649613] ? find_held_lock+0x36/0x1c0 [ 317.653677] ? lock_downgrade+0x8e0/0x8e0 [ 317.657829] ? fat_add_cluster+0x140/0x140 [ 317.662077] mpage_writepages+0x140/0x300 [ 317.666215] ? mpage_end_io+0x1c0/0x1c0 [ 317.670180] ? fat_add_cluster+0x140/0x140 [ 317.674407] ? __filemap_fdatawrite_range+0x2ec/0x470 [ 317.679601] ? _raw_spin_unlock+0x22/0x30 [ 317.683742] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 317.689024] fat_writepages+0x24/0x30 [ 317.692823] ? fat_readpages+0x40/0x40 [ 317.696702] do_writepages+0x9a/0x1a0 [ 317.700523] __filemap_fdatawrite_range+0x333/0x470 [ 317.705641] ? delete_from_page_cache_batch+0xf70/0xf70 [ 317.711036] ? generic_file_direct_write+0x1db/0x4b0 [ 317.716138] filemap_write_and_wait_range+0x48/0xd0 [ 317.721149] __generic_file_write_iter+0x4f2/0x630 [ 317.726086] generic_file_write_iter+0x430/0x850 [ 317.730845] ? __generic_file_write_iter+0x630/0x630 [ 317.735945] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.741477] ? iov_iter_init+0xc9/0x1f0 [ 317.745489] __vfs_write+0x64d/0x960 [ 317.749206] ? kernel_read+0x120/0x120 [ 317.753099] ? __lock_is_held+0xb5/0x140 [ 317.757167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.762709] ? __sb_start_write+0x17f/0x300 [ 317.767043] vfs_write+0x1f8/0x560 [ 317.770593] ksys_write+0xf9/0x250 [ 317.774129] ? __ia32_sys_read+0xb0/0xb0 [ 317.778184] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 317.783037] __x64_sys_write+0x73/0xb0 [ 317.786922] do_syscall_64+0x1b1/0x800 [ 317.790817] ? syscall_return_slowpath+0x5c0/0x5c0 [ 317.795740] ? syscall_return_slowpath+0x30f/0x5c0 [ 317.800667] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 317.806063] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.810918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.816120] RIP: 0033:0x455a09 [ 317.819313] RSP: 002b:00007fa76e399c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 2018/05/19 11:19:24 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400840, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xff, "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"}, &(0x7f00000001c0)=0x107) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={r1, @in={{0x2, 0x4e21}}, 0x3, 0x0, 0x0, 0x7}, &(0x7f00000002c0)=0x98) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f0000000300)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x13, &(0x7f0000000000), 0x4) 2018/05/19 11:19:24 executing program 5 (fault-call:5 fault-nth:7): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 317.827023] RAX: ffffffffffffffda RBX: 00007fa76e39a6d4 RCX: 0000000000455a09 [ 317.834294] RDX: 000000000000003a RSI: 0000000020000200 RDI: 0000000000000014 [ 317.841557] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 317.849175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 317.856450] R13: 0000000000000790 R14: 00000000006ff620 R15: 0000000000000006 [ 318.003240] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 318.067701] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 2018/05/19 11:19:24 executing program 6: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)="dc", 0x1, 0xfffffffffffffffb) r1 = add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r0, r1) keyctl$revoke(0x3, r0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='user.syz\x00', &(0x7f00000001c0)='\x00', 0x1, 0x1) 2018/05/19 11:19:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x8) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2) clock_gettime(0x5, &(0x7f0000000100)) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000080)={[{0x81, 0x8, 0x7, 0x9, 0xb09, 0x1f, 0x6, 0x5, 0x3, 0x1, 0xffffffffffffffff, 0x401, 0x5}, {0x80, 0x6, 0x7, 0x0, 0x9, 0x7fff, 0x10001, 0x1cb, 0x7, 0x4, 0x5, 0x3, 0x4}, {0x1, 0x5b77, 0x5, 0x0, 0x7fff, 0x1f, 0x100000000, 0xe4, 0xe6a, 0x1, 0x2, 0x89cf, 0x7f}], 0x8}) [ 318.115318] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. [ 318.281255] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 318.288882] FAT-fs (loop5): Filesystem has been set read-only [ 318.306203] FAULT_INJECTION: forcing a failure. [ 318.306203] name failslab, interval 1, probability 0, space 0, times 0 [ 318.317960] CPU: 1 PID: 20760 Comm: syz-executor5 Not tainted 4.17.0-rc5+ #58 [ 318.325291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.334654] Call Trace: [ 318.337271] dump_stack+0x1b9/0x294 [ 318.340931] ? dump_stack_print_info.cold.2+0x52/0x52 [ 318.346150] ? perf_trace_lock+0x900/0x900 [ 318.350413] should_fail.cold.4+0xa/0x1a [ 318.354499] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 318.359624] ? __writeback_single_inode+0x3b2/0x15c0 [ 318.364750] ? perf_trace_lock_acquire+0xe3/0x980 [ 318.369627] ? perf_trace_lock+0x900/0x900 [ 318.373889] ? lock_acquire+0x1dc/0x520 [ 318.377884] ? graph_lock+0x170/0x170 [ 318.381699] ? graph_lock+0x170/0x170 [ 318.385514] ? wb_io_lists_depopulated+0x12b/0x370 [ 318.390469] ? wb_split_bdi_pages.isra.27+0x190/0x190 [ 318.395688] ? reacquire_held_locks+0xbc/0x3e0 [ 318.400296] ? __lock_is_held+0xb5/0x140 [ 318.404387] ? find_held_lock+0x36/0x1c0 [ 318.408478] __should_failslab+0x124/0x180 [ 318.412736] should_failslab+0x9/0x14 [ 318.416585] kmem_cache_alloc+0x47/0x760 [ 318.420669] ? rcu_note_context_switch+0x710/0x710 [ 318.425627] ? mempool_free+0x370/0x370 [ 318.429625] mempool_alloc_slab+0x44/0x60 [ 318.433802] mempool_alloc+0x18b/0x490 [ 318.437722] ? remove_element.isra.4+0x1c0/0x1c0 [ 318.442512] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.448078] ? file_check_and_advance_wb_err+0x152/0x5d0 [ 318.453551] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 318.459895] bio_alloc_bioset+0x3a1/0x7f0 [ 318.464068] ? up_write+0x72/0x210 [ 318.467620] ? bvec_alloc+0x2d0/0x2d0 [ 318.471419] ? file_write_and_wait_range+0x72/0x100 [ 318.476431] blkdev_issue_flush+0xf3/0x320 [ 318.480669] generic_file_fsync+0xef/0x120 [ 318.484896] fat_file_fsync+0x77/0x180 [ 318.488772] ? fat_free_clusters.cold.14+0x30/0x30 [ 318.493691] vfs_fsync_range+0x140/0x220 [ 318.497753] generic_file_write_iter+0x5f1/0x850 [ 318.502503] ? __generic_file_write_iter+0x630/0x630 [ 318.507623] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 318.513164] ? iov_iter_init+0xc9/0x1f0 [ 318.517130] __vfs_write+0x64d/0x960 [ 318.520853] ? kernel_read+0x120/0x120 [ 318.524731] ? __lock_is_held+0xb5/0x140 [ 318.528808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.534347] ? __sb_start_write+0x17f/0x300 [ 318.538666] vfs_write+0x1f8/0x560 [ 318.542209] ksys_write+0xf9/0x250 [ 318.545745] ? __ia32_sys_read+0xb0/0xb0 [ 318.549804] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 318.554635] __x64_sys_write+0x73/0xb0 [ 318.558524] do_syscall_64+0x1b1/0x800 [ 318.562403] ? syscall_return_slowpath+0x5c0/0x5c0 [ 318.567318] ? syscall_return_slowpath+0x30f/0x5c0 [ 318.572247] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 318.577602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.582460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.587636] RIP: 0033:0x455a09 [ 318.590808] RSP: 002b:00007fa76e399c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.598524] RAX: ffffffffffffffda RBX: 00007fa76e39a6d4 RCX: 0000000000455a09 [ 318.605780] RDX: 000000000000003a RSI: 0000000020000200 RDI: 0000000000000014 [ 318.613044] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 318.620325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 318.627584] R13: 0000000000000790 R14: 00000000006ff620 R15: 0000000000000007 [ 318.690179] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)='\x00', 0x1) sendto$inet(r0, &(0x7f00000007c0), 0x0, 0x20000000, &(0x7f00000008c0)={0x2, 0x4e23}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@upd={0xe8, 0x12, 0x100, 0x70bd2d, 0x25dfdbff, {{'ghash\x00'}, [], [], 0x400, 0x2400}, [{0x8, 0x1, 0x200}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x10) 2018/05/19 11:19:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c"}, {&(0x7f0000000000)="c34a64d1d03cd7d2"}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4"}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d"}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478"}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf"}], 0x0, &(0x7f0000000800)=[@cred={0x0, 0x1, 0x2}, @rights={0x0, 0x1, 0x1}, @cred={0x0, 0x1, 0x2}], 0x0, 0x1}], 0x492492492492518, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002b00)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002ac0)={0xffffffff}, 0x106}}, 0x20) write$rdma_cm(r0, &(0x7f0000000280)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x4000) write$rdma_cm(r0, &(0x7f0000000000)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000100)}}, 0x10) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, {0x8, 0x9, 0xfffffffffffffffe, 0x77, 0x7f, 0x200}, 0x8}, 0xa) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 2018/05/19 11:19:25 executing program 4: r0 = socket$inet(0x2, 0x7, 0x83) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="a42bd8906fa3fa744572c7e4b04913914491137b834676c4ae048ff65a48a8876f12684bf0792d7ffcf6b27878b93d3bb414ff8c2f8c77d7f5f3fe46684f5e68a2d36ca42a1237d11c9d768bef0827328d5e8360bf1dff6311dbca", 0x5b}, {&(0x7f0000000280)="2d499cb5fb9dd6085d99ebb27d54d9d5a8b2d6250094bf670fbec8fe2c2298708c41497c048c2e02f1275ed685d6b844d5807c545fa0b1bc5a0adbb1aff1b7653b290c83bf6cca7f4ca4a8b97bad59e239e4b6b0f9140127b0a91f69d22ed665cc7c01c9724506f96ad1e5554e9545e158a2af81a9a682c7aa6d1570b68eb5d5877ab39adccb4a92f2f16c9cda9f5086a2439f71f58e034a85e09adc3bb4a9bd41c4d0b64ae4249003f9750f3927e0cd01b4c512b39b0b7737d8b7fb08ecef9910ba4bd97148cb3977eb115245d375091fb7723fdc740f2a3f21580c7d89a8ec37", 0xe1}, {&(0x7f0000000380)="f500ff5105e7c32c620a2db324119dba27ac5aeba9e91b5716af5a368f235d69f924fe60", 0x24}, {&(0x7f00000003c0)="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", 0xfd}], 0x4, &(0x7f0000000180)=ANY=[@ANYPTR64], 0x8, 0xfffffffffffffffe}}], 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x800) recvfrom$inet6(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x0, &(0x7f0000001500)={0xa, 0x4e22, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x10b0}, 0x1c) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/05/19 11:19:25 executing program 2: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)='\x00', 0x1, 0xfffffffffffffffb) 2018/05/19 11:19:25 executing program 6: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) keyctl$revoke(0x3, r0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x9) 2018/05/19 11:19:25 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:25 executing program 5 (fault-call:5 fault-nth:8): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:25 executing program 6: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 2018/05/19 11:19:25 executing program 2: 2018/05/19 11:19:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880), 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:25 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') [ 319.174346] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 319.182076] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:19:26 executing program 6: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, r0) keyctl$revoke(0x3, r1) [ 319.368301] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:26 executing program 4: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f00003fd000)) prctl$intptr(0x18, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={&(0x7f0000000000)="ab7ddf2ff526085d5123d15cdfb1e2e4f8c9ca333aa5367ca19cf057fea13684b55f62f7284b98f7eb2251", &(0x7f0000000040)="308fde7469befa481860bec114"}}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000140)) 2018/05/19 11:19:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002b00)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002ac0)={0xffffffff}, 0x106}}, 0x20) write$rdma_cm(r0, &(0x7f0000000280)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x4000) write$rdma_cm(r0, &(0x7f0000000000)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000100)}}, 0x10) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, {0x8, 0x9, 0xfffffffffffffffe, 0x77, 0x7f, 0x200}, 0x8}, 0xa) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 2018/05/19 11:19:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880), 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:26 executing program 6: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 2018/05/19 11:19:26 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xc0, @time={0x0, 0x989680}, 0x7, {0x5, 0x6}, 0x200, 0x3, 0xfffffffffffffff8}) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) 2018/05/19 11:19:26 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000180)={0x4, 0x2, 0x6, 0xa98, 0x80000000, 0x1}) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000000480)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10020030de58c8e63415635cf4a3a85e100000000300840000000c000000"], 0x10}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) fcntl$setown(r0, 0x8, r2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10400, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000200)={0x7, 0x10001, 0x5b, 0x0, 0xabc1}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) 2018/05/19 11:19:26 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) 2018/05/19 11:19:27 executing program 4: write(0xffffffffffffffff, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000a0000060000", 0x24) 2018/05/19 11:19:27 executing program 6: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) r1 = msgget(0x0, 0x1) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000100)=""/69) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x58, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x6f5facb2}, @in={0x2, 0x4e23, @rand_addr=0x1f}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x11}, 0xa2}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x8201, 0xfffffffffffffffc, 0x8, r4}, 0x10) msgrcv(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fadb49000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf5d01e1cad5c0885b739266d66226ff53ba47ad82dcccd2ecbaffb7d950efcc867f99c59bf20f9d161e5974c7e5b3c053c52e3fd12f34702bac2aa8037fe2dfffcd52932a1a73a387dfda407e4c92b2effa837b949d36f1bb6e8ab62bd1eec7a443143561cb307fe98e869225edcb58f99e5c21184664407c9c3d9ade900f48b9e675e4790cb89b7b0291dc5e6890e85613d098652f4c992d59b27061d9de3afaa54185cf5d3c6cdf96e24a3d9e6e2bde1dd2bb2cac0c0ec71306158e8354c20cd11be6e3d76bd0452ff455ace6848c702aa628"], 0x1008, 0x0, 0x3000) 2018/05/19 11:19:27 executing program 2: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80040, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000100)={0x800000000000000, 0xf000, 0x0, 0xa, 0x1}) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x0, 0x31}) 2018/05/19 11:19:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='tunl0\x00') ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0xc018ae85, &(0x7f0000000100)) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xd323, 0x200) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) r7 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) sendmsg$unix(r3, &(0x7f0000000740)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000012c0)="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", 0x1000}], 0x1, &(0x7f00000006c0)=[@rights={0x30, 0x1, 0x1, [r2, r2, r2, r0, r0, r1, r2, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x70, 0x890}, 0x24000801) 2018/05/19 11:19:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880), 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 320.359886] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 320.367560] FAT-fs (loop5): Filesystem has been set read-only [ 320.505669] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:28 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1, 0x0) accept$packet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x14) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0xe0041) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x24000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) socket(0xe620ce0f1ea9398a, 0x8, 0xa048) write$evdev(r2, &(0x7f0000000140), 0xd0070000) 2018/05/19 11:19:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xfffffffb}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:28 executing program 4: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000040)='-\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r5 = gettid() kcmp(r4, r5, 0x0, r3, r3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045516, &(0x7f0000000000)) 2018/05/19 11:19:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c"}, {&(0x7f0000000000)="c34a64d1d03cd7d2"}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4"}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d"}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478"}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf"}], 0x0, &(0x7f0000000800)=[@cred={0x0, 0x1, 0x2}, @rights={0x0, 0x1, 0x1}, @cred={0x0, 0x1, 0x2}], 0x0, 0x1}], 0x492492492492518, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:28 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x202, 0x0) socketpair(0x5, 0x80000, 0x7f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x401, 0x7, 0x1000, 0xc9c5, 0x0, 0x8, 0x20, 0x8, 0xfffffffffffffffb, 0x3, 0x7f, 0x75f4, 0x100000001, 0x100, 0x800, 0x6, 0xfddb, 0x91, 0x7ff, 0x1, 0x5f7, 0x4, 0x6, 0x1, 0x9aa, 0x0, 0x9, 0x101, 0x81, 0xfffffffffffffff9, 0x8000, 0x3, 0x5, 0x25c, 0x4, 0xffff, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000080)}, 0x10400, 0xbcd2, 0x3, 0x0, 0x8, 0x6d64, 0x9}, r3, 0xe, r2, 0x2) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000180)) 2018/05/19 11:19:28 executing program 0: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f00000002c0)=0xfff, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)=""/177, &(0x7f0000000000)=0xb1) 2018/05/19 11:19:28 executing program 6: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) r0 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) keyctl$revoke(0x3, r0) 2018/05/19 11:19:28 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) 2018/05/19 11:19:28 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r1, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="58000000000000001401000008000000ff03000001000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="ff01000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000002477e475c01942ee00000000000000000000000000"], 0x58}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@multicast1=0xe0000001, @in6=@dev={0xfe, 0x80, [], 0xc}, 0x4e21, 0x101, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0xbf, r2, r3}, {0x6, 0xfe68, 0x58, 0x9, 0x6, 0x1, 0x1, 0x2}, {0x8, 0x9, 0x1, 0xae7f}, 0x5, 0x0, 0x0, 0x1, 0x2, 0x2}, {{@in6, 0x4d6}, 0xa, @in=@multicast2=0xe0000002, 0x3507, 0x0, 0x3, 0x100, 0x7206, 0x3, 0x80000000}}, 0xe8) 2018/05/19 11:19:28 executing program 0: socketpair(0x15, 0x1, 0x401, &(0x7f0000000000)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x48801, 0x0) ioctl$KDGKBMETA(r0, 0x7b9, &(0x7f0000000480)) 2018/05/19 11:19:28 executing program 2: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x100000001, 0x0) sendmmsg$alg(r0, &(0x7f0000004040)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="908b05bc2c1ee3471b269e0893fbc9f06e7866600c1747a173937a3b72c90f2b510eff52d64e9d4c63105086ea2af3208b5f21ffd1dca8f9de61337fbd5cbc79de883d443f76fc2a1c987c48f76759d84648dbeda2ab0d7c620a2262a0ef60b049e81708d2a1bcf5f70e05c370ef5f29b830befe0c7fca74ae41fdcc6ccde0f121fcf37d8a100078d50161ad45ea019e319c8d643048486700d762bd4e20ae8724bc3d2dcd83d6e2962a01be755014bce1a1910b", 0xb4}, {&(0x7f0000000100)}, {&(0x7f00000002c0)="c5b839fb78df4361a6e38f11b7f9802db6605fa738b695d11fc8c583e33b555db7e6aa5268326ce719a402c0edbd2ae63a3281feac67f0d2ae48e0658d8d368f6a90bcf74235cb5231208391489972de8c7d54b75fd23499c8beb7decc492ec74c9d4c110c0d3845f803353d09141e8de7e2e32de21c47ecef48e899738ca53f33ae36d990927d32d0c2a260be6d826e14d3cff576d7b4a8e7f4686783d2f24f9b054891f8b63f3093c05d764279901353a94e7910b66d20207a503bbe9154531ee8b80c10afa12063383c0a02", 0xcd}, {&(0x7f0000000140)="d20b009e7282a765da9ea60f9a25cb71107a703106c3bea90eb60df1eaa04cea06c76f367f8e65d9b40acc395ca3472eeb46db78edd5f6", 0x37}, {&(0x7f0000000180)="911fd8d2a6e3c27a135a4067d40bd3f0e823055a93498fa91d2197d0da56d52c9b0d27bc47dab70bc48051551d0e9199ea902f9df542c612f34cb04612606f5fe48ccb890c035aed7952f75aa43255cccf10ba9f9159b22da9e1c0e931e597526f451b569b3bd3ed", 0x68}, {&(0x7f00000003c0)="82c88c743d28fe64d130c78c904081dd42e073a900a6d9c1c01e1d", 0x1b}, {&(0x7f0000000400)="b88518c2af9afddb73f44160e8b993e8fe7eb13b55304f8c4534edb09585661a0d753a0ddc8cc1a7aea8fa21698d891a03a6cde4c14320e2bf2e1fcd278a5cddb8646e6ea33704cf2d8084380de6ab4916333f7f5ccf3f214463dceb4f1122f68da8f6b8286e1d96f05791fa9495aec84c11e9d1d66fef15229d22d40bfe603d25f94b9ee8dc34207b984f1ee451715771bc1126ac35b5fdf4eddba0906b93c165ab7fcfdcbadcf507c9287257049042b8", 0xb1}, {&(0x7f00000004c0)="3ea075cc95b65627bdfd20cb245d3cf50a2696261c50007597a98a7ed01fa6b24d6f39e794fbaf", 0x27}], 0x8, &(0x7f0000000580)=[@assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x400}], 0x30, 0x4010}, {0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000005c0)="8bd4cf6debfaf95b56cc0124bfedf173cb7302dbef48637bafefb9264dac54401b48421004e4664f0d9377d2a8812c71747bd3689b2764e95404ebcc7ddeb42e67abc24b1ae9c506a0b2de372a7dab1702e689fac6de8a0cd10717b941b32f9b11669a48fe35b436a0ef22e5f67b691a5ee90335f63384e70838cc436e2203729193f188b0dfad4d2ab0b4073d0d26c11cf66063e28ddc10", 0x98}, {&(0x7f0000000680)="ee5e929d52b45c0eb257af987e5583b4d4592034894363715a84a8549b8f9b9bfd76c65cdda33bd5dc85929b64eaab14bb1312a3ee970a2718a7cc054e81a0828f8461444eb66a39b4e2e01c5a8fae70d8473e8d4df8e479e61a227b0dd87c1eb5bab4bb29bca58a24d8634f75f352c342f110d949fc5d0c26248bf98c9245e7fc9e1901b40366172349ed4fb7c35f3bbb4332500742b96d3f9db4373a", 0x9d}, {&(0x7f0000000740)="1d4e17640234591a563cbc9981bfb7589a1f4267b8b2a152822e8ad78e27ed", 0x1f}, {&(0x7f0000000780)="840effb6", 0x4}, {&(0x7f00000007c0)="98df296a6d6fde31e592c736d7f165e8212a294ae2fc11272ae14f0b9f896367991025586546c0c91bf6e962c9d53c11e7cca1cd1471865cf525d11e95c6282968e9da22a6026f9b3e566a15e8ee7b0a19cb7d558eb367abd508ede240cc7e9f77a2f0b653e875dff378864d87e9536a4b328e05f4af3254423d0f4fa8c06c3ba8f3f9ef16bb1b711ec2569b82c18274b0b6d79dbf153dd628fe8ebc99afe5beb4f5a0934fd77802c558bf4625477c8e67245900933f457cbc7b3599f5a01c01de844ac79a588f43e86da4f9bfe52611405b214ae0136c08c3d4d365ceb02126e86cbbafd69bcb35e27e3ebfb177899de723df365b603875d28d621ed458513e7621f01985d0ea7eba062943fbf029d95e9bbb18b2d1eb8e219fb915e22b318031643a2e2f494c1ebba2b4f78ccbfad8e26c78c080c92f15cd07c267407d03a3bca917bcb7da78260fd45dfc9b40de2a10f2e3a100310f40a3560facc9188a8c71b4137c8b43e9089af8eee35ea9e6dd887ad8e6ead7d07e18bfbcf46f8a5be5fe3cba3ee4a2fc5c05f7454c5ccf8288310957dc7cf3cb520e0c21e938d576de82620e86353d6ac08afd58aff122f3482f0f7949e7ea67149dc3ce85a202ebb86444aaec9cf82af090778e483de3372629f62c16cde9d930c578f1053e0d9b904af53e02663aa31b789c1c11f21ba905a0ce86dd2be47348549838f27bda332e270bfc4386d1548b39157e73f71d54ae4a9d467c1212633065b6a44345aff490f082e4a8686a944ac9dde3eb65e96debee7101ef66697b6b3b09ba18f9c025152f1f291241408187afed49291ff31f5525ea34ef4bdec87e2b93e25cb3aa2c770a395c5011df63f4d36b8ce69d2e00acb79bfef5789c6b14e9e9038d6cc21080edadd33d2daaa1ec74022185c9ab9c43b1a00acfb06bfef282d715da1384f8ea710b2bfedfeb8e0aa8792109d8b4e08fa9ffb89c3a9de840c977e0987b6fc16beb20c5cd315cca5a8d2310556ef56d37eaf2499e9bce4d6d2ea0c73709a91ee01a22e542d2e85af8f31c1373c7c1814c462292fd17a310cb190659b6c1d7d95dfb4161d6b4a3e639a013de5e3af7699a53810c9083cb4d10066faf7413131f32339464e0d4a2554c9d09b064286bc134ec12ccc4bcd472571f9c42b19c87105658a920d88a329f5ee979c96b8f835e0c380e55857379b55415120b1d81703196771603bac0355c828455d7dd4ddd838a12c5510f22fc6d85948c806e12cfae3110f1ca2d3ec4ba26b69de19058679af3ec666d54065cbf6ff336696202cd4f58ecc85cc1a929920dc7dfd3b11af1af08dd55ac2c30ee2c3261b825eb2162405243bc7b43e023a58239b75b3e42624d49e5c307afa501dae31a49187fe0cadb6c74a5312e40982b536473ec24068b314fea71ff62359e3a680414054c483e9f04af55a8c73b82649ac971b64ad8b51f096c748a49c01bb883fc6e99816126afcddefd6da888adbbde8895b7ec574b3a48295faa31caadd21ac48e0fef71c4fc0b2a2a1433fe5ff0eaf43cae34cc458db125de864bbcfe7af3f6226c4445c2b185183551db56c705ef699485023bd61f7b33be9216cc2465c23929981c8d416d740df76db979b64637627778e55880bb9ca212e03097ba2ff53071b6db517e7cc9131579af9488e36e5c3c6088562223754321b8a7a071a7bea1a93b865b4669b94239a6bd0c93e2009ded9ec319210ff7ed41b2f3df4c378f6c3c45c70053e23af7b900345a46ed4fe53bcee22b7c0d8c0c7e74e1993f8bad2a7a4dffa8ff76a35b166fde4dc4a8e3e2261ddd0029cd490367f2e26423c22e12a90a32ba99200b293241bba58b7645a70dc40877cf5d9ac0289c0976d61bea7e50ccc195762c546b0ea27d1a24a5c536d702d7b0f310432dbc282cd60e2b09f14df2700ba6a388f287b53befa2381a07d581a73caf5d050724c5d4a7a3d80b5e180899165a085210979f66b8217002cce98dc1884e765a87d9bb2a8eec0e66d3a428146d68d61345c2ea6b623619196ffadc465eaf8ab5d8699aec294adcf980675ae2f987b89a8b47db78ddfdf42c1378878863dfd17c7f9349c8b97a18778d1d5cb092c7521fe9b76ff1b89972ee2d4dcc9e2f9b47cfa0650d079019b6e1864e9ed1af7ad5fa5569401e0b2c4d528cfd2b68f1580853f907429fcc7af60a9b07113e40417b11057eabd2060aa6fbe66de74c9507e306ce31e2e6bd806e908ec08da4d2523bd13ff256dda2a129805d6a74d34dc7c616c66a70d81b558daada3c234b1550f8bf98d68364ae3ba9f47aa897ca252bb010fc7cd07557a8263589a056e2ceeb7d3c0275cd4d82638161a016055fe451a231b2bac969148b3b3491dbd9ff85845aa0849b0cba8a7ed702a282d9f55afa1afbf2cc0ea76add2a103cdb3e22081034a2ea2945f0b32e39468d066a95b81803eb591e5da79c42bf2d55ac9514cad154df73ed4dc37f00b17bee0503b4304e63f431cae806ace88fa360e3281e1cac655ae41a14a28f7488121ee6d7f4f3d2ef181b0d10e090b2eaeefbc78487af5a124a8d9fc44f33ae7a93f73aca2a604f386853b8728b1e3e9912382b35e7a07841dabfcf653c2dabd053cc5da2b821dfde4850b3d3f01c2d4e53faaa6a1dd2c36b212c3548be9cc4386fd1f7192474e399fb278ab9e887716abc9d85da51644637da423e387600cdeece424da9ceb22b863d649f7e43249d4dffb16dd79ad610a50d405438e48dba51720c93b38af396c7875dadc8e3c9b587c84f94f2e49cfd820c82a708fe49a3f731e5be837bd266153cc7affeec948c3a985e959f81f0c06b1383f88416c90d458b17e36d1d62402bdbb82f17dbaf8d66851f171a701d0761a9b71c364b3dc501fe9d3d2987cda7613dc37f063eec6c6e097a78c8d17cab6d7b5ff786eedd84defd678350e86781d792ded6687ec94c2508b154ea5df2b26f2220c2a92b25912dc66005c96483e747e23fcdd6f655e38c56a16a2e5133f7d933b190d2df1c6980db5126135b75da1764286fd5143993ced476e2365a65eff49f7ad35cc0f22e6d502a85d26f59474c050b2425f6f66e5d7c8ecff27b20edfdc52fbb7c21e54d1eaa6a254024629c276b78b12c53391b652bae30dfc8daeb565f5ee011761f72aa0270e75f18104d0d7f89521d5fa670d881d23ca151674fa218b194fd804f15eddbae64f584d392f21dce4d6199a10541d767f0e3f3a1bde1b077c5eaa25986900907f80d746a38025476c6c3a02867d53edadc5f329802494c670870ba6c26b2fb0fe50e80ea8097c699bd9f23309cb234a9fc971ababb604a7f2b99e77e7bc7140eb4091bab56a7a1ec08c95513b4358daa8923e610e8412cfd5470666bdef6ab3c795e2224230ff541c271629106587ca2d6aec2b68825a503edbe09c3b327c60e410d96a99e574757ed5e7bfe8c41a57b5f6d72e79a220cd5716153a1c7c229da3088135aff364d7903ab984e34a11955d44212e8cdbd53a1c070c917728a3622c85453ac74e77eea17c999e7892f48874b39c35e472750bec1c81d2c953e1bce7b0a537ded8c07b830d8221e9c159e4886fecb9578a033720631ef54f2774d6b1a7bd68a69443e5e3fa9b358e14fe09dfadda972ed4485fb7ec40d442099bafc5e573198ad3e11fb65f40446a7be1190af66fe4155931abf1ed368307627c917161afa5be597187a97064975e500e72b282426220dff5fbd2254071b15b3d2cad410f08d722505ab03925cd2d9e77024054adbcd919f6fecc7b04ee67003bffff2be15438d1a037b6b6b8755e8bcd81af99eff4918c0780a0018830d2c53a1ab45c4f0592e7d62d9ac67b6362e1d64940982bc0a3432e7dd4be2c802cf0ff33f6830b8ed0031e6c277d4a95de64601195922b942a013615147d8bcc854d959cd5aba920baa4d3374e3b7bf8c8a11cdebc1f62a407ab2bcc23451bd6f3d467fc488ab6167bce418e59e596a0ab91d267d4ae356c2e0c9a31f70b5c82602e4c0c7fd12eef67f6cced819dd6b7e1ca16bf69db0be803bc6f0a6f9e6441933826d75853339913473626720b7756d714d8ebafa0abcb73c960ede643960cf06ee08df389d8f5f2561762581c37c6ef0548eae2a06a8f2d7be8d0e1cbeff8385d4f6553286345b6458382c8beae1eb98a4adbc970d79d1a3d8992e1553ea031cfdca8d23144a55f1baad81d3562c3842bafd2bce2bd5d99b5b7ab64a12d3952cd95addf32ba7e01a2974aa4eae74ce5a4bb2c9ee2be74012a535d38080975d84ac554226f0cc589ae76b4fb0c2d64809fa55b83bcca12d2eb622a4d63659874fb3ecfe74d5512976c72cc06ecda0f211569c54069b942e251086d9556871dc95ef40efd19e8fcaa95fb3bbe9099d52554b6c0b01c170361ecf2a8fa0370a00bc3870e700f12dab0d427e217e1b04e02ed2caf47351c9b23267e56898100b67e5beb9a935d19425fc7bf44d871892421fe68c02bde20f7ca3aa5df4ea8e079c08ab50ec065c9f5631e8baf2032004a7419665a5bc31c78aef7f175700f31a581362bcc4d692685f68bc5231355fc9cf030328f3b14a3757555177d0d5da7241ec1484d23cbfb947ffa0077e49a7e5ac7c9dfd6028cef9397f8a153b5a9d95e4d21a4aa588036f755b1621a13f08d680195dc64ee1263ae51913f16c6834cf039baba59b7d2b25d0ab9090ce0c8d6d87a4b348f58130df855c5ea578a336cf6f0104960485bf8994600bd2fdadfec55723960899128be12fde0bb0fa93a5d1f22cae19c6c593cd1a8351440e4760c394128a2332de2b32a75eca05b2733c8b4127ae96539fd5b986974b4c84c2031bc4850c3c038c8b9375efa09a6403503e9526dfae8914abd98fe9718276d2560c243e74a2ee9cc4dddb1d218eb4d9473a3829af0bebd9f6c3fcfd51e7380e75618ca6a21cb7ce924aa5f5769ab76b962ecfbe0be3619041a95cb8cb77f994524963957ac3afd9e4b190058caf233c492a6a8073f330e65d295e91b8b7a1263c882d8980d7e2b201d5124df44437f42a0cf37de4eae9632b7c2b9fc694c5c2946c12bd99d673c75204c12b2547dae1df229a61ff913b202811faafd008f42618052abbb3ce84306cff9c3995df537e455c490379d92f89dee47c17495a61bd6aeedbec8267549267c0fbd1a6f51a45a1e71348ff8898072f55a86f8a8a747f142e9d98c3039def3303de961d24a2ec33dfb0b4c6fb0ea21b553dd4a25b846ea0a294e093ebaf4b84e1f75f140123addc57c95daf5ba3dfc96feb1d9b430dd0dd27680bf4a37f3ca2a8f563e3b97f491add464b5f4b528863b84720eac422cffdd84db54a0da043a0be4d0715c061879bee520fe667ca0c783be278c07fb24341f06c00e618af62aee719dda90fb79440949c904544ad741a603dcfa0267a96bdfa0ff7a6d79c349a83d17c17976aa035d65927426b12328099036232a49181c68b9e385f60b9091a619184c50c6391bbfcd844055856889fe25ab25b361e5c54c575a7c9c7bb55c3c4fd8f09b5c2958d6d8987911de480b8376b8b617502a7b2298cc690f409c8e7b5b10714022eab4f832fa22ec8885c79c864e9681bd2a1b28b0346bd5f0d9a834b3448859dee294092ce43fa59b143189f6548a422498471716a5481e139cf1171ceb5234eb6495b1f4e17a1484354f5284041b0687c8264df63528763d8dd1cd8a7e7bb4fc7720d92ff2d64d4224c1c2fa7be898b93b894c02dc6b1d5038eea5358040774", 0x1000}, {&(0x7f00000017c0)="7d7a1a1b0cd1f1a625aae56ac4e11e2df5cd3a3eacfc1340bfc056b46a589110c58cb81bda0868ddddf73b9df3102bbcea986cd3ebf244f7e4109f901155e0dbac310c112b8f46163378f3493b6632a01ae986581be80b585db2304ff7922b496848435991b32be7d1ef63c424cf7857029f2b235d05e53785796391d33c56e1ca4d8a8c57cb1532dae1648210082946b0793ee370b2f8f55c1502f9c8bc9917fdfc8e7c20ece9ec7eff637da3e65a59171c7f50aa4eec180414700c3ebe67ea6c84b969dc19e86924bae0594097ceca77f9b8121a3f377758d4be5d655355b0621494294e9505f43359ac4a423fbe6815a2729218141fa62e", 0xf9}, {&(0x7f00000018c0)="bbc0ad396f0f5e1ddc2155b5cdfed571f44715443621e6850ebf8b0d944f1b0ec924442a390b3c189989fe8576f806e040798c278ee8134202297b4b089b2afe515e5598c7ab3ca7523ab5febd33c7895f0fc39922cc1832f22adbf1f4fd4c559c59f3fa7235b679cb9dc95c26b99b81d0757128e843783fea312de7c66aa36c7b5b8e6fad2d5bc66d8f703865d0", 0x8e}, {&(0x7f0000001980)="953664be1d6d6885e9ec10d52f936b66298e749ae44389be443cc73b97d7b6c85d30e719eedd73a35844db41adb17b8f6c32667ce7c6a1a3116e8fcfa45070a0d28141661a14f84a495de6e2cf1ed5c2f55c6f421d4ea79be6daa29bb03fbcbe277837f4073b665b51895b2f883f67a231e73169fefae4e56cecc9573846945d32de0931aae179b39fbe5b24c73ecc8b9442fe5ea05670fe275602df03bc8f5cbe31a0c68e196e8e9ffc62dca14ea0ed9c9040ff3520e840a6d74bc8683843e988ddf10e2d88d80359283e43e8118bcc91d467bd179ce6343ec31c", 0xdb}, {&(0x7f0000001a80)="9fe3b71a7d7820f03f6ff426c8b10a1be60f50eb290781", 0x17}], 0x9, &(0x7f0000001b80)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xe0, 0x117, 0x2, 0xc5, "bda641608b874a5a45992fb15fd4681d767019edeb173f6a4f797ab079332708a787b5a290c014b4cdc9e2da2c471f984a0706bfef5b30813620cd340c6fc2139d1440b33baabd7e87f1c5011653c6541eb401730fd72231689e85a2157318bcb18358d2fe85b5f3978d8b0b99d298f7c641b587e4124ff203cae27b3d7348ae88a3e44618418a801b793590bbd9e25b4cb6a09cf145f49d2f9ae38fb8a7c448811f25cc2c10c8d6990e8218668e7937d77becc212865129a3ad97dc3502560ffbfbea30db"}, @assoc={0x18, 0x117, 0x4, 0x800}, @assoc={0x18, 0x117, 0x4, 0x400}, @op={0x18, 0x117, 0x3, 0x1}], 0x140, 0x1}, {0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="1a8e512ad8ca4bee3aa8a04a2bf55b418ea06f949d8ad39704ac65f5f0edb57986b72b1da8382157a351cce9757c51002b9a855ad5942bf79d9ebe6d73a373ad2b47086a6142633d9ff7e5d2106195ba4fe33a69d18e6542a9cffb92f18148209f584779f144fffa9db47a3d8d00aebad4f2a094bb32e7f8b025f38029dbfcb4a3f6b7ce7a41b94328799772bb0ba79bf42d55f3bc06", 0x96}, {&(0x7f0000002d80)="e6744fb7d2972949c51a11d65746bd8eb9aba94e24867c63476a1fff3214867f43e4c9ba24bab61f97c5e146714233a74af0342fd7b4be7b8e825c7db40143c57bcbf0fc82b5a04e82696db09770bb16236e5e74e2a4fea627591add2010cbd79f85549e3e8b7926ddca054d3f7ff5647e187fe01380cad09b01801b0a1f4140167a085abc6134e590c2cf757ca10a96355e2f1c3e85a85b6ef7a740d17dfcd238bf0247e3b1459ced89d6ec965f4c86f89e5a2646276dab8dae074827efdb87983d5bb8", 0xc4}, {&(0x7f0000002e80)="afd93c82cc1345106e2f82da33070d4b2e64a10798a5f93fdf1de44731ac6d9d207d8127f4267004400e3d807843349ccc36d276780f36671af619148754253cff6b3aa7bbbf6b905729e01fd94f38cb01e709baec898b4c58d2a10998a059f4e2d8731cc28d7c7fb1467002f9a186da08cbfc05218a91768b5ebc3c08cd6b3798f985397bcd762769ae52a5987a7fd2d1b1c5fd49b38c4619b5cde711b6e20a2559d59e01865d7311", 0xa9}, {&(0x7f0000002f40)="cbd3974d91814f4f32739df28fd30a76fb7e02ecabbd776771b62340f5d888d73f57b0b40ca64bea56bd681e1c5098bc52576bed825685af69e477eacc8771442e7aa1773fb3", 0x46}, {&(0x7f0000002fc0)="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", 0x1000}], 0x6, 0x0, 0x0, 0x4}], 0x3, 0x890) [ 321.575601] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 321.583214] FAT-fs (loop5): Filesystem has been set read-only [ 321.605659] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 321.618348] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 321.626196] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x2000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:28 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xfffffffb}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:28 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @rand_addr, 0x0, 0x0, 'lblcr\x00'}, 0x2c) [ 321.675867] atomic_op 0000000082233020 conn xmit_atomic (null) [ 321.769297] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 321.983276] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 321.990896] FAT-fs (loop5): Filesystem has been set read-only [ 322.022203] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 322.042355] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1041) [ 322.042439] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 322.050610] FAT-fs (loop6): Filesystem has been set read-only [ 322.063683] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 322.123424] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 322.157204] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:29 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) 2018/05/19 11:19:29 executing program 4: r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) write(r0, &(0x7f00000002c0)="0601b466b0af72831d756ee9e1", 0xd) sendfile(r0, r0, &(0x7f0000001000), 0x10002) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x50002, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200), 0x0) 2018/05/19 11:19:29 executing program 0: r0 = socket(0x10, 0x20000000802, 0x0) write(r0, &(0x7f0000ea8000)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x10000) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000001180)={0x4ae0000, 0x8001, 0x8, 0x5b, &(0x7f0000000040)=""/91, 0x1000, &(0x7f00000000c0)=""/4096, 0x93, &(0x7f00000010c0)=""/147}) 2018/05/19 11:19:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000001400)={0x7fff, 0x8, 0x3, 0x0, 0x0}, &(0x7f0000001440)=0xfffffffffffffe58) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001480)={0x0, 0x6, 0x30, 0x2, 0xfffffffffffeffff}, &(0x7f00000014c0)=0x18) sendmsg$inet_sctp(r0, &(0x7f00000015c0)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x669, @empty, 0x100000000}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000100)="d8ec8c70230e092a115de580b598717d21b8f398fea740fe338fca3a41392ba96a486c325f77ac1f76239fdd", 0x2c}, {&(0x7f0000000140)="9234aa5bc2a48826a6e2efa346ec66bbdac3acc69b2ad8be793421e45e65d074b82b885788ee2e2f2e5b0f42c90f175b3a85bd0f05", 0x35}, {&(0x7f0000000180)="47313a547cc7", 0x6}, {&(0x7f00000001c0)="f9255a7a6512630c5971b08daa4c0a8c630f27eb48fae4f0610a0d6ab60feb508cb68609f03e50b6ce452223c320d5cd1d4ffcb931ee9b2d21a4c0eeb803d7935ca0fecb34d169cae5ae18c88614262290ca6b0ed8a67610fd33193896f7ef028bcd46b24d47fda014886f394d7c534651ad35879966c9b80bb3073d0b539a9a405ed66815584cb3628f9edbc1626c5d05a127515dae3fc705da98cb924b8f1acf902c5bf3a77b9334d7f77064901b6933ca4be95295e7c9dcff09e467a52e9636ddd3167afba3e8a45d520c2767eed4f1284dc8e337baa7db135d9d8a08093d0e982ca75b54198814fd", 0xea}, {&(0x7f00000002c0)="6f5a3fc8a5fb6aadcceb4103f0fbe688f9b528fe0dc54605dd406608114fbdf20b60be77f27fbf4ea1c507d44ad5e1e5dcf14363699b5e3ba6777d8b683c5bc3920a38f5ded3983d4dce92832a5166c6260ab61205df862b44b201c2662d93c747dc886b68e2169d1dda552afa46b11fbd07be6247bec62522252db7b55d5c76ec34a727b81271b070d3076fafadb50e053c20a65e050759093f0ccdc44f2393858f5a085c832f60772e567ac1ac50a0469625329ea3a736a944", 0xba}, {&(0x7f0000000380)="8591244ad4958d2e53ed32b2eeddb6578b20538dfbfc6c3da8d953676186c56a0f97315fb67d2e0285afb80f676cf42b555258b43297d4b29716484755316a32eb15ba48ad29dc6cbe3a701833cc7827923f0eef9fef10d73a231c23a165eae844ee2f765233f76129b7308e720fa0ddb431c6e191e894f40a27291b10454e2e7a2cc4842bc958ff3d2c4725d7d1503b049c5e4021f7daadad095befc63bfcc1b18661a8903522114d8a9c9531b5b948f3a0810f8fe1c68291c35d7cb081e7ae9babd35b6bc79421716faa0e2006168ec1c2c81385d88534dd3e1c61efc18ad6b4d1d0792edb093df55abf3847a56d2d71853ddc975d23b6a85a4e6331e1f83b28d974d6b56cb8b5fd09b180dc1f548d889ec9ba42c49819fc999f7ff9ec7ecbdffa59a00a4e43bdeade60eccd2a3ed01d16d53db351176e605b17ce67b42056bbf42e19179ef4d954bf67a5f695f8700d83e14c933c44acfdea9564c0af60acff89af7380bb5944a1850c6fb9882ec7e84ed3971b80ca2d3ffccdab8a15f7443b073ded4880bc851c58f00d53cbed2941d8ca4e8c350666976ad4a37af05a64399657ce9b60bf7fa918b727db083fecbd980e5a5eb8342fd7939079d697bdcb98b0928d704e59b9025111fe42b85531837c91b04daf2bfdbcd0ab50859d927ecb1d855a1dbecd6307767c692f8144b5271a98f783e4ee0e1d7c8603eb4867d35a054d84b81fc88c98bff86c3e860bf381daf831de73ce0074c32fd3a50ad70aeae414b6efeaeb502c6d4a0f53005b2d7894085fdd2af5a2c3f2376a2cdaf8032041aa5acc0d5973f290bb8ffdbe2ee1030b9574af3cd0927cfcf610e985ea7d0131ceb6e2216b97992f9c84427706ebcd5217ab70ecf9021ef5ec6ef57ef33d5e1aad8a14498250dcf70c35187e414d9793bb6f841d33549b64a0453ebdfed83ffc20787869a2c5a10883086ff218eca44785f7bdab38f9a3c53c588cc6f083dbec0e608e551a5de707220289767572fc5e912475044264e02c6c214390e6d05e4701bd79a6af692a04f68222d6d9961b2a5ea751f86b7b6d636643a52c42f53c89c3282da5f63b99ba11b7b9a4905b73dc14dc657ea25a4ff53ba8ee2535a79f553564f97294406f1ed24fdabb9999ccb2f89a8e741ec98f48cf39d1ded610ff490e373be668ebfc822b7e0f990769885d1e41b7efc302ce41f4ed71f6f957ba77e24ae068f2ce9c2e7cd2303e12721ccbec117b7a3a673138af9670c042e6e627f322fab3aae4e07ee1ba98344f1154345761db2bb8e3abf4c674e938d5fd42c6add20e79f68714020a96db372e0b5c2048b3b5bc159fb0366c44b7cf9f177553bb06b217f0da7eb035f5e1bb8dd9d1ae842ae15982595ab4b3ad1881bbb1793a4cdaa432895ebcd039bfed30b928a829958ef3800c47d4ffa771737c3b122d72f8f90811781494248b424be418008e4ae421e061d5cecf2934e84f776f290c0669852abe38a4ab60f47d604457b82431058314257051111a6f58ed6c3a64b7520c16595cd826400cb2ffba1594fe2b9740911c29f58667828517c6776c616ed5e1d661807b5cc1c6ad33737dea7b31b3a9c1bdaf686691cb0122dd0849fd573081dbfb66cb67d57b480396cceeba7aef87d04cef556dd718e90d9491376f53fe8e236e359faa746784c3321719d809d73a5c0fdf0b73840a13f31cc5b5303d2ad72bd52053aecf4dbaaebbbeba6c6a8dff2bf2ab190ecf6a1e2b73d4f8ecf37f38987463a95f5166eacb2b5acf524435aad1f7d78625c35d16787deb09f824c9a10ef79546ad4f580716638b69df5ab369b5a5400a1bdad07d18083c68f4ec9dab7276fbbebcd6f12cbd5ec5e96c889d2adf896c2218d11882380e4714b60025ee7f29c38e9a55079c912ec603568e15f95e0ec5d74589a64f572bfd0bd087eec06d3712658f40793a3fbc57d2df3e83b1475504daca52fd6f9b58a92589d06617a33352efd784631bdcde76a115b050cb105019305bafa4b419e16ddced048826c2b7b5da52ef0297f8a79bfac0cc7140461332386dec6854f6b92b6ed450eb211bc501ada8a101dd43322f38d1fb293c52a60f8785e77fe32a6ffea4a1945daff9df9d8ffa8db124b760c3e64d204ae014c42d47555417dad30401571118f108b94aee5f9b27cdf4f1b0acf665196d7c56ca0d35f6e4bb9cbfe603a3df3316b91ccd951a89cb10c55ed3951539a270c78cccf9541871899e453e197663a7d478cf1113cbdfe80bd86f69c76fbde096b4e1ff360a629afc780f0e69d930c8860e016f86d96c6a14e89a3b44fd9a1b6b0fa1cf0ce034b9746189b62b81dee5a808dc068da8862a477bd0dfb06249bad5ea2bc8a3a400f2f3bb094818da5968bd66256c2840716762a46f2f756b0785451a42ecac3b42d5751a5e7013fd6995ae48a2c78f8ef934999bc873a3a69f87f9acdfca2d673e74a323ba4c7b2c90027d0537b972775d002f827af75db91f901b2efce8350a661276beb9489732394cae6e4f4a63d8bbbdd9db0ceb1ed960e8534e17985661e4a53ac110b765dc3390f09951771ebc05439e6a587da1700d6c3241acc8e6a3eaf4ea3b3933cc8108b9db093cf07659a67e5b55ca9f0d6cbb9852a570a798388e3cff83555a72c0938682a4ab7745e459bba113dc9b784833e3323cb3427aa2b43ce72cf1d6a338ea37c6de859c8dc9b626e532c04ea098097c1087924929a6799eac7f8917f467626fa95414ef573ef9078f85eacf4b6e696f611b75ea446ec917b6b9cf6d3a45f3f545b35155513b7cbc0fb4d6b642f23bed47f59ea6a259e1f7a335f472982d77069e9de032b905eba28f7f0230ee91dde0cd8e5551eacd2601b54863e7d34bbda8b6dde5b1c388fa69aa6f66544258ffab8cf5828182d1c42412cf94385af2294c0a6e141945fe02e5827ef440ef36d85dcc433f61ffa3a38427c9da562242046b1b2b214958e0319b19a19bfc1919a1539aefcd6938ccadbe592f59cbf61f85ada10bf05e0633605c30f0340251d8da0103d86fb9ac3cc9155760f9df3e577c499c4f09495c046dc402450086ecdddb5bff53ab7ff1a53a40c52b71dac5033fdef5e098a615098f85761ce85186b147f8238a544bf9bad8f6809f9353a97c37f07e638bfcc4b0d8de0051f5146bd4605e04e6825e3586f5f01d996b013721d8e3f524fc2c4f288428727415a5d4e2e74cf1ca6584d6b9f7de5e99c81b0b47fa9a46f3fb7e915b3489a62577d953dbd002c3f8ca92ed065d6f8408df7951acedadf32ebc11107b055ec0db4238dffa7923f8ea3941808372a6093cca6f6d7f38566204fcb1d85ca4d306a1c0370f41d21f9a17145753bff2a75ad2e9332f526550c2e9393141f4898699661a77a45608d9fcb8a346c0ebd89a1d41a799de8568cb9a55508d75b1806880b0de9a504cc3ae8b4917f0ed46f857003b79cc08f497b6653b4421d8972496958fca7f47809b9184658731dea4458e08cc765a121a38c99dcf019a3053757a095c3a0c9cdd5f6a2c31a5059e79edc00af127994c560c273d8a820f27ecacda23dee70b9a419de96b886e25d2c9c631a7fb8b090c365191a105b9bdc2d0c187644868148a74b65bb5bcdd40ed5a72eb427593b21f46d015b6144e1ccd69c26d245abe226c8d9935a391d55f6bf172a993b54ddb65560118c0d91df2476c2602250b6db8014a6006e5b755e77fff5e5a1b6a899482cde989fd7fc9d8df4d289c17c0262c8c2efdf246456bbb0205189c552e9e756acea3124710d1e844c2d05b19118297cfb7e2350ed9b64f311935a7315a0700dc54b8dfdaad926fd01ee211f99c3892e5aa4832a532a57ced85557dc5ef5ac19ecc2d3c9c74c48e643e00767e3ccec832ec1b3ba20c88aed6f968cddb033c79631827fcb9367b02090c3def060a78137627b20b7be80974b5622c710594b8ac0ed92093c9032e832e614e3c4d904d12bb542f751bf651b3779bc64226f89c1190c16434bf40b8a2f0c539733c378afe8780a5d5fb387383a2c25ae006905cf64344718f59a0bd2487ef1ae51da95b21bd4da3f2e3265df3ac3e4b849bee267800fbe4a6f9e036e642b48804809344dc6f52d0ad82c711b6de3dbdada5f73978d979dcf12003567b370763d97798667d6fe3f19bfd8052526cb769d998e481ef17070e45390b8b8fabd6ec3c49f2921741af7452f7ee04e52ec3c63ce4e3d068e54bfb0b1cdf63e671770befe3e066ff18a6a529f540bb84793dd91db826d6ad4e9bb7b590f29afe5f5761e97eb99d8dc527c7b245d126684902643e2b7fd781080ede1747bf09e10bd9f8c201d013ff2daa6ba4f850340d2774f05708c4ea5f2df41dcd441d908106ec16d09f600439eff02c91666446561bde85436564d1d65493a7e2607e479b704f9d7dbeee9bf637e12ddc17c7c590ed4e21c2e0a8b367580fde45f89ce320c36ec5afcd0402b0edb7579a63d7202341b59fcb7a13466323406886c1d0e3df20a1abe2076319a50672ae8083f662c16daab1f78fc474ccd471fcb1741a7399be92ba8ee4059d8339770ef3fc8ef20a8f0a3108a6d28615e42b3871d1c0c7e4335760ddfc0b0f5c96e33d4150879b66ec8a13611d8255d0cdbbb9ed39c728ff474998f32f3abea56430d0c68f4741cc1895fe934385b97ae17d07a160d740f7872b135dda6412bd2c5140834aec3cf7676157bdb15c91b1cc5ae70819bddf994b27eb6e94d78d1d4c482fc0dacdcb677a6fbaf1d3dbd9685116ede6c8e267506259cd8b4ede7847fe069f23ca6af2fdfd9dc1a311779baad05774f7e0464af4f13c8a6f522ebb6fbc8785fa3b4a505bbb8ab0eca76916937252ec16db1b7911e97a28dc030411cde3c81664be355485a27b81b272635a5dea78010820401ae9b1878fcea1eae6311a7764dfd8d10e20d80917567c0b7e9d7f1e1e07d4337534be180eb19ceaaff668b5d8bb38e377a621f10405d53583e8d673d45e44a702d26e50638bfa84ffc5b4bf56b66e8b1a95b7b02330d7b02ad5ad737509d11bd7eda305d24885d59cfb2a55d0fe9065bd6fba4d67f840abccf708275d5c63aed3ae6e73503b9e185ca9577283dd48d44158d72545a3956a84dbb904fec0b275cc2bbedc5838aa71689f8f19c932b7ee4ab052c697f90b255f8156dc1ee7e3d44cfed6f55fc2742477c8553cfc6d4715537268e29393343d8ee863da55c917cccb5648d25a4f4caba305839ee3537b217195ef6fbe8e40d4db66618bab76e206d0c4d540f840a00e5a913e175419cfe6d10837d34a707754513e41f8bc5d7cbcf1d28e9eb8e45a7fbb6b55d6b981dff457b7e95ee489c4e24ed236d03b9a8b1cc29847cdd40b69eedb8a5b85f45754a668707d1f48f2506e51d336b171cbd1e124d827713f08367434644dbb667298c42566f7d40d791b0cea812763c7a2bf5749f1c71a2b6403500863da4669aee3fe14bf3882d56ebdf3e82a64115fbda571d489a26f1874de530fe90c89ca8e07f441e4c1bd6f9bbd64eb4a1d97ba290af8e6d2db6624725e1de28bd2966068d320ccb35f2eb3111f05d643233c44162b26af9f995450276bc15bda31929a2f97e23346c502c42d2b2613f41b7084ab35e272d4eebdfb0d6cb81cda6d01af75e1d503cd6296e40ab83cb82ae9b30f355f1adac345c2429c9e32c30ec5c6f3f7a7cc17ad5c3e8a604e71122dbd41ed949d59064032123ae78dd6b0329a4c34fad0dfa26513c97f466fc34bc5025c8d", 0x1000}], 0x6, &(0x7f0000001500)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x5, 0x20e, 0x400, 0x3, 0x4, 0x98, 0x29, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast=0xffffffff}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0xf9, 0x20b, 0x100000001, 0x97, 0x7, 0x7, 0x4, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x90, 0x1}, 0x40854) keyctl$read(0x4, 0xfffffffffffffffd, &(0x7f0000000080)=""/4, 0x4) 2018/05/19 11:19:29 executing program 2: getgid() setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) r0 = msgget$private(0x0, 0x1c) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000180)={'veth0_to_bridge\x00', {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/245) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000000)="b1389910ff443d1f03752fec9c12", 0xe, 0xfffffffffffffffb) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x79, 0x800) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000280)={0xa, 0x3, 0x80000000}) r2 = semget$private(0x0, 0x0, 0xc4) semctl$GETVAL(r2, 0x3, 0xc, &(0x7f00000002c0)=""/222) 2018/05/19 11:19:29 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") keyctl$read(0x17, 0x0, &(0x7f00000001c0)=""/113, 0x71) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80, 0x0) 2018/05/19 11:19:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000000)="c34a64d1d03cd7d2", 0x8}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x5, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:29 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xffffff0f00000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)}, {&(0x7f0000000000)="c34a64d1d03cd7d2", 0x8}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x6, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa00, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x54, r2, 0x18, 0x70bd29, 0x25dfdbfb, {0x3}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3c}, @FOU_ATTR_TYPE={0x8, 0x4}, @FOU_ATTR_AF={0x8, 0x2}, @FOU_ATTR_AF={0x8, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4080) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/127, 0x7f}, {&(0x7f00000002c0)=""/196, 0xc4}], 0x2) 2018/05/19 11:19:29 executing program 6: r0 = memfd_create(&(0x7f00000000c0)="0020040000b082000000", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x400}, [{}]}, 0x58) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x5, 0x7]}, &(0x7f0000000040)=0x8) execveat(r0, &(0x7f0000000080)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 2018/05/19 11:19:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a122", 0x71}, {&(0x7f0000000000)="c34a64d1d03cd7d2", 0x8}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x6, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:29 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = memfd_create(&(0x7f00000000c0)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) fallocate(r1, 0x0, 0x0, 0x3ff) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={{0xd99, 0x81, 0x7, 0x8, 0x1, 0x7}, 0x65e}) tkill(r2, 0x1000000000016) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000)) 2018/05/19 11:19:29 executing program 2: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)="12", 0x1, 0xfffffffffffffffb) 2018/05/19 11:19:29 executing program 0: r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x2000) recvfrom$inet6(r1, &(0x7f0000000200)=""/122, 0x7a, 0x20, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x1000}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='limits\x00') read(r2, &(0x7f0000000040)=""/230, 0xe6) [ 322.740213] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 322.747841] FAT-fs (loop5): Filesystem has been set read-only [ 322.814190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 322.832201] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 322.841512] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:29 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000594000), 0x0) r2 = socket(0x13, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f3051c0008000100010423dcffdf00", 0x1f) [ 323.031515] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 323.045924] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/19 11:19:30 executing program 6: 2018/05/19 11:19:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f16", 0xaa}, {&(0x7f0000000000)="c34a64d1d03cd7d2", 0x8}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x6, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:30 executing program 2: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="0b083a893bc36989", 0x8, 0xfffffffffffffffb) 2018/05/19 11:19:30 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x4}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:30 executing program 4: 2018/05/19 11:19:30 executing program 0: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)="12", 0x1, 0xfffffffffffffffb) 2018/05/19 11:19:30 executing program 3: 2018/05/19 11:19:30 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') close(r0) 2018/05/19 11:19:30 executing program 4: 2018/05/19 11:19:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8", 0xc6}, {&(0x7f0000000000)="c34a64d1d03cd7d2", 0x8}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x6, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:30 executing program 6: 2018/05/19 11:19:30 executing program 2: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="9c", 0x149, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x9, 0x20000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000240)=0x7, 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) mq_getsetattr(r2, &(0x7f0000000040)={0xcc8b, 0x400, 0x5, 0x101000000000, 0x2, 0x4, 0x3, 0x100000000}, &(0x7f0000000080)) 2018/05/19 11:19:30 executing program 0: [ 324.086863] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 324.094512] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:19:30 executing program 4: 2018/05/19 11:19:30 executing program 3: [ 324.133624] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f", 0xd4}, {&(0x7f0000000000)="c34a64d1d03cd7d2", 0x8}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x6, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:31 executing program 0: [ 324.201776] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 324.232110] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 324.363310] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:31 executing program 6: 2018/05/19 11:19:31 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/168) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'ip_vti0\x00', {0x2, 0x4e22, @broadcast=0xffffffff}}) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000002c0)=@pic={0x1, 0x8, 0x5, 0x4010000000000000, 0x2, 0x3, 0xfff, 0x5, 0x80, 0x8, 0x7, 0x6, 0x8001, 0x7f, 0x494b78d7, 0x8}) 2018/05/19 11:19:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x23}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:31 executing program 3: 2018/05/19 11:19:31 executing program 4: 2018/05/19 11:19:31 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') close(r0) 2018/05/19 11:19:31 executing program 0: 2018/05/19 11:19:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9", 0xdb}, {&(0x7f0000000000)="c34a64d1d03cd7d2", 0x8}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x6, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:31 executing program 6: 2018/05/19 11:19:31 executing program 3: 2018/05/19 11:19:31 executing program 4: 2018/05/19 11:19:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c", 0xdf}, {&(0x7f0000000000)="c34a64d1d03cd7d2", 0x8}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x6, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:31 executing program 2: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="12", 0x0, 0xfffffffffffffffb) 2018/05/19 11:19:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x4, 0x2, &(0x7f0000000040)=0x3}) mlock2(&(0x7f000090d000/0x200000)=nil, 0x200000, 0x2000000) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x8, 0x8, 0x400, 0x7fffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x9d6, 0x2f34, 0x2, 0x8, 0xffff, 0x6, 0x5, 0x5, 0x0, 0x9, 0x2ab}, 0xb) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000002c0)={r1, 0x6, &(0x7f00000001c0)=[0x3e1f9e9b, 0x300000000000000, 0x5, 0x7, 0x3ff, 0x4], &(0x7f0000000200)=[0xbb3, 0xfffffffffffffffa, 0x5, 0x80000001], 0xa16618a1bbb01220, 0x4, 0x7f6, &(0x7f0000000240)=[0x6000000000000000, 0x4, 0xffffffff, 0x40], &(0x7f0000000280)=[0x5, 0x7f]}) [ 325.004059] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 325.011760] FAT-fs (loop5): Filesystem has been set read-only [ 325.030653] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 325.039410] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xf}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 325.049275] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c5461", 0xe1}, {&(0x7f0000000000)="c34a64d1d03cd7d2", 0x8}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x6, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:31 executing program 6: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f000000affc)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) io_setup(0x9, &(0x7f0000000040)=0x0) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000340)=@in6={0xa, 0x4e22, 0xffff, @mcast1={0xff, 0x1, [], 0x1}, 0x8fd}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="88e804101e4c93213f1c790b92c62a32", 0x10}, {&(0x7f00000003c0)="0794569adc554355ca0bba4cfa62d458ac038204fe29f9b5447dd86c3f610ea3fa3720cc077072cd5a68f911c1dfa6826487ed91b6fbc24e80d4", 0x3a}], 0x2, 0x0, 0x0, 0x40}, 0x8000) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000180)="31b326377f9c66cf4af29665af514c1c6ebe1902373dd7d9ff0411e8a4e6e7993df2e01baf7c1481539149430d46d6a744968748aa6632ffc6481f588616a5c4fc734b8ffeef04144a5614965cbde0363be67173e6e3b5466efb0f0b45b471499c372aff2cd49f95581cae855839d1de2b7c208013c5ca5a6cfe763106bd27cd33d6c3a122b37e4dcd6d5f37c916baaa70921260fb118a49fd4e4e0b59a9d7dd027f22a8b5a13cbce8eefccaf3995963ebc810b05d6a14cf67b838482534ecbdf944e01588bfb3c6ee0ddb615d7e2a35a9073ea079fc9319c9569510b6d1069d66f890739dcb913f1965359d4031", 0xee, 0x1, 0x0, 0x1, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f00000000c0)="925d8f0b9ee615658f4c662eacccafd828651ea91ff25107773ddb1b7eef84e881a10f1491e9c8d5233ef87f0e218c", 0x2f, 0x7, 0x0, 0x1, r0}]) write$fuse(r0, &(0x7f00000002c0)={0x30, 0x0, 0xa, @fuse_notify_retrieve_out={0x3, 0x8000, 0x7fff, 0xffff}}, 0x30) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x2, 0x400) poll(&(0x7f0000000000)=[{r0}, {r2}], 0x2, 0x0) 2018/05/19 11:19:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd2000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="9a050000006f00640f06660f38094d3d0f20e035000040000f22e00f01c9c4e211ae56ec2e0f9e65a081cb00000000f20fe6a8e7000000b8010000000f01c1", 0x3f}], 0x1, 0x2c, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x800, 0x40) [ 325.202338] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 325.464813] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 325.472662] FAT-fs (loop5): Filesystem has been set read-only [ 325.505077] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 325.541501] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 325.549288] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 325.608306] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)="bca517707300") ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)=0x799) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/140, 0x8c}], 0x10000000000000da) 2018/05/19 11:19:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000100)={0x2, 0x10000}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) fcntl$notify(r0, 0x402, 0x10) 2018/05/19 11:19:33 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400400, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f00000000c0)=0x8) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) 2018/05/19 11:19:33 executing program 6: r0 = socket(0x1e, 0x5, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x64, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20002, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1f) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) recvmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/128, 0x80}], 0x1, &(0x7f0000000740)=""/67, 0x43}, 0x0) 2018/05/19 11:19:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x5, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xfffffff4}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:33 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') close(r0) 2018/05/19 11:19:33 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000058f000/0x4000)=nil) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mremap(&(0x7f0000208000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) 2018/05/19 11:19:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x5, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:33 executing program 2: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) r0 = request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)='\'bdev)\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)='user\x00', r0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x6, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@remote, 0x0}, &(0x7f0000000400)=0x14) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', r2}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2002, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x29, 0x6, 0x1a, 0x670}) 2018/05/19 11:19:33 executing program 3: r0 = epoll_create(0x20) fcntl$notify(r0, 0x0, 0x80000009) unshare(0x400) 2018/05/19 11:19:33 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xf, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}}, &(0x7f00000000c0)=0xb0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0xfffffffffffff801, 0x4) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000100)=""/227) 2018/05/19 11:19:33 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20001, 0x0) accept4$inet6(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000002e80)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002e40)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r1, &(0x7f0000002ec0)=@listen={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$rdma_cm(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) pipe2(&(0x7f0000000040), 0x0) dup3(r0, r1, 0x0) [ 326.640927] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 326.648548] FAT-fs (loop5): Filesystem has been set read-only [ 326.661689] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 326.670691] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 326.678384] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 326.844301] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) listen(r0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$inet_int(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) 2018/05/19 11:19:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000101000)=ANY=[@ANYBLOB="cd390b081bf20180c200000086dd6042290f00383a0000000000000000000000ffff00000000ff0200000000000000000000000000010200907800000000609433df00002c00ff020000000000000000000000002001fe800000000000000000000000000000802a08000000006b"], 0x0) 2018/05/19 11:19:34 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x6) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) 2018/05/19 11:19:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3d}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:34 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, 0x0, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x6}}, 0xe8) syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [{[{0x9100, 0xa1, 0x3, 0x2}], {0x8100, 0xffffffff, 0x408, 0x4}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/19 11:19:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc", 0x16}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x5, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:34 executing program 0: socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x100) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x3, 0x9}) clock_gettime(0xffeffffffffffffb, &(0x7f0000009bc0)) 2018/05/19 11:19:34 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:34 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fcntl$setflags(r0, 0x2, 0x1) ppoll(&(0x7f0000000380)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/05/19 11:19:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) fcntl$setsig(r0, 0xa, 0x12) fcntl$setstatus(r0, 0x4, 0x2000) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="7f"], 0x1) 2018/05/19 11:19:34 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f", 0x21}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x5, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:34 executing program 0: r0 = socket(0x50, 0x3, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xffffffff, 0x20000) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000019000104001a00000000000002200006ff00000000000000080001db07141400"], 0x24}, 0x1}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x103000) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 2018/05/19 11:19:34 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000000)="12", 0x1, 0xfffffffffffffffb) [ 327.923083] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 327.945843] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 327.953461] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:19:34 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'mcryptd(sha256_mb)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-fixed-time)\x00'}, 0x58) fdatasync(r0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d5d6b6c5820faeea54d60004002c5b534c", 0x11) 2018/05/19 11:19:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xf4ffffff00000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 327.979354] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 328.006382] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 328.015706] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 328.139622] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec7", 0x27}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x5, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:35 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x4000, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x200000000) 2018/05/19 11:19:35 executing program 2: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000040)="040000008ceaf1c35012", 0xfc31, 0xfffffffffffffffb) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) accept$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) [ 328.341670] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 328.349399] FAT-fs (loop5): Filesystem has been set read-only [ 328.372160] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 328.381989] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 328.391445] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 328.527305] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:35 executing program 4: r0 = socket(0x40000000015, 0x805, 0x0) sendto(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000001080)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) 2018/05/19 11:19:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ce", 0x2a}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x5, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:35 executing program 2: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) prctl$setname(0xf, &(0x7f0000000000)='\x00') r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x490100, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="820000001627bfbebdb98c9f94e497a71fe8479447fe7927a730bc113f4fd15b002b2162c448fae79d1ae36556eb2d920871780afd64786a0d44233c265676fa85c318d23b0b385b48926fe96e60a811d3792e368b068bcd15d2aab3a38d9b2219c09c8a042e5946acc4aa4a7dda822e72fabf5571907cc4428765ffce65768086c2"], &(0x7f0000000140)=0x8a) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x4e21, @rand_addr=0x83}, @in6={0xa, 0x4e24, 0x1ff, @local={0xfe, 0x80, [], 0xaa}, 0x3}]}, &(0x7f00000002c0)=0x10) finit_module(r0, &(0x7f0000000300)='user\x00', 0x2) 2018/05/19 11:19:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000f900ff020000000000000000000200000000000000001a0000001ec7ef5c44a1cca7bf06d4de71e1064fe24aa758760b24279f2045da6ccafc3aef5a984082b1cfdd83e705f5d701689574800000003b50a285bafaecf192d6932a000d876060e9d7f5e8c3db"]) 2018/05/19 11:19:35 executing program 3: mbind(&(0x7f0000ecb000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x5, 0x0) 2018/05/19 11:19:35 executing program 6: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) openat(r0, &(0x7f0000000000)='./bus\x00', 0x200, 0x2d) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000002000)}}], 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000040)) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) fanotify_init(0x2, 0x3) 2018/05/19 11:19:35 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xc7000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:35 executing program 2: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, 0xfffffffffffffffb) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r1, 0x320, 0x70bd2c, 0x25dfdbfb, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x68}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 2018/05/19 11:19:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000008e05000000000000d481a2d0000040a171eb03af13869868168ba1439efbdb4c42e8ed04659fd6ca33be93ad77a2cbcb11e4feaf8ed006e3ac7f064b2fe796ce7adf635f362a3146673a24cb3163b4852a5333a17fd1cf149c779d2172b28924165108e371c9fcf40d3428cf6539e7b9fd8018068fdc92b1d449e67c0ccfee8bfbe9db069db3834dc4c3f477aa8ee74bdeec7f636ab031d86c4bfa35fcff06d1c1de32c868e246f1621c5c256043d7890518d296e1a7b949b32724553962c311fe7dbdc45dfc07650be4c97e3ee000000000000000000000"], &(0x7f0000000200)="57504c00a4e10f98fcc55de1b8146f6a73ea1519815b00b9f7dd331c050bd9eb6bf9a4913f88a7d36222be4d2dfef78953bd70ecf4d172fc137d1f92cf019c9374c17276f9a2b38ff4d9ef49b2dd94928a56af064db56742a99ff1ed897b419f38dcabc5cecb345691313534637e60b76d6703c27d2a9154347ee9740a488f28c032f2a52ffeed5fcdfda6fc4b4d86f97ff0891d1259367e90747d42ce13951137006031dc83e1113c9875532ca615755669a2a14c7bc5c15d44be3127818361c26362cbf9160ac6a76b5496f6641415597084ba242cf1a46927508d747beb0751156431876973036358cd336921469e54bd5c34be843f23e07e8b32c7a2bb0c75e7c010c6753a4068b4a46b0bd2e9901b8b7bfdf282a3b58f314002d5a24bf03c4eb8c3", 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r1, 0x4) clock_adjtime(0x7, &(0x7f0000000340)={0x6, 0x7, 0x7, 0x35ea, 0x8, 0x9, 0x4, 0x8, 0x80000001, 0x8, 0xffffffff, 0xffffffffffffb601, 0x1, 0x82, 0x5, 0x0, 0x6, 0x6, 0xd173, 0x2, 0x6a9, 0x3, 0x1c0, 0x0, 0xd89, 0xffffffffffffffe1}) 2018/05/19 11:19:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6", 0x2b}, {&(0x7f0000000280)="b5f8d97175c13f9306771356c12bf1baa7fd976a2c61f0245aba91bd0ce93530617ab0f6a4076a15506ec05b5133b9d7283c76142d71bea642a250acb5f6c576a0556dede284190411a4d903c9bb0e11e105d5bb2fe0ded2c6f286856f66151829a615714c35b1274df5b44947f07778be23321d", 0x74}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x5, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:35 executing program 6: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) openat(r0, &(0x7f0000000000)='./bus\x00', 0x200, 0x2d) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000002000)}}], 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000040)) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) fanotify_init(0x2, 0x3) 2018/05/19 11:19:35 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) listen$netrom(r1, 0x3) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) connect(r0, &(0x7f0000001600)=@generic={0x0, "a50cc8c6961587d0e681056e4595bcc3f3178ebcf9104e95dc1fcc7a3b1cb9980428db7952fe62859b704d88aed4d03e071df5cd36eb694633e117f6653abdafded57a34176fb06fb9ffab602416e2b329502fe314771f730a36d7e80fe6680f708538fc10a2435e461b11a122430919c40b11e9a8bf48ede0f65031f665"}, 0x80) 2018/05/19 11:19:36 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x1d, 0x6, 0x66, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000400)='j', &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002800)={r0, &(0x7f0000001780)="19", &(0x7f0000002780)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000300)="0e", &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004ec0)={r0, &(0x7f0000004d40)='z', &(0x7f0000004e00)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000200), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000001640), &(0x7f0000001700)}, 0x20) socketpair$inet6(0xa, 0x5, 0xd83d, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bcsf0\x00', 0x8000}) socketpair(0x0, 0x6, 0x77, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000001c0)={0x1000, &(0x7f0000000440)=""/4096}) 2018/05/19 11:19:36 executing program 2: r0 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, r0) [ 329.222993] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 329.230920] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:19:36 executing program 3: unshare(0x2000400) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/05/19 11:19:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x4, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 329.264739] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 329.273386] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 329.283301] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 329.410104] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:36 executing program 2: r0 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, r0) 2018/05/19 11:19:36 executing program 6: fcntl$getown(0xffffffffffffff9c, 0x9) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)="6e7325ea6d748da2cdfa28c6aa1f24fd65742f6e82796673") readv(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2) ioctl$int_out(r1, 0x0, &(0x7f0000000000)) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000040)={0x2, 0xff, 0x4, 0x73a, 0x3, 0x3}) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000080)={0x64e8, 0x40, 0x32, 0x4}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x4, 0x1, 0x3, 0x5, 0xfff}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x9}}}, 0x84) 2018/05/19 11:19:36 executing program 0: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000180)=0x8) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x400, 0x8401) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x7157, 0x3, 0x505}, &(0x7f0000000200)=0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x4, 0x8, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/05/19 11:19:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x9, [0xffffffff, 0x4, 0x400, 0x7, 0x800, 0x0, 0x100, 0x9, 0x0]}, &(0x7f0000000080)=0x16) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x53) sendfile(r0, r1, &(0x7f0000000040), 0x8001) 2018/05/19 11:19:36 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:36 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x600}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x440000, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="c71f4beb59fc0a2ada461eb2fc37e6ce7356a189c5973a340bc6df873d94db2360b37f0993d071543572606e32b7d1c6c46ce17b3b6aa254200d050e44b20c03541197795443f63e3fd3262f7125c73a4e0c9bdd052eba5abdd414b83814", 0x5e}, {&(0x7f0000000300)="4bba0e07ebd79a935e5c5a427cbad14a1aaad18f327439c0e7bf2e00e635e1ce1b054a9f3dace03b0dbd9bc65a01b014a90a7ce94cae8af5bc31d05cd8b4b6f861f136db186cd38ee3d6bb935c8bdba1165ad0a687482dc21766cdfadd7661937457c34345c7142e24", 0x69}, {&(0x7f0000000380)="0862fa311edf20378615d8cdef26a8342c3f813152f7bff44eefd8ac3ea96962d6d51882fbfa8eb751effad626843505acf907e73b423b6baf6bddf44dd0d9815d71dbc43d8853d508094fe4b8ea84c1ff7584286c7569ad23229e1fe9afcdd0a77eaf9b256360523e6ce27109caee7ecff6e7d79d501d3ef7e2172f570cec312aacf3b86d4ecd07933a7fdfc6f4907fe085393ca96383ff303f28db8defca1b508ca9d6c9931baabbbffa49278ca22a151916051df714", 0xb7}, {&(0x7f0000000440)="470202c9d6d3f6779df70f9ea058e35229bdc25440dd52ccfdf827fbab036267900da7312f5fba371860d464b00639427db8064a2c781e85ef5b06de353931a7", 0x40}], 0x4, &(0x7f00000004c0)=[{0xc0, 0x11f, 0x85c, "f9f939273d21e4887070737b0119dcc9edbe5a0ed1658ad88fc2767ac6b9c9a0d80d0b7fdf116f063efe3e6ab14260a50f0ca7d0c64fc74370f06f808ffcbbf57e7c8c18516e9d2aee6123a02765b7033db0e81bbde47c09e4cc52527eb9b29954ef5bb015702a2396463e24fad62e263dddd582f45d5190ec27719d8ea660b851808c9ab8609045aaba0c12437c186b08af00040dc5c8795ce653cf5258e467cd377c13253d8c314f7e9aed105ccc"}, {0xf0, 0x0, 0x1113, "e13b29aafa64af37d137961ffc0127660cc3f2c532750846e068954b6764054418f24c2bc91f1fbe0d241a184c64a786bb9a3fc1a5208907c8641bd238132c1ffe4c08b52651aed3baf1bfeb18fc675c19435e6cc3a304b51089cf6e7e2da143d7dacd93c14eb090e9ead25e667298310d2245a441ee67dc25675a9cc856640b648fb9c13983646a140c16db72956d2789f1f7ec145e9cc49e67466a1a150a58cc66e6e8553470dc6aadbd29478e35b42953d235944e7e1201046b01491b7b43d1f3de166280194031603b46debd00f3faff8225f5dad362a2c2af74"}, {0xe8, 0x119, 0x8, "7d18ae272f64e7630bb42477d007808d3197cf529120fe3a196d19bd0644a3872de6c8cf7357da41630f08068e2ee2174931b7ca0cb775e5f091a74692fd2e6f95f80877209070d8572f2195a59c22f55d3bc97acd1f6440d907d19bd4b045de9c358e470f661e9c0fe722979c431853c7a99226e3af823f58dab928173b85686ea6661da197779fae8d5b7bf03aa2f77255e9d367a3d9a992eab7b6fd7d4b8377289983bddf8508b954cadd38e8ee6ac29e187d1ee8058633e8568445a1f1e54d85d9e582f0b7da8d910b71a82fd4a7af424242f4854ceb"}, {0x1010, 0x10e, 0x196d, "ff88852d853198ed230a50df8ff8a4ab364d3e90f0b5f500a182f225d140ed9ed521356533c9bc3df1c099d692a43849b3b65e32de29695c6fe8e2ac407cb4b644783d67f0eb2d81815cafdb2521044401b2009dae67478063a4e3ea175a516230f203d5235ffe06de709906cd3f99ec572c278179790d6a5a7270600607fe6ee3dbc6182e68be8d0e6775c6cef2f9bd4173ebc95ec1463e7c03fe7bcabc03ab8467bfe67d1adc6dfa70b587cfb2ecfedba5f2a54ec71c03c21631620eee7fef3e5019a551f6be236b0d7ef0fd9f90179934d95217e6ed0f3f199558093d090102ed8f0199e2b26494e9039663b5f16ee47cd169e53f3bf12357402c2c1452ecbe84ef161db3973699aa7df3c57e0dd3006493eabc3ef3d171877564eba6d41641a374c782e7a1095f3e46908d17aa07b4e07901cb1ab21272629d03844fce80d8e96b8786b05efeaaedfbe4b1ab7efed2c0bc0e5ace0290019a9ce13b6067e20202a6fb9d308d3c5a370786adc7ce4ef76ec0158e23a0d683f71ec1353127fdf80b509e5281fa9a9bf141c2f22606398850f4831e730b45bbf52f443925cc3b21507cf2588da35e87aebac9878132e99c150e06787b494c03f3782ca75f23c5560bc6874bebea1160fee0ac302d52bfc84521b479023b9cc0a19bc60064bd2c27815771ef5bfe40d6e9abbb3cb9bf485adca7b819d4681ad33b502037fa2c911c71d84d591fe2336478401493cfedfc7fa93ba6139bfe1badc14300b1a404168d542f7122a42d5e930f9ff382d4ac5a4929f9f90d23d98656e4182b137dcf859545ebebaafbef59c2b5a4dff80a9cb93ee1e4d97a7a5ba19f784c2055bc557e8657ed4240f2bc259b52792cdadf0c9e2f409296b092312ebf4d5cd8c69a66a4702dd4f4df4a6191971dceb0656e7bdbb3563d2ec7bcdd69837d9e813fa7dd4bb2c5b7e46f4cf58da26bd155663d6aceed21ee2b5a9f0d07036b99d223d8e462db9feb3165778128bc9cf9466c414c7af17e8d400158554484d15fe6b32f9c359a8e5d501c38904a0335676ab8f922ff9f124ab532359a7a44d46476783f6443b01ac325d2f641638b88c21fd323f908370f1726147623a54a95db4e0213be2c4c984f8d9cd2bf6a292cb141a041bc9e4b66a7465710b36c772967a9308cd6ae48d92b92dcbf886d705a7a7ce105ecb30266aed12ae6ed13b002e2d0f44bf75a3e2ef8028c12b1f44b1c6b119e639055e21a41aa8133c32eac10b665d2aff64e42a408147d529b906d05dde9f071a21a84e92ea00e915cd4f33521530033ef53c41edec4df26ba88577f61502dbda6af0b6ed411b371ddf6273f4c0cb6cd1f6cd1931d8b5ce7dc683e0af14799f227dbd19cb57955064d0420da5e2f78943e4485421cdfc1fbf3f136c593520dba6824858f117cc3287d4b40337aa08f8534434f1c04a242d6942129fe9decf7aa290059be203ca01c42455704b56a7ff6e95013fd966211fe8883a32a410c7c54d287716e4dc990d76e7f0bc4f2b1a65e6de31fa3d796a15551895623e5a362efd5318af091456744da5ba8c07ab1770d960825dab308f00c1a518cf11675a0e24776047ad40c9e8b2d5fb68f1d1db6a3791daa118b644eae91573d4c03383a7e0a40783c9e153857d9f2758631f167bff6375f70d4d99bfeea1f8a9814195e9ced2e34a9f7583f3ac75901a39fb70d823c2c07f9b0140470967849a16b27ecc26c4fac632acd1d8d169bb59ae3b7e100969808a59094c4b797e522ef8bc39ef36ff29bc370e49b9f65776ed447d3f9eb051aea3d7481c8b8b520b71188e0ddf95422653d475f4250dd988dc3d0c1c5db0d05a044f086b32145fee2514a22accb70dacea13e98bb67430c550311f53b188a6d15cebe6a01202272b4732fababc85d0df669580acc3cd0955eba995de3c733854b4e16643ba9a865e46be04dd57116ce183c01c87e13b165e7674019895f0e930f530870de5df6568b68d0bd5e7341c5835258e274011b0980a5f534c4112d5319a3ce7ad5c0c4494def0212f65373f99e0e41ffc089119b216c69096555f72c5c2cab846bf02e12766db53e1a9dd81e4649a43148c89f4389ff073ed6e210aef3b578a720b91e83a19384d428841a1b8237459f26218b8b1a43428bf78e46341079884f0a5628bcf6d02574919f9b1189bf4f27f2a6afdd5f041e3eaefc6625b682c9a3461eb91ba37e0a6ab3edb7dea156be458c002665d84080c2b6eb10f61ceb800093ae5879d1e8561fafa43d10fc274b82937f6c62a52e13be30e00bac29fb0c9be0615ef993fba791080cc78d436b8ab7807deeff6a9ad65f44bec12acbaf9e12c7069755902974bc6e5be67f025d1c98484cdc021b7e1a761bcc5761685be9fa38c58b712d654858249942b843aae936bfb01b6d0ac7a17a208d5c98d35116310cdadb9d8c38e209ecacccfca630384a10984fe5a2938a6be294ba8330d2adf2e0da1fdc8f8c3842bde02289ea92cbb0fff9ac930ad285eb931fbb7a8b5611e19e104016242f5ca028e4bc7bdd08d2c78ad1b02960968832f6cdcca30b3ad45398891ef87fcb2b0a011a4c1289e04fe6315dba6fb68635eb6a4a85bf8332eb82fc24e6485464031fb626ddabb98dcf1c9ff926c74e19bc500bb5bf274d70a8133b499f23732e0ff1b8840370ea705a4eecbef9ebbd64bd6c6d161168d134f23dd8c57bd050b4bc822ab49990cb0a475a7a0a13ec59a21fb0d5f8c9fc4ec0c81eb96bbf91754b29c53f78d94dcac165b636085ae92cc7c32c1f571f8d065a0e24df6716ffd8ea1576eb365b74d4d4199545bd40c205cc516b69fa40dc4faea116a706efdb4d7351e9df24593ed589b522f4fbe3a08185c0fd53ea333b2db90ca070c343f9830ce57b3e07185988cc56d16aafac61828d38c1f6201018a8898d3eb8b8e4269615d5a2cfcfec13ecaf6c1c1b37cca7f8860a01ed12c93fc7018870a04fe05b033a5a5e70856507f7c9d211a388b0008b97f0faadfd5bee2541ddd973c8b51d98738d4df0a6c648e69d989bbaeb26ff27916dbdee1eaabaf2b314a16da5da9c69c7cf705924f4b3be8f797e3eff2b5410d177736d3babb67b4c0adb09d283e5d5afc2cf541209c52499435b9d25cd65c088095aa64a250349d75c46179402eee5d358cc38e7e462f990118fa1cd668099af495a35ad60272373e7e19cdc13d0eb7a89bfc7507a42396c47ea6384080b5967e96cb53685c299be83ede7806d1106cadde59695a277e616efcb518c304dc1248605099a9fecab9ffe62ac454d389a6597246ec21cb749e1d49dd7089d87ba2081b73789521de59aa14cf63b145c3430c8c7e1109bb4d193b287694ce3eb2d8826ee7e2b00f15e08aa7022e39ed42fe83818df697839f6f80967ab23f116b320a5841abc4ad183baf03124d8e4a5cb539c6fd83a31339b429a45fe271590239fb33abbdee478e5a91176a3244880b814f12e9a4be765444a68aad42f99d2fe91ffcd8413395736ccad7ea43c494193cf7ac2dfa9bb1074a3254904117fbf52a23fc6e24a4fb696ebceea551d9db7355631740fcf3d2c316bce61ebafc96d720b2a5eb8904cc903018a005523167d56832c28e58f845083ff74baf6426999d8caf6fd3cb622a9d1f43ace32678c0938d69a723c650f74c0c5354320ec085304ecd0001faf9e6c65eaf77ca3c6e3ebfa0b0960dc91c728a69abc9648dadc95e1f52d1bb2154cc86dde33234bad4566f7130464f5968588beb4d91420ce45216167aa2e39ef8220c28436c120904a872b89c3745307d03680efd70c69f180dc2cd5548981a27af93423b23b95df8218cb7dfd23bf21e5db41b7bab5ff5324d417a80e9e2bf5390ca72224dc728a4c32458bdfef744a5c20f4cf686769cb3c71d3018d68e18964adc4884592efdeade887211398ebd6fd0d46106a0ce98071ae88acca9fafba85b8783c46d7346f949e1d34da7e70c1567063465d28262388d70660ded3730b92cd27e0458c4ef9304e6c31962fe421181c39e384db9c99e726b88131d01f9d8c32e8a8a6d22034bcf3cd8dab98509af2d8d8add55b00acd23d52e378be97615361e72a88a416b5ebe260bfdac4b1558c32de5da984b07cfb068b7e190dff95823028bc16855a6d06df86f88c19f155a6cb0197210dcabe1705a7ad41fafda624b5d1223cce487d4db50cf49d36991d564c8ce7ab1c8779cab0a0f16c7b4ebf1243e4ec28dd989d2853bd4fc1ee08a42e3005b08ad00064a00052ea10faacbe1cdfdae4018c404d7007c46f7066a213bcfff05fce43b9046fd1883a5bcf77cf4fe2b658870d3132012ac279db64ea961fca03e1e71b07ce4193301c025e91a9188d3d10c501656f641ca68023be7d2e1c06714c294a9dceb983f1acf7787934d7af0707cdd9f839501c7deaf6409f5cc9be9db6099181e9a12ffef7ec64289c63f5da63ad2b7e172a29c17f0c5e4d1cb1d6605ce47ee6804ec4ad57bd177ad4fe5e27182cdceb3c8533dd26f155720e0a43f55e00377162c00bcb57f9acc890c10cb6f913c5d4aea91110b10e1d8cc5cfcb508db884a824132faa3910504be6e5c42ac00bf7cacde0c2c3a5566212d348d1f8be0048abddbf8abb677efadd8ac5f1b43c72ab614bebcc89165e64017cf59cceb2f16a7ec1299ddc19f9f2081c0cf123a39a63233c1d3b4f855d1bf05cab919a710d8661550618d3d118065a24a3c6ec28bd5aa55300861f0f0c76a9edc90c5ca5782ecca1e1371d34e80547e1dce08fb7df19294bb740a50445e34f77411dc07114b75a6ae8d9c94789a6fa251541fbe48e3e001688be63d9755c257f0dc63c378cd44e07ee308a9f528069e0ead8b7a6e8337717cebbf64386a23893f03841abf4c875d3623eb50ef610f2ff41f3eb9b30206b2e568d9977f04946ba689ab98b551472a7ebfbf58970a67edf26b6f5d832cf39940774ef85fec2a5d818c421d445bb73c5d46b41dcb256f89504718d0f435bb6b2bd458348816f508455c788d6493c697850937acb115c0b2532c6bf0a8039e8cc7636927a50930f5e6999d9cebf22dcedecbe2dbb01acdb03a0907dc24ea52489a9c36895bf20aa8854a97676f9bdbe465452712f0ab935c5cda4f15d32b97c3da8a5a78e9a8b1804e0cc405dfa991d991d3f7a01d3bcb29f5af875477e45ea5b95aa53a4ab743d19ef1922e2ff950c42a9b9db653807063e0c4ad70139f144b22395b1ae5dcfae86e65b25e1f08601319bc067eebb00d61043f7400f84ed02c6efe028ab4e966dbcbedfaaf52db20a0c5d558585dc18e6aab043fd67b6d42b9cd1ad7a02e7bec230b68612da57194f8858b4cbac9c7896a4373fdd4eb031f7f8f8b2913232256402d8f9cf8d46b5bd76be899d7cf449ff11910cc19c9b1eea138a614488e89d21daf08354788f285efcfc2170a2ca9c79f5229359e4c589f0bdb0b063831e148023d4994e7e0bfa83e313652be6909dab707a09e5e9215a08a913de69cf940b362a629b56e3c8b17ba6da85bfa080a2a825f6036fdbc01ed53bd46cc5d81dc4195e30f46a83cddf9bf073697b6bab0598e1e0db41e03da5e90cc8c9c8e8dce1f5cf4b68f0502f059225ea41c99ab3a5b18b67751205fa1ad2b87140c5acd10b77172e036854c7de58eaa0b827b25149bb82fdb9c338332dc893cbc02efae20297f371ec7a8a3c05db1acc5b4dcd82519eac096e2cfb0dcf301e444ff7524ed50c86dc78ead21626045a37adc187432425a6f6c4"}], 0x12a8, 0x800}, 0x8000) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x4, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xff0f0000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a3576", 0x14}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x4, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:37 executing program 2: r0 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, r0) 2018/05/19 11:19:37 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xc7000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:37 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) 2018/05/19 11:19:37 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:37 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r1, 0x20, 0x70bd29, 0x25dfdbfb, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x3d}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa5f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000000040)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101080, 0x0) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x8}, 0x18) accept$ipx(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) [ 330.406476] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 330.414658] FAT-fs (loop5): Filesystem has been set read-only [ 330.433834] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 330.443030] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 330.451222] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 330.601864] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 330.772987] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1041) [ 330.780820] FAT-fs (loop6): Filesystem has been set read-only 2018/05/19 11:19:37 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x600}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x440000, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="c71f4beb59fc0a2ada461eb2fc37e6ce7356a189c5973a340bc6df873d94db2360b37f0993d071543572606e32b7d1c6c46ce17b3b6aa254200d050e44b20c03541197795443f63e3fd3262f7125c73a4e0c9bdd052eba5abdd414b83814", 0x5e}, {&(0x7f0000000300)="4bba0e07ebd79a935e5c5a427cbad14a1aaad18f327439c0e7bf2e00e635e1ce1b054a9f3dace03b0dbd9bc65a01b014a90a7ce94cae8af5bc31d05cd8b4b6f861f136db186cd38ee3d6bb935c8bdba1165ad0a687482dc21766cdfadd7661937457c34345c7142e24", 0x69}, {&(0x7f0000000380)="0862fa311edf20378615d8cdef26a8342c3f813152f7bff44eefd8ac3ea96962d6d51882fbfa8eb751effad626843505acf907e73b423b6baf6bddf44dd0d9815d71dbc43d8853d508094fe4b8ea84c1ff7584286c7569ad23229e1fe9afcdd0a77eaf9b256360523e6ce27109caee7ecff6e7d79d501d3ef7e2172f570cec312aacf3b86d4ecd07933a7fdfc6f4907fe085393ca96383ff303f28db8defca1b508ca9d6c9931baabbbffa49278ca22a151916051df714", 0xb7}, {&(0x7f0000000440)="470202c9d6d3f6779df70f9ea058e35229bdc25440dd52ccfdf827fbab036267900da7312f5fba371860d464b00639427db8064a2c781e85ef5b06de353931a7", 0x40}], 0x4, &(0x7f00000004c0)=[{0xc0, 0x11f, 0x85c, "f9f939273d21e4887070737b0119dcc9edbe5a0ed1658ad88fc2767ac6b9c9a0d80d0b7fdf116f063efe3e6ab14260a50f0ca7d0c64fc74370f06f808ffcbbf57e7c8c18516e9d2aee6123a02765b7033db0e81bbde47c09e4cc52527eb9b29954ef5bb015702a2396463e24fad62e263dddd582f45d5190ec27719d8ea660b851808c9ab8609045aaba0c12437c186b08af00040dc5c8795ce653cf5258e467cd377c13253d8c314f7e9aed105ccc"}, {0xf0, 0x0, 0x1113, "e13b29aafa64af37d137961ffc0127660cc3f2c532750846e068954b6764054418f24c2bc91f1fbe0d241a184c64a786bb9a3fc1a5208907c8641bd238132c1ffe4c08b52651aed3baf1bfeb18fc675c19435e6cc3a304b51089cf6e7e2da143d7dacd93c14eb090e9ead25e667298310d2245a441ee67dc25675a9cc856640b648fb9c13983646a140c16db72956d2789f1f7ec145e9cc49e67466a1a150a58cc66e6e8553470dc6aadbd29478e35b42953d235944e7e1201046b01491b7b43d1f3de166280194031603b46debd00f3faff8225f5dad362a2c2af74"}, {0xe8, 0x119, 0x8, "7d18ae272f64e7630bb42477d007808d3197cf529120fe3a196d19bd0644a3872de6c8cf7357da41630f08068e2ee2174931b7ca0cb775e5f091a74692fd2e6f95f80877209070d8572f2195a59c22f55d3bc97acd1f6440d907d19bd4b045de9c358e470f661e9c0fe722979c431853c7a99226e3af823f58dab928173b85686ea6661da197779fae8d5b7bf03aa2f77255e9d367a3d9a992eab7b6fd7d4b8377289983bddf8508b954cadd38e8ee6ac29e187d1ee8058633e8568445a1f1e54d85d9e582f0b7da8d910b71a82fd4a7af424242f4854ceb"}, {0x1010, 0x10e, 0x196d, "ff88852d853198ed230a50df8ff8a4ab364d3e90f0b5f500a182f225d140ed9ed521356533c9bc3df1c099d692a43849b3b65e32de29695c6fe8e2ac407cb4b644783d67f0eb2d81815cafdb2521044401b2009dae67478063a4e3ea175a516230f203d5235ffe06de709906cd3f99ec572c278179790d6a5a7270600607fe6ee3dbc6182e68be8d0e6775c6cef2f9bd4173ebc95ec1463e7c03fe7bcabc03ab8467bfe67d1adc6dfa70b587cfb2ecfedba5f2a54ec71c03c21631620eee7fef3e5019a551f6be236b0d7ef0fd9f90179934d95217e6ed0f3f199558093d090102ed8f0199e2b26494e9039663b5f16ee47cd169e53f3bf12357402c2c1452ecbe84ef161db3973699aa7df3c57e0dd3006493eabc3ef3d171877564eba6d41641a374c782e7a1095f3e46908d17aa07b4e07901cb1ab21272629d03844fce80d8e96b8786b05efeaaedfbe4b1ab7efed2c0bc0e5ace0290019a9ce13b6067e20202a6fb9d308d3c5a370786adc7ce4ef76ec0158e23a0d683f71ec1353127fdf80b509e5281fa9a9bf141c2f22606398850f4831e730b45bbf52f443925cc3b21507cf2588da35e87aebac9878132e99c150e06787b494c03f3782ca75f23c5560bc6874bebea1160fee0ac302d52bfc84521b479023b9cc0a19bc60064bd2c27815771ef5bfe40d6e9abbb3cb9bf485adca7b819d4681ad33b502037fa2c911c71d84d591fe2336478401493cfedfc7fa93ba6139bfe1badc14300b1a404168d542f7122a42d5e930f9ff382d4ac5a4929f9f90d23d98656e4182b137dcf859545ebebaafbef59c2b5a4dff80a9cb93ee1e4d97a7a5ba19f784c2055bc557e8657ed4240f2bc259b52792cdadf0c9e2f409296b092312ebf4d5cd8c69a66a4702dd4f4df4a6191971dceb0656e7bdbb3563d2ec7bcdd69837d9e813fa7dd4bb2c5b7e46f4cf58da26bd155663d6aceed21ee2b5a9f0d07036b99d223d8e462db9feb3165778128bc9cf9466c414c7af17e8d400158554484d15fe6b32f9c359a8e5d501c38904a0335676ab8f922ff9f124ab532359a7a44d46476783f6443b01ac325d2f641638b88c21fd323f908370f1726147623a54a95db4e0213be2c4c984f8d9cd2bf6a292cb141a041bc9e4b66a7465710b36c772967a9308cd6ae48d92b92dcbf886d705a7a7ce105ecb30266aed12ae6ed13b002e2d0f44bf75a3e2ef8028c12b1f44b1c6b119e639055e21a41aa8133c32eac10b665d2aff64e42a408147d529b906d05dde9f071a21a84e92ea00e915cd4f33521530033ef53c41edec4df26ba88577f61502dbda6af0b6ed411b371ddf6273f4c0cb6cd1f6cd1931d8b5ce7dc683e0af14799f227dbd19cb57955064d0420da5e2f78943e4485421cdfc1fbf3f136c593520dba6824858f117cc3287d4b40337aa08f8534434f1c04a242d6942129fe9decf7aa290059be203ca01c42455704b56a7ff6e95013fd966211fe8883a32a410c7c54d287716e4dc990d76e7f0bc4f2b1a65e6de31fa3d796a15551895623e5a362efd5318af091456744da5ba8c07ab1770d960825dab308f00c1a518cf11675a0e24776047ad40c9e8b2d5fb68f1d1db6a3791daa118b644eae91573d4c03383a7e0a40783c9e153857d9f2758631f167bff6375f70d4d99bfeea1f8a9814195e9ced2e34a9f7583f3ac75901a39fb70d823c2c07f9b0140470967849a16b27ecc26c4fac632acd1d8d169bb59ae3b7e100969808a59094c4b797e522ef8bc39ef36ff29bc370e49b9f65776ed447d3f9eb051aea3d7481c8b8b520b71188e0ddf95422653d475f4250dd988dc3d0c1c5db0d05a044f086b32145fee2514a22accb70dacea13e98bb67430c550311f53b188a6d15cebe6a01202272b4732fababc85d0df669580acc3cd0955eba995de3c733854b4e16643ba9a865e46be04dd57116ce183c01c87e13b165e7674019895f0e930f530870de5df6568b68d0bd5e7341c5835258e274011b0980a5f534c4112d5319a3ce7ad5c0c4494def0212f65373f99e0e41ffc089119b216c69096555f72c5c2cab846bf02e12766db53e1a9dd81e4649a43148c89f4389ff073ed6e210aef3b578a720b91e83a19384d428841a1b8237459f26218b8b1a43428bf78e46341079884f0a5628bcf6d02574919f9b1189bf4f27f2a6afdd5f041e3eaefc6625b682c9a3461eb91ba37e0a6ab3edb7dea156be458c002665d84080c2b6eb10f61ceb800093ae5879d1e8561fafa43d10fc274b82937f6c62a52e13be30e00bac29fb0c9be0615ef993fba791080cc78d436b8ab7807deeff6a9ad65f44bec12acbaf9e12c7069755902974bc6e5be67f025d1c98484cdc021b7e1a761bcc5761685be9fa38c58b712d654858249942b843aae936bfb01b6d0ac7a17a208d5c98d35116310cdadb9d8c38e209ecacccfca630384a10984fe5a2938a6be294ba8330d2adf2e0da1fdc8f8c3842bde02289ea92cbb0fff9ac930ad285eb931fbb7a8b5611e19e104016242f5ca028e4bc7bdd08d2c78ad1b02960968832f6cdcca30b3ad45398891ef87fcb2b0a011a4c1289e04fe6315dba6fb68635eb6a4a85bf8332eb82fc24e6485464031fb626ddabb98dcf1c9ff926c74e19bc500bb5bf274d70a8133b499f23732e0ff1b8840370ea705a4eecbef9ebbd64bd6c6d161168d134f23dd8c57bd050b4bc822ab49990cb0a475a7a0a13ec59a21fb0d5f8c9fc4ec0c81eb96bbf91754b29c53f78d94dcac165b636085ae92cc7c32c1f571f8d065a0e24df6716ffd8ea1576eb365b74d4d4199545bd40c205cc516b69fa40dc4faea116a706efdb4d7351e9df24593ed589b522f4fbe3a08185c0fd53ea333b2db90ca070c343f9830ce57b3e07185988cc56d16aafac61828d38c1f6201018a8898d3eb8b8e4269615d5a2cfcfec13ecaf6c1c1b37cca7f8860a01ed12c93fc7018870a04fe05b033a5a5e70856507f7c9d211a388b0008b97f0faadfd5bee2541ddd973c8b51d98738d4df0a6c648e69d989bbaeb26ff27916dbdee1eaabaf2b314a16da5da9c69c7cf705924f4b3be8f797e3eff2b5410d177736d3babb67b4c0adb09d283e5d5afc2cf541209c52499435b9d25cd65c088095aa64a250349d75c46179402eee5d358cc38e7e462f990118fa1cd668099af495a35ad60272373e7e19cdc13d0eb7a89bfc7507a42396c47ea6384080b5967e96cb53685c299be83ede7806d1106cadde59695a277e616efcb518c304dc1248605099a9fecab9ffe62ac454d389a6597246ec21cb749e1d49dd7089d87ba2081b73789521de59aa14cf63b145c3430c8c7e1109bb4d193b287694ce3eb2d8826ee7e2b00f15e08aa7022e39ed42fe83818df697839f6f80967ab23f116b320a5841abc4ad183baf03124d8e4a5cb539c6fd83a31339b429a45fe271590239fb33abbdee478e5a91176a3244880b814f12e9a4be765444a68aad42f99d2fe91ffcd8413395736ccad7ea43c494193cf7ac2dfa9bb1074a3254904117fbf52a23fc6e24a4fb696ebceea551d9db7355631740fcf3d2c316bce61ebafc96d720b2a5eb8904cc903018a005523167d56832c28e58f845083ff74baf6426999d8caf6fd3cb622a9d1f43ace32678c0938d69a723c650f74c0c5354320ec085304ecd0001faf9e6c65eaf77ca3c6e3ebfa0b0960dc91c728a69abc9648dadc95e1f52d1bb2154cc86dde33234bad4566f7130464f5968588beb4d91420ce45216167aa2e39ef8220c28436c120904a872b89c3745307d03680efd70c69f180dc2cd5548981a27af93423b23b95df8218cb7dfd23bf21e5db41b7bab5ff5324d417a80e9e2bf5390ca72224dc728a4c32458bdfef744a5c20f4cf686769cb3c71d3018d68e18964adc4884592efdeade887211398ebd6fd0d46106a0ce98071ae88acca9fafba85b8783c46d7346f949e1d34da7e70c1567063465d28262388d70660ded3730b92cd27e0458c4ef9304e6c31962fe421181c39e384db9c99e726b88131d01f9d8c32e8a8a6d22034bcf3cd8dab98509af2d8d8add55b00acd23d52e378be97615361e72a88a416b5ebe260bfdac4b1558c32de5da984b07cfb068b7e190dff95823028bc16855a6d06df86f88c19f155a6cb0197210dcabe1705a7ad41fafda624b5d1223cce487d4db50cf49d36991d564c8ce7ab1c8779cab0a0f16c7b4ebf1243e4ec28dd989d2853bd4fc1ee08a42e3005b08ad00064a00052ea10faacbe1cdfdae4018c404d7007c46f7066a213bcfff05fce43b9046fd1883a5bcf77cf4fe2b658870d3132012ac279db64ea961fca03e1e71b07ce4193301c025e91a9188d3d10c501656f641ca68023be7d2e1c06714c294a9dceb983f1acf7787934d7af0707cdd9f839501c7deaf6409f5cc9be9db6099181e9a12ffef7ec64289c63f5da63ad2b7e172a29c17f0c5e4d1cb1d6605ce47ee6804ec4ad57bd177ad4fe5e27182cdceb3c8533dd26f155720e0a43f55e00377162c00bcb57f9acc890c10cb6f913c5d4aea91110b10e1d8cc5cfcb508db884a824132faa3910504be6e5c42ac00bf7cacde0c2c3a5566212d348d1f8be0048abddbf8abb677efadd8ac5f1b43c72ab614bebcc89165e64017cf59cceb2f16a7ec1299ddc19f9f2081c0cf123a39a63233c1d3b4f855d1bf05cab919a710d8661550618d3d118065a24a3c6ec28bd5aa55300861f0f0c76a9edc90c5ca5782ecca1e1371d34e80547e1dce08fb7df19294bb740a50445e34f77411dc07114b75a6ae8d9c94789a6fa251541fbe48e3e001688be63d9755c257f0dc63c378cd44e07ee308a9f528069e0ead8b7a6e8337717cebbf64386a23893f03841abf4c875d3623eb50ef610f2ff41f3eb9b30206b2e568d9977f04946ba689ab98b551472a7ebfbf58970a67edf26b6f5d832cf39940774ef85fec2a5d818c421d445bb73c5d46b41dcb256f89504718d0f435bb6b2bd458348816f508455c788d6493c697850937acb115c0b2532c6bf0a8039e8cc7636927a50930f5e6999d9cebf22dcedecbe2dbb01acdb03a0907dc24ea52489a9c36895bf20aa8854a97676f9bdbe465452712f0ab935c5cda4f15d32b97c3da8a5a78e9a8b1804e0cc405dfa991d991d3f7a01d3bcb29f5af875477e45ea5b95aa53a4ab743d19ef1922e2ff950c42a9b9db653807063e0c4ad70139f144b22395b1ae5dcfae86e65b25e1f08601319bc067eebb00d61043f7400f84ed02c6efe028ab4e966dbcbedfaaf52db20a0c5d558585dc18e6aab043fd67b6d42b9cd1ad7a02e7bec230b68612da57194f8858b4cbac9c7896a4373fdd4eb031f7f8f8b2913232256402d8f9cf8d46b5bd76be899d7cf449ff11910cc19c9b1eea138a614488e89d21daf08354788f285efcfc2170a2ca9c79f5229359e4c589f0bdb0b063831e148023d4994e7e0bfa83e313652be6909dab707a09e5e9215a08a913de69cf940b362a629b56e3c8b17ba6da85bfa080a2a825f6036fdbc01ed53bd46cc5d81dc4195e30f46a83cddf9bf073697b6bab0598e1e0db41e03da5e90cc8c9c8e8dce1f5cf4b68f0502f059225ea41c99ab3a5b18b67751205fa1ad2b87140c5acd10b77172e036854c7de58eaa0b827b25149bb82fdb9c338332dc893cbc02efae20297f371ec7a8a3c05db1acc5b4dcd82519eac096e2cfb0dcf301e444ff7524ed50c86dc78ead21626045a37adc187432425a6f6c4"}], 0x12a8, 0x800}, 0x8000) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635002000000f303e0f130366b9720900000f32f20f2c45f00fa4a710008036660f383ae2d9f40f01df0f238b36f2660f30", 0x3a}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000081e00fb034d564b0000000001d34ddad7fa1f5ea73680ff70d5868730ba1ae76124b77431ccdcbe5aead83dcd2833261ad5a79e34ca870f3fe9980f0e9921733de7903a0000"]) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000040)=""/99, &(0x7f0000000140)=0x63) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f00000000c0)={0x2000000094}) 2018/05/19 11:19:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xf000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:37 executing program 2: r0 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="12", 0x1, r0) 2018/05/19 11:19:37 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000000c0)={0x3, [0xfffffffffffffffa, 0x4, 0x1]}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000180)=0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0xffffffffe3d65ed9}) time(&(0x7f0000000000)) 2018/05/19 11:19:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6", 0x1e}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x4, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:37 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xc7000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:37 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:37 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 330.906111] ion_ioctl: ioctl validate failed [ 330.922185] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:37 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x600}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x440000, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="c71f4beb59fc0a2ada461eb2fc37e6ce7356a189c5973a340bc6df873d94db2360b37f0993d071543572606e32b7d1c6c46ce17b3b6aa254200d050e44b20c03541197795443f63e3fd3262f7125c73a4e0c9bdd052eba5abdd414b83814", 0x5e}, {&(0x7f0000000300)="4bba0e07ebd79a935e5c5a427cbad14a1aaad18f327439c0e7bf2e00e635e1ce1b054a9f3dace03b0dbd9bc65a01b014a90a7ce94cae8af5bc31d05cd8b4b6f861f136db186cd38ee3d6bb935c8bdba1165ad0a687482dc21766cdfadd7661937457c34345c7142e24", 0x69}, {&(0x7f0000000380)="0862fa311edf20378615d8cdef26a8342c3f813152f7bff44eefd8ac3ea96962d6d51882fbfa8eb751effad626843505acf907e73b423b6baf6bddf44dd0d9815d71dbc43d8853d508094fe4b8ea84c1ff7584286c7569ad23229e1fe9afcdd0a77eaf9b256360523e6ce27109caee7ecff6e7d79d501d3ef7e2172f570cec312aacf3b86d4ecd07933a7fdfc6f4907fe085393ca96383ff303f28db8defca1b508ca9d6c9931baabbbffa49278ca22a151916051df714", 0xb7}, {&(0x7f0000000440)="470202c9d6d3f6779df70f9ea058e35229bdc25440dd52ccfdf827fbab036267900da7312f5fba371860d464b00639427db8064a2c781e85ef5b06de353931a7", 0x40}], 0x4, &(0x7f00000004c0)=[{0xc0, 0x11f, 0x85c, "f9f939273d21e4887070737b0119dcc9edbe5a0ed1658ad88fc2767ac6b9c9a0d80d0b7fdf116f063efe3e6ab14260a50f0ca7d0c64fc74370f06f808ffcbbf57e7c8c18516e9d2aee6123a02765b7033db0e81bbde47c09e4cc52527eb9b29954ef5bb015702a2396463e24fad62e263dddd582f45d5190ec27719d8ea660b851808c9ab8609045aaba0c12437c186b08af00040dc5c8795ce653cf5258e467cd377c13253d8c314f7e9aed105ccc"}, {0xf0, 0x0, 0x1113, "e13b29aafa64af37d137961ffc0127660cc3f2c532750846e068954b6764054418f24c2bc91f1fbe0d241a184c64a786bb9a3fc1a5208907c8641bd238132c1ffe4c08b52651aed3baf1bfeb18fc675c19435e6cc3a304b51089cf6e7e2da143d7dacd93c14eb090e9ead25e667298310d2245a441ee67dc25675a9cc856640b648fb9c13983646a140c16db72956d2789f1f7ec145e9cc49e67466a1a150a58cc66e6e8553470dc6aadbd29478e35b42953d235944e7e1201046b01491b7b43d1f3de166280194031603b46debd00f3faff8225f5dad362a2c2af74"}, {0xe8, 0x119, 0x8, "7d18ae272f64e7630bb42477d007808d3197cf529120fe3a196d19bd0644a3872de6c8cf7357da41630f08068e2ee2174931b7ca0cb775e5f091a74692fd2e6f95f80877209070d8572f2195a59c22f55d3bc97acd1f6440d907d19bd4b045de9c358e470f661e9c0fe722979c431853c7a99226e3af823f58dab928173b85686ea6661da197779fae8d5b7bf03aa2f77255e9d367a3d9a992eab7b6fd7d4b8377289983bddf8508b954cadd38e8ee6ac29e187d1ee8058633e8568445a1f1e54d85d9e582f0b7da8d910b71a82fd4a7af424242f4854ceb"}, {0x1010, 0x10e, 0x196d, "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"}], 0x12a8, 0x800}, 0x8000) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f3", 0x23}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x4, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socketpair(0x15, 0x6, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0x100000, 0x0, 0x1ff, 0x5, 0x6}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x0, @multicast1=0xe0000001}], 0x20) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) move_pages(r3, 0x9, &(0x7f0000000180)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000200)=[0x6, 0x80000001, 0x0, 0x7, 0x7f], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 2018/05/19 11:19:37 executing program 3: r0 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffc) add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="7f3d", 0x2, r0) [ 331.118021] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 331.125827] FAT-fs (loop5): Filesystem has been set read-only [ 331.206569] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 331.254151] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 331.296247] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:38 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:38 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4", 0x26}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x4, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:38 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xf000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:38 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x600}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x440000, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="c71f4beb59fc0a2ada461eb2fc37e6ce7356a189c5973a340bc6df873d94db2360b37f0993d071543572606e32b7d1c6c46ce17b3b6aa254200d050e44b20c03541197795443f63e3fd3262f7125c73a4e0c9bdd052eba5abdd414b83814", 0x5e}, {&(0x7f0000000300)="4bba0e07ebd79a935e5c5a427cbad14a1aaad18f327439c0e7bf2e00e635e1ce1b054a9f3dace03b0dbd9bc65a01b014a90a7ce94cae8af5bc31d05cd8b4b6f861f136db186cd38ee3d6bb935c8bdba1165ad0a687482dc21766cdfadd7661937457c34345c7142e24", 0x69}, {&(0x7f0000000380)="0862fa311edf20378615d8cdef26a8342c3f813152f7bff44eefd8ac3ea96962d6d51882fbfa8eb751effad626843505acf907e73b423b6baf6bddf44dd0d9815d71dbc43d8853d508094fe4b8ea84c1ff7584286c7569ad23229e1fe9afcdd0a77eaf9b256360523e6ce27109caee7ecff6e7d79d501d3ef7e2172f570cec312aacf3b86d4ecd07933a7fdfc6f4907fe085393ca96383ff303f28db8defca1b508ca9d6c9931baabbbffa49278ca22a151916051df714", 0xb7}, {&(0x7f0000000440)="470202c9d6d3f6779df70f9ea058e35229bdc25440dd52ccfdf827fbab036267900da7312f5fba371860d464b00639427db8064a2c781e85ef5b06de353931a7", 0x40}], 0x4, &(0x7f00000004c0)=[{0xc0, 0x11f, 0x85c, "f9f939273d21e4887070737b0119dcc9edbe5a0ed1658ad88fc2767ac6b9c9a0d80d0b7fdf116f063efe3e6ab14260a50f0ca7d0c64fc74370f06f808ffcbbf57e7c8c18516e9d2aee6123a02765b7033db0e81bbde47c09e4cc52527eb9b29954ef5bb015702a2396463e24fad62e263dddd582f45d5190ec27719d8ea660b851808c9ab8609045aaba0c12437c186b08af00040dc5c8795ce653cf5258e467cd377c13253d8c314f7e9aed105ccc"}, {0xf0, 0x0, 0x1113, "e13b29aafa64af37d137961ffc0127660cc3f2c532750846e068954b6764054418f24c2bc91f1fbe0d241a184c64a786bb9a3fc1a5208907c8641bd238132c1ffe4c08b52651aed3baf1bfeb18fc675c19435e6cc3a304b51089cf6e7e2da143d7dacd93c14eb090e9ead25e667298310d2245a441ee67dc25675a9cc856640b648fb9c13983646a140c16db72956d2789f1f7ec145e9cc49e67466a1a150a58cc66e6e8553470dc6aadbd29478e35b42953d235944e7e1201046b01491b7b43d1f3de166280194031603b46debd00f3faff8225f5dad362a2c2af74"}, {0xe8, 0x119, 0x8, "7d18ae272f64e7630bb42477d007808d3197cf529120fe3a196d19bd0644a3872de6c8cf7357da41630f08068e2ee2174931b7ca0cb775e5f091a74692fd2e6f95f80877209070d8572f2195a59c22f55d3bc97acd1f6440d907d19bd4b045de9c358e470f661e9c0fe722979c431853c7a99226e3af823f58dab928173b85686ea6661da197779fae8d5b7bf03aa2f77255e9d367a3d9a992eab7b6fd7d4b8377289983bddf8508b954cadd38e8ee6ac29e187d1ee8058633e8568445a1f1e54d85d9e582f0b7da8d910b71a82fd4a7af424242f4854ceb"}, {0x1010, 0x10e, 0x196d, "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"}], 0x12a8, 0x800}, 0x8000) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x5}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:38 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x4ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abcfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) 2018/05/19 11:19:38 executing program 3: r0 = socket(0x2000000011, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="c626262c8523bf012cf66f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @multicast1=0xe0000001}, 0xfffffffffffffd70) connect$bt_rfcomm(r0, &(0x7f0000000280)={0x1f, {0x612, 0x40, 0xfffffffffffffff8, 0x0, 0x6, 0x4}, 0xffff}, 0xa) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x21, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) r4 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup2(r4, r1) dup2(r1, r3) ioctl(r4, 0x1ff, &(0x7f0000000200)="676be31fc8c7f139122912057cbead87890dfc5bd963d5f93374738eac6b09c0c22af38ccb420d3bf634541ab377f30e735a0f463a03c9653cdf129bbde6055277de") [ 331.352659] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1041) [ 331.360333] FAT-fs (loop6): Filesystem has been set read-only [ 331.428340] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:38 executing program 2 (fault-call:0 fault-nth:0): request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a4", 0x27}, {&(0x7f0000000340)="041b06366bfe303f6dc5287cae6646ec5ddf500db0598a0c612327b70234b35b312a4f4e6e42b4e786ca4e568a0ed0d7d31d0996331568f37856870a85de13eada4fb6b538b0102e61173a21b84a41675053aa2cc509793bdc2f6aae1d755c4b77e8865898b9d48e43f655173f971a81554fd9b1ca248e1735ac13e6731c13b7538b2b1566de4bf910bf", 0x8a}], 0x4, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:38 executing program 0: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000380)="7f3ab8010000802435344c7898cd994672", 0x81, r0) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) uname(&(0x7f00000004c0)=""/194) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r4, r3}, &(0x7f0000000280)=""/132, 0x84, 0x0) 2018/05/19 11:19:38 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) [ 331.511005] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:38 executing program 3: r0 = epoll_create(0x2) fcntl$notify(r0, 0x0, 0x284) unshare(0x400) 2018/05/19 11:19:38 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x600}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x440000, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 331.665658] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 331.668645] FAULT_INJECTION: forcing a failure. [ 331.668645] name failslab, interval 1, probability 0, space 0, times 0 [ 331.673259] FAT-fs (loop5): Filesystem has been set read-only [ 331.690697] CPU: 0 PID: 21510 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #58 [ 331.698032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.707399] Call Trace: [ 331.710020] dump_stack+0x1b9/0x294 [ 331.713679] ? dump_stack_print_info.cold.2+0x52/0x52 [ 331.718896] ? perf_trace_lock_acquire+0xe3/0x980 [ 331.723769] should_fail.cold.4+0xa/0x1a [ 331.726600] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 331.727850] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 331.727872] ? find_held_lock+0x36/0x1c0 [ 331.727905] ? find_held_lock+0x36/0x1c0 [ 331.727939] ? check_same_owner+0x320/0x320 [ 331.753558] ? rcu_note_context_switch+0x710/0x710 [ 331.758513] __should_failslab+0x124/0x180 2018/05/19 11:19:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x700000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 331.760730] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 331.762761] should_failslab+0x9/0x14 [ 331.762780] __kmalloc_track_caller+0x2c4/0x760 [ 331.762802] ? strncpy_from_user+0x500/0x500 [ 331.762816] ? mpi_free.cold.1+0x19/0x19 [ 331.762833] ? strndup_user+0x77/0xd0 [ 331.762854] memdup_user+0x2c/0xa0 [ 331.774358] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 331.778756] strndup_user+0x77/0xd0 [ 331.778778] __x64_sys_request_key+0x13b/0x420 [ 331.778796] ? __ia32_sys_add_key+0x4e0/0x4e0 [ 331.778818] ? do_syscall_64+0x92/0x800 [ 331.778841] do_syscall_64+0x1b1/0x800 [ 331.822937] ? finish_task_switch+0x1ca/0x840 [ 331.827450] ? syscall_return_slowpath+0x5c0/0x5c0 [ 331.832378] ? syscall_return_slowpath+0x30f/0x5c0 [ 331.837299] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 331.842663] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.847521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 331.852707] RIP: 0033:0x455a09 [ 331.855885] RSP: 002b:00007f9524b9ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 331.863584] RAX: ffffffffffffffda RBX: 00007f9524b9f6d4 RCX: 0000000000455a09 [ 331.870840] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 331.878105] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 331.885372] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000013 [ 331.892650] R13: 0000000000000551 R14: 00000000006fc038 R15: 0000000000000000 2018/05/19 11:19:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 332.021791] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 332.066365] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1041) [ 332.073959] FAT-fs (loop6): Filesystem has been set read-only [ 332.220626] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:39 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080), 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000340), 0x4) getsockname$inet6(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/05/19 11:19:39 executing program 2 (fault-call:0 fault-nth:1): request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$ax25(r0, &(0x7f0000000180), &(0x7f0000000200)=0x10) r3 = dup(r2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x3f, @empty, 0x9}}, 0xac9, 0xfffffffffffffffe, 0xb2, 0x4, 0x3dc}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000001c0)={r4, 0x2a, "e35892ef6e906597616dea6c96bca5f6e5d5af63ec36efa2d9389e5af7c004c645890499fff6ea3ddfb5"}, &(0x7f0000000640)=0x32) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r4, 0x5, 0x3, 0x3}, 0x10) ioctl$int_in(r3, 0x5454, &(0x7f0000000680)=0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x9, {{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x2, [{{0x2, 0x4e20, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @rand_addr=0xfffffffffffffffb}}]}, 0x190) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000600)={r4, 0x40800000000}, 0x8) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b08e357c61d0278e67e7b97dc1dbf182a68cf24000000000000000bb5cdf311fc7b7558963c1163c12ae143b3a9166e7fe9bee6c1af259b33a86ca1c60ac1180d86619c05c72123855988e00982f23e66b28130aa2a3fa77d1cdbb7c198e438aa137021c62fbad25b0a7862041b7028d92d1d11a3171896f59ca6d975adf121fbc77f9f6d410", @ANYRES32=r3, @ANYBLOB="1f6f0021"], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) ioctl$KVM_SMI(r3, 0xaeb7) 2018/05/19 11:19:39 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x14, &(0x7f0000000200)=@sack_info={r1, 0x26, 0x6}, &(0x7f0000000240)=0xb) 2018/05/19 11:19:39 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x600}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x440000, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:39 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x1000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x30, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 332.282995] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 332.290615] FAT-fs (loop5): Filesystem has been set read-only [ 332.306797] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 332.315905] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 332.325334] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 332.409257] sctp: [Deprecated]: syz-executor6 (pid 21555) Use of int in maxseg socket option. [ 332.409257] Use struct sctp_assoc_value instead [ 332.412494] FAULT_INJECTION: forcing a failure. [ 332.412494] name failslab, interval 1, probability 0, space 0, times 0 [ 332.433876] CPU: 1 PID: 21558 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #58 [ 332.441156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.450527] Call Trace: [ 332.453122] dump_stack+0x1b9/0x294 [ 332.456741] ? dump_stack_print_info.cold.2+0x52/0x52 [ 332.461925] ? __save_stack_trace+0x7e/0xd0 [ 332.466241] should_fail.cold.4+0xa/0x1a [ 332.470292] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 332.475386] ? save_stack+0x43/0xd0 [ 332.479001] ? kasan_kmalloc+0xc4/0xe0 [ 332.482881] ? __kmalloc_track_caller+0x14a/0x760 [ 332.487714] ? memdup_user+0x2c/0xa0 [ 332.491413] ? strndup_user+0x77/0xd0 [ 332.495201] ? graph_lock+0x170/0x170 [ 332.499010] ? find_held_lock+0x36/0x1c0 [ 332.503087] ? check_same_owner+0x320/0x320 [ 332.507397] ? lock_release+0xa10/0xa10 [ 332.511361] ? rcu_note_context_switch+0x710/0x710 [ 332.516281] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 332.521282] ? __check_object_size+0x95/0x5d9 [ 332.525766] __should_failslab+0x124/0x180 [ 332.529993] should_failslab+0x9/0x14 [ 332.533786] __kmalloc_track_caller+0x2c4/0x760 [ 332.538447] ? strncpy_from_user+0x500/0x500 [ 332.542847] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 332.548376] ? strndup_user+0x77/0xd0 [ 332.552169] memdup_user+0x2c/0xa0 [ 332.555699] strndup_user+0x77/0xd0 [ 332.559316] __x64_sys_request_key+0x184/0x420 [ 332.563886] ? __ia32_sys_add_key+0x4e0/0x4e0 [ 332.568373] ? do_syscall_64+0x92/0x800 [ 332.572341] do_syscall_64+0x1b1/0x800 [ 332.576249] ? finish_task_switch+0x1ca/0x840 [ 332.580740] ? syscall_return_slowpath+0x5c0/0x5c0 [ 332.585680] ? syscall_return_slowpath+0x30f/0x5c0 [ 332.590605] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 332.595962] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.600799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.605974] RIP: 0033:0x455a09 [ 332.609151] RSP: 002b:00007f9524b9ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 332.616848] RAX: ffffffffffffffda RBX: 00007f9524b9f6d4 RCX: 0000000000455a09 [ 332.624115] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 332.631369] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 332.638626] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000013 [ 332.645882] R13: 0000000000000551 R14: 00000000006fc038 R15: 0000000000000001 2018/05/19 11:19:39 executing program 2 (fault-call:0 fault-nth:2): request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, &(0x7f000045c000)=0x10) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2000000000000002) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 2018/05/19 11:19:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}], 0x40, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 332.661728] sctp: [Deprecated]: syz-executor6 (pid 21562) Use of int in maxseg socket option. [ 332.661728] Use struct sctp_assoc_value instead [ 332.690596] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:39 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x84000) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x8, 0x3, 0x9cf, 0x5]}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000140)) accept$packet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x14) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000003c0)={0x9, &(0x7f0000000380)=[0x7, 0xb7, 0xfffffffffffffff7, 0x9, 0x8001, 0x10000, 0x100000001, 0x0, 0x3]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x1ff) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x200100, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000480)={0xd2, 0x9, 0x3f, "1f8bd51709e2dd19094e58380eb4174766c382108fceec74dc649a4a9ef1aad0e9cd2e756c0e909a2f2c1c3d3c25d42c4b9eccfa898eaf25108b0dce06b1dd06383ad3cc7799f07850fa36acfe05a20cb5ac8c9735bd5cf3ed25ee6578a88724455a0da2436e793b814a942b54bdaa7a9d2c1f886c776217f116abde6660cbe949289ea054787f5d3b97a38b471ceb9b71c5c367d31b14f4286718f48130dd5f1cb2bcbe021994ccc7ae397f21547f25876a8574f2841dd265acea9299042e9dbab9f5581dccdd0e5688f90802d54a55ed8b"}) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000580)={{0x10000, 0x7a, 0x3ff, 0x8, 0xfffffffffffffc00, 0x5}, 0x4, 0x0, 0x7f}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000005c0)) recvmsg(r2, &(0x7f00000007c0)={&(0x7f0000000600)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)=""/122, 0x7a}], 0x1, &(0x7f0000000740)=""/95, 0x5f, 0x517}, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000800)={0xffffffff, 0x1, {0xffffffffffffffff, 0x3, 0x9, 0x3}}) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000880)={0x3, 0x0, [{}, {}, {}]}) r5 = syz_open_dev$dspn(&(0x7f0000000900)='/dev/dsp#\x00', 0x1, 0x101000) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000940)={0x0, {{0xa, 0x4e23, 0xec5, @dev={0xfe, 0x80, [], 0x19}, 0xfffffffffffffffe}}, 0x0, 0x5, [{{0xa, 0x4e20, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x8}}, {{0xa, 0x4e24, 0x101, @remote={0xfe, 0x80, [], 0xbb}}}, {{0xa, 0x4e24, 0x5, @loopback={0x0, 0x1}, 0x81}}, {{0xa, 0x4e24, 0x8, @loopback={0x0, 0x1}, 0x4}}, {{0xa, 0x4e24, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x80000000}}]}, 0x310) bind$bt_hci(r0, &(0x7f0000000c80)={0x1f, r3}, 0xc) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/md0\x00', 0x8000, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000d00)={'bond_slave_0\x00', {0x2, 0x4e24, @rand_addr=0xff}}) syz_open_dev$sg(&(0x7f0000000d40)='/dev/sg#\x00', 0x3, 0x4000) socket$key(0xf, 0x3, 0x2) sync_file_range(r4, 0xffff, 0x1000, 0x6) socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000d80)={{0x7, 0x3f}, {0x0, 0x9}, 0xfff, 0x4, 0x4}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000e40), &(0x7f0000000e80)=0xb) 2018/05/19 11:19:39 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r0, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) 2018/05/19 11:19:39 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x600}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x440000, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 332.917469] FAULT_INJECTION: forcing a failure. [ 332.917469] name failslab, interval 1, probability 0, space 0, times 0 [ 332.928971] CPU: 1 PID: 21582 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #58 [ 332.930457] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 332.936261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.936269] Call Trace: [ 332.936297] dump_stack+0x1b9/0x294 [ 332.936320] ? dump_stack_print_info.cold.2+0x52/0x52 [ 332.936338] ? perf_trace_lock_acquire+0xe3/0x980 [ 332.936364] should_fail.cold.4+0xa/0x1a [ 332.936383] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 332.936413] ? debug_check_no_locks_freed+0x310/0x310 [ 332.943955] FAT-fs (loop5): Filesystem has been set read-only [ 332.953269] ? find_held_lock+0x36/0x1c0 [ 332.953311] ? check_same_owner+0x320/0x320 [ 332.953334] ? rcu_note_context_switch+0x710/0x710 [ 332.953349] ? save_stack+0x43/0xd0 [ 332.953366] __should_failslab+0x124/0x180 [ 333.011167] should_failslab+0x9/0x14 [ 333.014999] kmem_cache_alloc+0x2af/0x760 [ 333.019166] ? find_held_lock+0x36/0x1c0 [ 333.023247] prepare_creds+0x78/0x3e0 [ 333.025657] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 333.027055] ? abort_creds+0x170/0x170 [ 333.027080] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 333.027102] lookup_user_key+0x49b/0x13d0 [ 333.027126] ? join_session_keyring+0x340/0x340 [ 333.027143] ? __check_object_size+0x95/0x5d9 [ 333.027168] ? __might_sleep+0x95/0x190 [ 333.027185] ? key_validate+0x230/0x230 [ 333.027203] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.027219] ? memdup_user+0x6b/0xa0 [ 333.027236] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.027254] __x64_sys_request_key+0x1ed/0x420 [ 333.027271] ? __ia32_sys_add_key+0x4e0/0x4e0 [ 333.027290] ? do_syscall_64+0x92/0x800 [ 333.027308] do_syscall_64+0x1b1/0x800 [ 333.027323] ? finish_task_switch+0x1ca/0x840 [ 333.027342] ? syscall_return_slowpath+0x5c0/0x5c0 [ 333.055855] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 333.057774] ? syscall_return_slowpath+0x30f/0x5c0 [ 333.057798] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 333.057820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.057842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.057855] RIP: 0033:0x455a09 [ 333.057864] RSP: 002b:00007f9524b9ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 333.057880] RAX: ffffffffffffffda RBX: 00007f9524b9f6d4 RCX: 0000000000455a09 [ 333.057890] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 333.057899] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 333.057907] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000013 [ 333.057916] R13: 0000000000000551 R14: 00000000006fc038 R15: 0000000000000002 [ 333.183912] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 333.317290] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}], 0x30, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) socket$inet_dccp(0x2, 0x6, 0x0) dup2(r1, r0) 2018/05/19 11:19:40 executing program 2 (fault-call:0 fault-nth:3): request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:40 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x600}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x440000, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:40 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xfbffffff00000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:40 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r0, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) 2018/05/19 11:19:40 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) prctl$setptracer(0x59616d61, 0xffffffffffffffff) prctl$setptracer(0x59616d61, 0x0) 2018/05/19 11:19:40 executing program 3: r0 = socket(0x9, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x1ff, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0xfffffff5, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) 2018/05/19 11:19:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000f85000/0x2000)=nil, 0x2000}, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0x17b) [ 333.815853] FAULT_INJECTION: forcing a failure. [ 333.815853] name failslab, interval 1, probability 0, space 0, times 0 [ 333.827358] CPU: 1 PID: 21614 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #58 [ 333.834652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.844018] Call Trace: [ 333.846631] dump_stack+0x1b9/0x294 [ 333.850289] ? dump_stack_print_info.cold.2+0x52/0x52 [ 333.855505] ? perf_trace_lock_acquire+0xe3/0x980 [ 333.860466] ? kasan_check_read+0x11/0x20 [ 333.864638] ? rcu_is_watching+0x85/0x140 [ 333.868799] should_fail.cold.4+0xa/0x1a [ 333.872871] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 333.878759] ? perf_trace_lock+0x900/0x900 [ 333.883051] ? graph_lock+0x170/0x170 [ 333.886857] ? find_held_lock+0x36/0x1c0 [ 333.890933] ? check_same_owner+0x320/0x320 [ 333.895272] ? rcu_note_context_switch+0x710/0x710 [ 333.900220] __should_failslab+0x124/0x180 [ 333.904457] should_failslab+0x9/0x14 [ 333.908264] kmem_cache_alloc+0x2af/0x760 2018/05/19 11:19:40 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r0, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) [ 333.912469] ? kasan_check_write+0x14/0x20 [ 333.916724] ? do_raw_spin_lock+0xc1/0x200 [ 333.920992] key_alloc+0x41f/0x10e0 [ 333.924636] ? rcu_is_watching+0x85/0x140 [ 333.928813] ? key_user_put+0x70/0x70 [ 333.932628] ? rcu_read_lock_sched_held+0x108/0x120 [ 333.937706] ? kmem_cache_alloc+0x5fa/0x760 [ 333.942038] ? security_prepare_creds+0x94/0xc0 [ 333.946717] keyring_alloc+0x4d/0xc0 [ 333.950436] install_process_keyring_to_cred.part.3+0x87/0x100 [ 333.956531] lookup_user_key+0xcf7/0x13d0 [ 333.960701] ? join_session_keyring+0x340/0x340 [ 333.965425] ? __check_object_size+0x95/0x5d9 [ 333.969957] ? __might_sleep+0x95/0x190 [ 333.973969] ? key_validate+0x230/0x230 [ 333.977980] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.983637] ? memdup_user+0x6b/0xa0 [ 333.987384] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.992966] __x64_sys_request_key+0x1ed/0x420 [ 333.997571] ? __ia32_sys_add_key+0x4e0/0x4e0 [ 334.002094] ? do_syscall_64+0x92/0x800 [ 334.006092] do_syscall_64+0x1b1/0x800 [ 334.010012] ? finish_task_switch+0x1ca/0x840 [ 334.014525] ? syscall_return_slowpath+0x5c0/0x5c0 [ 334.019471] ? syscall_return_slowpath+0x30f/0x5c0 [ 334.024426] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 334.029814] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.034682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.039881] RIP: 0033:0x455a09 [ 334.043078] RSP: 002b:00007f9524b9ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 334.050802] RAX: ffffffffffffffda RBX: 00007f9524b9f6d4 RCX: 0000000000455a09 [ 334.058085] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 2018/05/19 11:19:40 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x600}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 334.065371] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 334.072659] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000013 [ 334.080030] R13: 0000000000000551 R14: 00000000006fc038 R15: 0000000000000003 2018/05/19 11:19:40 executing program 0: syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x4, 0x0) fanotify_mark(r0, 0x11, 0x20, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000100)={{0x3, 0x5}, {0x3, 0x6}, 0x6, 0x4, 0x9}) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x20000000) creat(&(0x7f00000004c0)='./file0\x00', 0x0) 2018/05/19 11:19:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:40 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x400) close(r1) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) signalfd(r2, &(0x7f0000000100)={0x8000}, 0x8) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/05/19 11:19:40 executing program 6: unshare(0x48000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x8a, "895af2213194ae462ba34a13e693827d18263da85a372ef8e4658429b2803c786498648122106e0e910bce0bd3c3b04c26bd6b72366ba3922f3267f2377a009e848dfaf6b0c58e3c6afbd25c36322623c0c326af60badcb881d2c16f92f29dd9d974635e69f4571b560d06ce8e5a4e0f59ce79b6b43577307028910c427d7a8bf66ea7e3080ff84d98fd"}, &(0x7f0000000100)=0x92) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x68, &(0x7f0000000140)=[@in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x1d}, 0x7fffffff}, @in={0x2, 0x4e23, @rand_addr=0x80000000}, @in={0x2, 0x4e21, @rand_addr=0x10000}, @in6={0xa, 0x4e21, 0x4, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xc00}]}, &(0x7f0000000200)=0x10) [ 334.135407] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 334.143283] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:19:41 executing program 2 (fault-call:0 fault-nth:4): request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xfbffffff}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 334.208418] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 334.218500] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 334.227507] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:41 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) [ 334.346350] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 334.443112] FAULT_INJECTION: forcing a failure. [ 334.443112] name failslab, interval 1, probability 0, space 0, times 0 [ 334.454504] CPU: 0 PID: 21659 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #58 [ 334.461800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.463012] IPVS: ftp: loaded support on port[0] = 21 [ 334.471159] Call Trace: [ 334.471187] dump_stack+0x1b9/0x294 [ 334.471207] ? dump_stack_print_info.cold.2+0x52/0x52 [ 334.471232] ? __kernel_text_address+0xd/0x40 [ 334.492315] ? unwind_get_return_address+0x61/0xa0 [ 334.497269] should_fail.cold.4+0xa/0x1a [ 334.501350] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 334.506471] ? save_stack+0xa9/0xd0 [ 334.510113] ? save_stack+0x43/0xd0 [ 334.513747] ? kasan_slab_alloc+0x12/0x20 [ 334.517900] ? kmem_cache_alloc+0x12e/0x760 [ 334.522226] ? key_alloc+0x41f/0x10e0 [ 334.526023] ? keyring_alloc+0x4d/0xc0 [ 334.529910] ? install_process_keyring_to_cred.part.3+0x87/0x100 [ 334.536050] ? lookup_user_key+0xcf7/0x13d0 [ 334.540357] ? __x64_sys_request_key+0x1ed/0x420 [ 334.545102] ? do_syscall_64+0x1b1/0x800 [ 334.549161] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.554522] ? find_held_lock+0x36/0x1c0 [ 334.558578] ? check_same_owner+0x320/0x320 [ 334.562893] ? rcu_note_context_switch+0x710/0x710 [ 334.567821] ? rcu_is_watching+0x85/0x140 [ 334.571964] __should_failslab+0x124/0x180 [ 334.576193] should_failslab+0x9/0x14 [ 334.579983] __kmalloc_track_caller+0x2c4/0x760 [ 334.584640] ? rcu_read_lock_sched_held+0x108/0x120 [ 334.589653] ? kmem_cache_alloc+0x5fa/0x760 [ 334.593969] ? kasan_check_write+0x14/0x20 [ 334.598200] ? key_alloc+0x478/0x10e0 [ 334.601994] kmemdup+0x24/0x50 [ 334.605175] key_alloc+0x478/0x10e0 [ 334.608784] ? rcu_is_watching+0x85/0x140 [ 334.612941] ? key_user_put+0x70/0x70 [ 334.616738] ? rcu_read_lock_sched_held+0x108/0x120 [ 334.621746] ? kmem_cache_alloc+0x5fa/0x760 [ 334.626067] ? security_prepare_creds+0x94/0xc0 [ 334.630738] keyring_alloc+0x4d/0xc0 [ 334.634458] install_process_keyring_to_cred.part.3+0x87/0x100 [ 334.640417] lookup_user_key+0xcf7/0x13d0 [ 334.644563] ? join_session_keyring+0x340/0x340 [ 334.649233] ? __check_object_size+0x95/0x5d9 [ 334.653719] ? __might_sleep+0x95/0x190 [ 334.657684] ? key_validate+0x230/0x230 [ 334.661668] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 334.667195] ? memdup_user+0x6b/0xa0 [ 334.670907] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 334.676453] __x64_sys_request_key+0x1ed/0x420 [ 334.681035] ? __ia32_sys_add_key+0x4e0/0x4e0 [ 334.685533] ? do_syscall_64+0x92/0x800 [ 334.689501] do_syscall_64+0x1b1/0x800 [ 334.693393] ? finish_task_switch+0x1ca/0x840 [ 334.697880] ? syscall_return_slowpath+0x5c0/0x5c0 [ 334.702816] ? syscall_return_slowpath+0x30f/0x5c0 [ 334.707754] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 334.713107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.717950] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.723121] RIP: 0033:0x455a09 [ 334.726645] RSP: 002b:00007f9524b9ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 334.734349] RAX: ffffffffffffffda RBX: 00007f9524b9f6d4 RCX: 0000000000455a09 [ 334.741617] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 334.748892] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 334.756150] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000013 [ 334.763408] R13: 0000000000000551 R14: 00000000006fc038 R15: 0000000000000004 [ 334.797516] IPVS: ftp: loaded support on port[0] = 21 [ 334.943266] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 334.950922] FAT-fs (loop5): Filesystem has been set read-only [ 334.986962] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 334.999717] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 335.007611] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 335.265398] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:42 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x90000915, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8000, 0x0) 2018/05/19 11:19:42 executing program 6: futex(&(0x7f0000000000), 0x7, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 2018/05/19 11:19:42 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:42 executing program 2 (fault-call:0 fault-nth:5): request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:42 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(0xffffffffffffffff, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x400) close(r1) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) signalfd(r2, &(0x7f0000000100)={0x8000}, 0x8) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/05/19 11:19:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 335.567738] FAULT_INJECTION: forcing a failure. [ 335.567738] name failslab, interval 1, probability 0, space 0, times 0 [ 335.579108] CPU: 1 PID: 21699 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #58 [ 335.586406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.595777] Call Trace: [ 335.598392] dump_stack+0x1b9/0x294 [ 335.602048] ? dump_stack_print_info.cold.2+0x52/0x52 [ 335.607258] ? perf_trace_lock_acquire+0xe3/0x980 [ 335.612130] ? security_key_permission+0x94/0xc0 [ 335.616914] should_fail.cold.4+0xa/0x1a [ 335.620998] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 335.626124] ? key_default_cmp+0x90/0x90 [ 335.630203] ? graph_lock+0x170/0x170 [ 335.634025] ? find_held_lock+0x36/0x1c0 [ 335.638110] ? __lock_is_held+0xb5/0x140 [ 335.642204] ? check_same_owner+0x320/0x320 [ 335.646545] ? keyring_search_iterator+0x7b0/0x7b0 [ 335.651496] ? rcu_note_context_switch+0x710/0x710 [ 335.656438] ? graph_lock+0x170/0x170 [ 335.660256] __should_failslab+0x124/0x180 [ 335.664508] should_failslab+0x9/0x14 [ 335.668423] kmem_cache_alloc_trace+0x2cb/0x780 [ 335.673114] assoc_array_insert+0xe4/0x2f50 [ 335.677451] ? lock_release+0xa10/0xa10 [ 335.681435] ? lock_downgrade+0x8e0/0x8e0 [ 335.685597] ? rcu_note_context_switch+0x710/0x710 [ 335.690538] ? refcount_add_not_zero+0x320/0x320 [ 335.695310] ? assoc_array_cancel_edit+0x90/0x90 [ 335.700080] ? down_write+0x87/0x120 [ 335.703805] ? __key_link_begin+0xa7/0x300 [ 335.708050] ? down_read+0x1b0/0x1b0 [ 335.711780] ? keyring_search_aux+0xe2/0x400 [ 335.716207] __key_link_begin+0x135/0x300 [ 335.720366] key_link+0x80/0x2b0 [ 335.723767] ? __key_link_end+0x130/0x130 [ 335.727933] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 335.733482] ? search_process_keyrings+0x10e/0x420 [ 335.738425] request_key_and_link+0x3c6/0x1780 [ 335.743026] ? call_sbin_request_key+0xf00/0xf00 [ 335.747794] ? rcu_note_context_switch+0x710/0x710 [ 335.752744] ? __might_sleep+0x95/0x190 [ 335.756731] ? down_read+0xaf/0x1b0 [ 335.760362] ? key_type_lookup+0x1f/0xd0 [ 335.764430] ? __down_interruptible+0x6e0/0x6e0 [ 335.769108] ? keyring_alloc+0xc0/0xc0 [ 335.773002] ? key_default_cmp+0x90/0x90 [ 335.777079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 335.782648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.788193] __x64_sys_request_key+0x31c/0x420 [ 335.792784] ? __ia32_sys_add_key+0x4e0/0x4e0 [ 335.797289] ? do_syscall_64+0x92/0x800 [ 335.801280] do_syscall_64+0x1b1/0x800 [ 335.805178] ? syscall_return_slowpath+0x5c0/0x5c0 [ 335.810116] ? syscall_return_slowpath+0x30f/0x5c0 [ 335.815080] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 335.820455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.825309] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.830506] RIP: 0033:0x455a09 [ 335.833698] RSP: 002b:00007f9524b9ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 335.841415] RAX: ffffffffffffffda RBX: 00007f9524b9f6d4 RCX: 0000000000455a09 [ 335.848691] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 335.855969] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 335.863244] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000013 [ 335.870519] R13: 0000000000000551 R14: 00000000006fc038 R15: 0000000000000005 2018/05/19 11:19:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 2018/05/19 11:19:42 executing program 6: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x80000000, &(0x7f00000000c0)=0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bind$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @any=0x2000000}, 0xd) 2018/05/19 11:19:42 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7}, [@IFLA_IF_NETNSID={0x8, 0x2e}]}, 0x28}, 0x1}, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000100)={0x8001, 0x6, 0x2, 0x400, 0x1ff, 0x1ff}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in=@rand_addr=0x9, @in=@multicast2=0xe0000002, 0x4e21, 0xe598, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x5c, r2, r3}, {0x0, 0x200, 0x1, 0x20, 0x0, 0xffffffffffffffff, 0x1000, 0xfffffffffffffffb}, {0x3, 0x3e6, 0x80000001, 0x82}, 0x2, 0x0, 0x2, 0x1, 0x0, 0x3}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d3, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x34ff, 0x2, 0x0, 0xfffffffffffffffb, 0x1, 0xffffffffffffde49, 0x8}}, 0xe8) 2018/05/19 11:19:42 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:42 executing program 2 (fault-call:0 fault-nth:6): request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 335.997299] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 336.004919] FAT-fs (loop5): Filesystem has been set read-only [ 336.025540] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x40000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 336.064540] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 336.072419] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:43 executing program 6: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x80000000, &(0x7f00000000c0)=0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bind$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @any=0x2000000}, 0xd) [ 336.183140] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 336.264804] FAULT_INJECTION: forcing a failure. [ 336.264804] name failslab, interval 1, probability 0, space 0, times 0 [ 336.276174] CPU: 1 PID: 21731 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #58 [ 336.283452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.292821] Call Trace: [ 336.295438] dump_stack+0x1b9/0x294 [ 336.299075] ? dump_stack_print_info.cold.2+0x52/0x52 [ 336.304273] ? __save_stack_trace+0x7e/0xd0 [ 336.308612] should_fail.cold.4+0xa/0x1a [ 336.312680] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 336.317795] ? save_stack+0x43/0xd0 [ 336.321436] ? kasan_kmalloc+0xc4/0xe0 [ 336.325378] ? kmem_cache_alloc_trace+0x152/0x780 [ 336.330232] ? assoc_array_insert+0xe4/0x2f50 [ 336.334746] ? __key_link_begin+0x135/0x300 [ 336.339083] ? key_link+0x80/0x2b0 [ 336.342618] ? graph_lock+0x170/0x170 [ 336.346415] ? find_held_lock+0x36/0x1c0 [ 336.350474] ? __lock_is_held+0xb5/0x140 [ 336.354561] ? check_same_owner+0x320/0x320 [ 336.358897] ? rcu_note_context_switch+0x710/0x710 [ 336.363859] ? assoc_array_subtree_iterate+0x670/0x670 [ 336.369148] __should_failslab+0x124/0x180 [ 336.373396] should_failslab+0x9/0x14 [ 336.377208] kmem_cache_alloc_trace+0x2cb/0x780 [ 336.381894] assoc_array_insert+0x82a/0x2f50 [ 336.386295] ? lock_release+0xa10/0xa10 [ 336.390277] ? check_same_owner+0x320/0x320 [ 336.394612] ? lock_downgrade+0x8e0/0x8e0 [ 336.398860] ? rcu_note_context_switch+0x710/0x710 [ 336.403788] ? refcount_add_not_zero+0x320/0x320 [ 336.408560] ? assoc_array_cancel_edit+0x90/0x90 [ 336.413341] ? down_write+0x87/0x120 [ 336.417077] ? __key_link_begin+0xa7/0x300 [ 336.421340] ? down_read+0x1b0/0x1b0 [ 336.425063] ? keyring_search_aux+0xe2/0x400 [ 336.429476] __key_link_begin+0x135/0x300 [ 336.433631] key_link+0x80/0x2b0 [ 336.437030] ? __key_link_end+0x130/0x130 [ 336.441177] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 336.446710] ? search_process_keyrings+0x10e/0x420 [ 336.451642] request_key_and_link+0x3c6/0x1780 [ 336.456224] ? call_sbin_request_key+0xf00/0xf00 [ 336.460975] ? rcu_note_context_switch+0x710/0x710 [ 336.466076] ? __might_sleep+0x95/0x190 [ 336.470052] ? down_read+0xaf/0x1b0 [ 336.473668] ? key_type_lookup+0x1f/0xd0 [ 336.477723] ? __down_interruptible+0x6e0/0x6e0 [ 336.482396] ? keyring_alloc+0xc0/0xc0 [ 336.486284] ? key_default_cmp+0x90/0x90 [ 336.490348] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 336.495882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.501417] __x64_sys_request_key+0x31c/0x420 [ 336.505998] ? __ia32_sys_add_key+0x4e0/0x4e0 [ 336.510494] ? do_syscall_64+0x92/0x800 [ 336.514465] do_syscall_64+0x1b1/0x800 [ 336.518343] ? finish_task_switch+0x1ca/0x840 [ 336.522832] ? syscall_return_slowpath+0x5c0/0x5c0 [ 336.527756] ? syscall_return_slowpath+0x30f/0x5c0 [ 336.532698] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 336.538248] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.543105] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.548288] RIP: 0033:0x455a09 [ 336.551471] RSP: 002b:00007f9524b9ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 336.559174] RAX: ffffffffffffffda RBX: 00007f9524b9f6d4 RCX: 0000000000455a09 [ 336.566438] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 336.573708] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 336.580969] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000013 [ 336.588229] R13: 0000000000000551 R14: 00000000006fc038 R15: 0000000000000006 [ 336.771353] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 336.779142] FAT-fs (loop5): Filesystem has been set read-only [ 336.828515] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 336.840858] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 336.859811] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:43 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:43 executing program 0: r0 = socket$inet(0x2, 0x805, 0x0) sendto$inet(r0, &(0x7f0000000080)="e68c698d97cffbbd4edd9107119c7f4f0040fb69d934e497b1a5a62852d72827e06ef6b3160b196bc6ce7631bf143b60daaff1fc72909031bb82ee9925320f9799aa2d3033ba87b08797ba070fa523954787a4a69d17205be3fbd0c91335373c4993e6f043682afdc04115dc0a15e24e8dd50d3bfdf7ab4ea3790325ea96dc16f6619724d479216439342395343299d7739412b5043b7cbca4bfd5d490808a6258e49ff4a8446d8f4ed645f8179c6ab527c0f27c6652d095949a0bfe66209575dd8f478fa8633f3ea5313d0673f05f8ac9cfb3cbfce3d9436218e39b248845bf41f22e594971fd1b8974d0f4", 0xec, 0x4c000, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x100}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000002c80)=[{&(0x7f00000015c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000002980)=[{&(0x7f0000001980)='|', 0x1}], 0x1, &(0x7f0000002b80)}], 0x1, 0x0) 2018/05/19 11:19:43 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x100, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101800, 0x0) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, &(0x7f0000000080)={{0x7, 0x0, 0x8000000000000000, 0x0, 0x9}}) 2018/05/19 11:19:43 executing program 2 (fault-call:0 fault-nth:7): request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:43 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x1000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:43 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0xa912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x9, &(0x7f0000001740)=[{&(0x7f0000000280)="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", 0x1000, 0x4}, {&(0x7f0000000040)="735fa36164de7bdf034f279c89b922b64022f5136a129bcbc907494de4f84a3edd9fd92f80801571ac03cca8d0a6fb978489533f5edec8e7e3f837b24c161ea7da0120d58130e0383105fcecc4ece2638cea6cdd5921cdad22b5723191b4885e1820829c837cf471791c1c1d9b104326504c19351dbbc2615e1e84eeb328656e6afe7d56f37158e2781146302a6ce920fa2a1497146bff548026621a000dc7dc86a42e95ae11eb5e0e140949453890fe1fb569fc4261dc726a5c97f400609ef920b997c9b1d5195d95228d266d23c619", 0xd0, 0x7f}, {&(0x7f00000012c0)="daa94c88ca1101dfd1698c58fc5ec2eee33bfbdc7a493b57b81e146828dc25eea80e07af38a8d05130656a482343916c911707ca38002486eed0917559c8809fd373311289c417a1a84b99498cb7e502e1366c0f2794b527f12a17ee0b999aadbcdf280864caf534ca9ce6751044fba498b518c207c2e3f34ec527bd5710e4670731fc70b0a13840f043c1018ac59f7234d138c60998f4880519b76cadebac7868aefaaba1b6698795bd4402aefd931d1e07d3383d69e2631a03eb079b64e4265df4de19e59b09354d9124d802f0bfcc167c43068a9332d4195f9f0ba96f1673603155f023f64b73", 0xe8, 0x5}, {&(0x7f00000001c0)="b83fbecb9a8ce3bf34e21fe58e0dd9571639747e7da91e46138bb8692ff3da101a5adc01e66794091c6139a109624de542b4e63b32933916e2b9555bc9acaaae62c99b29a02e66714287528524cd9325fa20a5", 0x53, 0x4}, {&(0x7f00000013c0)="46de5aef57c9a3511aad01ba27d8ffe459f4547f", 0x14, 0xf8c}, {&(0x7f0000001400)="690170b9163740fc2f6cb3363f1539432f1c924200369bacb303ae44349f9af72c78935653f1278b9bd3efe8b62ece8629d3577863e6572b13259168797e1f1cbe53d7d228df4838ecc25c597b3457ca519c4eed10e9fda3e077e4761655ba1f4f5c10bc643bd86d377c9d152c59e1a306c7ff961fb96f7df9cf9ee28288add5ba12f14af59cfc22889ee190907c4ff101661d", 0x93, 0x7ff}, {&(0x7f00000014c0)="165d43ba4db4492e9fe19d3b817e31398e4bbbafa71608660db5cd00445eda649b813e1ce6745be5a3066837b873394450c9f08578ccca15026ebf570c0e8721cd25331ea08f056a6341e94ed5a3ac839043320967f51842a804a17136f8538c2bc3f9898539d9deb5c281ac7cf8ab584999af0c6ddca45928d82aa068d8555b5c4446c472ecff6ec2a76a7ebef0446f405c3b6ad2f750fe8127e46780541b73c35be841574a4174ffc3fc2fe3e3f828729fe68d", 0xb4, 0x1}, {&(0x7f0000001580)="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", 0xfc}, {&(0x7f0000001680)="184d4957dda2937af648212d90003c3bfcc185beaf2e72e76dd8278ad04f25a312119621501dc625443a7589a350a91793036d049ad316aef3659cb66ad6310dce1fd402bb51d3d70d0a4581c4d5ade4f56d6a8f917e9655798df657fe9c57a8cd10f973ae28d751ca55c75411837b3adc53847985f164ceda5c43b65d6d0e579fd2d4002903c59a00ba6af1259affc7fc7f091a3d20", 0x96, 0xffffffff}], 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="6c6f63636f6f6b69652c2d2c0051755a67473198be68f22f141658c81278f3253e27079aaaad2faf498fd57973f841808e845732a68b292f0a450f1099c1cc6edcaee6d23808442ba48504304d91c8a996a2dabe687ba8472bbe03d43d521ce103f6f2b49c7e4e4d3484b0d1f81a4e9b"]) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000019c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000001ac0)=0xe8) getgroups(0x6, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) syz_fuseblk_mount(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)='./file0\x00', 0x4001, r1, r2, 0x7, 0x4062, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000001b40)={{0xa, 0x4e21, 0xf70, @empty, 0x1}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x20}, 0x5}, 0x18, [0x0, 0x3ff, 0x8, 0x8, 0x7fffffff, 0x1, 0x6585, 0x7]}, 0x5c) connect$inet6(r0, &(0x7f0000001280)={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0xc000000000000}, 0x1c) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$mouse(&(0x7f00000018c0)='/dev/input/mouse#\x00', 0x10000, 0x400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000001900)={{0x2, 0x0, 0x7, 0x3, 0x6}}) 2018/05/19 11:19:43 executing program 1 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 336.966143] FAULT_INJECTION: forcing a failure. [ 336.966143] name failslab, interval 1, probability 0, space 0, times 0 [ 336.977482] CPU: 0 PID: 21760 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #58 [ 336.984760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.994122] Call Trace: [ 336.996718] dump_stack+0x1b9/0x294 [ 337.000340] ? dump_stack_print_info.cold.2+0x52/0x52 [ 337.005526] ? debug_check_no_locks_freed+0x310/0x310 [ 337.010721] should_fail.cold.4+0xa/0x1a [ 337.014774] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 337.019874] ? lock_downgrade+0x8e0/0x8e0 [ 337.024018] ? lock_release+0xa10/0xa10 [ 337.027984] ? check_same_owner+0x320/0x320 [ 337.032297] ? find_held_lock+0x36/0x1c0 [ 337.036356] ? check_same_owner+0x320/0x320 [ 337.040692] ? rcu_note_context_switch+0x710/0x710 [ 337.045618] __should_failslab+0x124/0x180 [ 337.049868] should_failslab+0x9/0x14 [ 337.053660] __kmalloc+0x2c8/0x760 [ 337.057190] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 337.062730] ? sock_kmalloc+0x14e/0x1d0 [ 337.066800] sock_kmalloc+0x14e/0x1d0 [ 337.070621] ? __sk_mem_schedule+0xe0/0xe0 [ 337.074852] ? __fget+0x40c/0x650 [ 337.078301] ___sys_sendmsg+0x2de/0x940 [ 337.082268] ? copy_msghdr_from_user+0x560/0x560 [ 337.087046] ? __fget_light+0x2ef/0x430 [ 337.091015] ? fget_raw+0x20/0x20 [ 337.094478] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 337.100006] ? sockfd_lookup_light+0xc5/0x160 [ 337.104500] __sys_sendmmsg+0x240/0x6f0 [ 337.108467] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 337.112781] ? __lock_is_held+0xb5/0x140 [ 337.116857] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 337.122387] ? fput+0x130/0x1a0 [ 337.125653] ? ksys_write+0x1a6/0x250 [ 337.129443] ? __ia32_sys_read+0xb0/0xb0 [ 337.133518] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 337.138356] __x64_sys_sendmmsg+0x9d/0x100 [ 337.142584] do_syscall_64+0x1b1/0x800 [ 337.146462] ? finish_task_switch+0x1ca/0x840 [ 337.150956] ? syscall_return_slowpath+0x5c0/0x5c0 [ 337.155879] ? syscall_return_slowpath+0x30f/0x5c0 [ 337.160811] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 337.166167] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 337.170999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 337.176182] RIP: 0033:0x455a09 [ 337.179362] RSP: 002b:00007fccb3a68c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 337.187065] RAX: ffffffffffffffda RBX: 00007fccb3a696d4 RCX: 0000000000455a09 [ 337.194329] RDX: 0000000000000001 RSI: 0000000020000880 RDI: 0000000000000014 [ 337.201588] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 337.208849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 337.216104] R13: 000000000000057e R14: 00000000006fc470 R15: 0000000000000000 [ 337.248687] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 337.260892] gfs2: invalid mount option: - 2018/05/19 11:19:44 executing program 1 (fault-call:2 fault-nth:1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:44 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 337.265159] gfs2: can't parse mount arguments 2018/05/19 11:19:44 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e6661020a0204010a0200027400f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="dc"]) [ 337.314540] gfs2: invalid mount option: - [ 337.318796] gfs2: can't parse mount arguments 2018/05/19 11:19:44 executing program 6: r0 = socket(0x1, 0x200000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'veth1_to_bridge\x00'}}, 0x1e) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffc, 0xa646fcd5666746a3) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) prctl$setptracer(0x59616d61, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f0000053000)=[{0x26, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0x2d7) 2018/05/19 11:19:44 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1bee, 0x3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) r2 = getegid() getgroups(0x1, &(0x7f0000000280)=[r2]) fchown(r0, r1, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e24, 0x74, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, {0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x16}, 0xc6}, 0x0, [0x10001, 0x5, 0xff, 0x1, 0x5, 0xffffffff80000001, 0x4, 0xffffffff]}, 0x5c) keyctl$set_reqkey_keyring(0xe, 0x800000004) [ 337.624435] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 337.632099] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:19:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0xb, 0x400000) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{}, {0x77359400}}, 0x100) r1 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000600)=@broute={"62726f7574650400", 0x20, 0x2, 0x2b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000001100000000000000000074756e6c30000000000000000000000067726530eeff0000000000000000000065716c0000000000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa000000000000000000a0000000d00000000001000063707500e5000000000000000000000000000000000000000000000000000000080000000000000000000000000000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000004e4651554555450000000000000000000000000000000000000000000000000008000000000000000000000000000000090000000000000000006970365f7674693000000000000000006966623000000000000000000000000065727370616e3000000000000000000069706464703000000000000000000000aaaaaaaaaa00000000000000000000000000000000000000000070000000a8000000f80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000fdffffff000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000e5000000000000000000000000000000000000000000000000000000000002000000feffffff00000000c6bfaa5678bef658b5400c6d704e1493dec8932215f76dfee3ddb14313db21fa0b2d2cf17e8de308cd0fb19936727005f4b5d1ae6053f2df1d3e84a41ff09772fc7c692beb2d64f6fe49081bff20190ca139d130ab20be26575d53114556e3344b493510d63dbc6fb5dd71d8a145e00b5cae1eda046d15f4c3895c8e4208"]}, 0x3ae) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140)=0x4c, 0x4) 2018/05/19 11:19:44 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x4e22}}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000340)={r2, 0x2}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x2000000000080) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x764, 0x0, 0xa, 0xe, 0x1, "0ca098b063686bc41dbf477d2fd76b389f464682dc068c6253b47f364062e3f7e43b420e751510ecbdc5da84208b975c22ab8a940b59b3d3e735ef3639e331b9", "f39bc2aad40ea7ca066be263424aa621214f2fada78c6c143505654f97fddbbf85f7870f408adda7157d7fbb294684526007edd5d67ad6725bfb41e9dfa1e344", "e87b35ad6b0d1fc2dcdcac69d47136e9a8ac51a288862f479bfe3fc5201d2b15", [0x5, 0x100000001]}) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x20) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[]) 2018/05/19 11:19:44 executing program 2: request_key(&(0x7f0000000000)='.ser\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:44 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:44 executing program 6: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x5c0, &(0x7f0000000040), 0x8) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0xffffffffffffff9c, 0x7, 0x1, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000001c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000a7eff4)) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x20000000800) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000080)={0x7}) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0006000000"], 0xc) 2018/05/19 11:19:44 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xffffff0f}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:44 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 337.681661] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 337.690893] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 337.705161] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:44 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x800454cf, 0x6f3000) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x80000000, 0x24000) getpeername$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={@local={0xfe, 0x80, [], 0xaa}, 0x31, r2}) [ 337.855288] kernel msg: ebtables bug: please report to author: Wrong len argument [ 337.887458] kernel msg: ebtables bug: please report to author: Wrong len argument [ 337.888475] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x2000000, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:44 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:44 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925000800040008000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x1, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x1}}, 0x6, 0x7fffffff, 0x3, "518871e1439184cc007900a88f0ba499a5bca93ea018e17f2caf3d794f484658faeba05808ede5cd818ebb896a55c25d639a1da363f48426f0c2e7f28c792e7bdc0bb4ac208bf81ea15e944a46217501"}, 0xd8) 2018/05/19 11:19:44 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:44 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:44 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x1, 0x5, "be50c62df56f78a67bd054ae410184bfeda5683ff23c57078d7ba618f0b2c0b042ec97b19b1b8531bca3121f", 0x800}, 0x81, [0x3, 0x4, 0xffffffffffff0000, 0xa6b, 0x400, 0x8000, 0xffffffffffffdbf9, 0xcb12, 0x8c48, 0x0, 0x3, 0x6, 0xfffffffffffffffa, 0x1, 0xa017, 0x1, 0x2, 0x5, 0x6000000, 0x8000, 0x2, 0x9, 0xfffffffffffffff9, 0x591, 0x1ff, 0x100000001, 0xb7ab, 0x6341, 0x318, 0x400000, 0x4, 0x48, 0x3f, 0x3, 0x5, 0x7f1, 0xf782, 0xcd, 0x3, 0x7, 0x5a604ae6, 0x78a5, 0xb, 0x9, 0x1, 0x7fff, 0x0, 0xfff, 0x0, 0x5, 0x65eb, 0x10001, 0x4, 0x1ec09646, 0x8, 0x9, 0x3, 0xdf1, 0x8, 0x7, 0xf2, 0x80, 0x2, 0x2, 0x9, 0x1, 0x7ff, 0x2, 0x1000, 0x6, 0x10001, 0x3, 0x9, 0x7fff, 0x133, 0x1, 0x1f, 0x8, 0x0, 0x3f, 0xffffffffffffed84, 0x81, 0x1, 0x1, 0x2, 0x3, 0x6, 0x6, 0x7fff, 0xec, 0x6f, 0x7fff, 0x3f, 0x3, 0x400, 0x5, 0x3, 0x8, 0x9, 0x6, 0x5, 0x1, 0x1, 0x0, 0x1, 0x7, 0x7, 0xff, 0xb7, 0x0, 0x1000, 0x4, 0x5, 0x40, 0x5, 0xfffffffffffff51b, 0x80, 0x7, 0xae, 0x7, 0x1, 0xfffffffffffffff9, 0xfffffffffffffff8, 0x4, 0x1, 0x7, 0x0, 0x100000000]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r2, &(0x7f0000004e00)={0x2, 0x1000000004e20, @loopback=0x7f000001}, 0x10) sendmmsg(r2, &(0x7f0000009b00)=[{{&(0x7f0000004440)=@hci={0x1f}, 0x80, &(0x7f00000046c0)=[{&(0x7f00000044c0)='*', 0x1}], 0x1, &(0x7f0000004e40)}}], 0x1, 0x4008040) sendto$inet(r2, &(0x7f0000000000)="b7", 0x1, 0x4000000, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/05/19 11:19:45 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:45 executing program 3: clone(0x31fe0bac83450994, &(0x7f0000000000), &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000280)) [ 338.221179] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 338.228879] FAT-fs (loop5): Filesystem has been set read-only [ 338.281115] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 338.290460] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 338.298560] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 338.442332] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x803e0000, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:45 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:45 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) r1 = getpid() r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)="14"}, 0x20) 2018/05/19 11:19:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xf00}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:45 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setregset(0x4205, r1, 0x7, &(0x7f0000000100)={&(0x7f0000000040)}) 2018/05/19 11:19:45 executing program 2: request_key(&(0x7f0000000000)="75736572ff", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:45 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/18) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x4, 0x6}) r2 = msgget$private(0x0, 0x0) msgctl$MSG_INFO(r2, 0xc, &(0x7f00000000c0)=""/239) r3 = gettid() process_vm_readv(r3, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001600)=[{&(0x7f0000001440)=""/146, 0x92}, {&(0x7f0000001500)=""/202, 0xca}], 0x2, 0x0) utime(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x1, 0x1f}) getsockname$ipx(r1, &(0x7f00000016c0), &(0x7f0000001700)=0x10) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000001740)={0x7}) nanosleep(&(0x7f0000001780)={0x0, 0x989680}, &(0x7f00000017c0)) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001800)=""/40) getpeername$ipx(r1, &(0x7f0000001840), &(0x7f0000001880)=0x10) r4 = add_key$keyring(&(0x7f00000018c0)='keyring\x00', &(0x7f0000001900)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000001940)=0x401, 0x8) setsockopt$inet6_buf(r1, 0x29, 0xff, &(0x7f0000001980)="071f1869ae560108d16094da613015", 0xf) rmdir(&(0x7f00000019c0)='./file1\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0}, &(0x7f0000001a40)=0xc) getgroups(0x9, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0]) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001ac0)={r3, r6, r9}, 0xc) ioctl$KDSKBLED(r1, 0x4b65, 0x2cad) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000001b00)={'NETMAP\x00'}, &(0x7f0000001b40)=0x1e) shmctl$IPC_SET(r0, 0x1, &(0x7f0000001b80)={{0x0, r6, r7, r6, r8, 0x4, 0x44b4}, 0x6, 0x1e, 0x7d, 0x0, r3, r5, 0x200}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000001c00)) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000001c40)={0x3c400000000000, 0x3, 0xffffffffffffffe1, 0x3, 0x8, 0x32}) getgid() [ 338.839683] QAT: Invalid ioctl [ 338.849923] QAT: Invalid ioctl [ 338.867114] QAT: Invalid ioctl 2018/05/19 11:19:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x100000000000000, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:45 executing program 2: request_key(&(0x7f0000000000)="7573657202", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 338.904800] QAT: Invalid ioctl [ 338.912410] QAT: Invalid ioctl [ 338.933716] QAT: Invalid ioctl 2018/05/19 11:19:45 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x73}, 0x2c) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x10000, 0x200) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x9, 0x14, 0x800, 0xb6, 0xe00a, 0x2, 0x7d6, 0x2, 0x200, 0x3, 0x0, 0x3ff}) ioctl$TIOCCBRK(r0, 0x5428) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x28842, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x0, 0x500, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) [ 338.969346] QAT: Invalid ioctl [ 338.972909] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 338.980472] FAT-fs (loop5): Filesystem has been set read-only [ 339.004163] QAT: Invalid ioctl 2018/05/19 11:19:45 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 339.019759] QAT: Invalid ioctl [ 339.031271] QAT: Invalid ioctl [ 339.048494] QAT: Invalid ioctl [ 339.064787] QAT: Invalid ioctl [ 339.074666] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 339.086266] QAT: Invalid ioctl [ 339.102208] QAT: Invalid ioctl [ 339.106574] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000680)="c626262c8523bf012cf66f") r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x103fffa, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xb4, "778dd436a391da69a53d57185c2606b7a045afa6c7c453d83f08989655cb72cab4254515a89b2e69943972dcee324f67ef17841f47336393200b1f3ea02930423f0442e30f3ef7e34d6427872d6d62b604b84a780d6e410c6baab3aa46ef5bb34b0b0df274de4431ac760fe2ceee40ead82c2ca5beca58409dcf5d5b0bae5935542d0065041b4248019cc946cbc185671ded4516385cfec0352f8d59ffb9cfe36db3d073f3adbb47aa3c72234a6e268c845d8050"}, &(0x7f0000000080)=0xbc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in={{0x2, 0x4e20, @rand_addr=0x101}}}, &(0x7f0000000300)=0x84) write$eventfd(r0, &(0x7f0000000000), 0xff6b) ioctl$KVM_NMI(r0, 0xae9a) syz_fuseblk_mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 339.147413] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 339.346681] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x1000000, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:46 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x14, 0x0, 0x0, @multicast1=0xe0000001, "5c6a3ba2e98dc2ae91592abc452ec8ea496a02e8"}}}, 0x3a) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x4, 0x4) 2018/05/19 11:19:46 executing program 3: lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) r0 = getpgrp(0x0) r1 = getpgrp(r0) syslog(0x9, &(0x7f0000000380)=""/241, 0xf1) r2 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x10000, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xf0, 0x8004, 0x800, 0x0, 0x8, 0x3, 0x80, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20}}}, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, r2, 0x0) sched_rr_get_interval(r1, &(0x7f0000000500)) 2018/05/19 11:19:46 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:46 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 2018/05/19 11:19:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x6}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:46 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x6}, &(0x7f0000000040)=0xfffffffffffffe0a) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x84) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x80, 0x0) ioctl$sock_netrom_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0xffffffffffffff9c, 0x6, 0xc435cbcea5475446, 0x8000000000, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x90000001}) 2018/05/19 11:19:46 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:46 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 2018/05/19 11:19:46 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x200000000000000, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:46 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:46 executing program 3: lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) r0 = getpgrp(0x0) r1 = getpgrp(r0) syslog(0x9, &(0x7f0000000380)=""/241, 0xf1) r2 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x10000, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xf0, 0x8004, 0x800, 0x0, 0x8, 0x3, 0x80, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20}}}, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, r2, 0x0) sched_rr_get_interval(r1, &(0x7f0000000500)) 2018/05/19 11:19:46 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x1, 0x4, 0x81000000004, 0x8000000007}, 0x2c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7fffffff) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, r0}], {0x95}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096}, 0x48) 2018/05/19 11:19:46 executing program 6: r0 = socket(0x14, 0x100080803, 0x2) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x6202}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x0, @loopback=0x7f000001}}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000180)) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x0, 0x1, {0xa, 0x4e24, 0x100, @mcast2={0xff, 0x2, [], 0x1}, 0x8000}}}, {&(0x7f00000000c0)=""/141, 0x8d}, &(0x7f0000000000), 0x1}, 0xa0) r2 = dup3(r0, r1, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 2018/05/19 11:19:46 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:46 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 339.940714] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 339.948428] FAT-fs (loop5): Filesystem has been set read-only [ 340.025711] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3d000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:46 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:46 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, {0x7, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x2, {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 'bpq0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x5452, &(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) close(r0) 2018/05/19 11:19:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x249, 0x40}, 0x0) 2018/05/19 11:19:46 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x803e000000000000, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:46 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:46 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0xfffffffffffffed7) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f00000000c0)=""/3) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)={0x10c, r2, 0x4, 0x70bd29, 0x25dfdbff, {0xc}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x16}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x48}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x10c}, 0x1}, 0x4004800) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a00000000000000ff010000000000000000000000000001000000000000000000003440f01c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff020000000000000000000000000001fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x310) [ 340.072365] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 340.080149] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x803e, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:47 executing program 3: r0 = socket(0x2, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = semget(0xffffffffffffffff, 0xf0cb239183f4c4c5, 0x200) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0x9, 0x2, 0x0, 0x60000000000000, 0x0, 0x2, 0x6, 0x0, 0x80}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) sendfile(r2, r2, &(0x7f0000000240), 0x20000102000007) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), 0x4) [ 340.199459] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:47 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:47 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00009ecff8), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/05/19 11:19:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x11, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r2, 0x300, 0x70bd25, 0x25dfdbfb, {0xf}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 2018/05/19 11:19:47 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0, 0xfeffff00000000}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:47 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 340.462386] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 340.470924] FAT-fs (loop5): Filesystem has been set read-only [ 340.491173] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 340.513340] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 340.526491] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 340.634313] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x0, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done={0x4008630a}], 0xfffffffffffffe15, 0x0, &(0x7f0000000440)}) 2018/05/19 11:19:47 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x4000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:47 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:47 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0, 0x1000000}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:47 executing program 6: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, r1) 2018/05/19 11:19:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x3e80, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:47 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:47 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x7fc) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f00000001c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004000c00160000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x7}, 0x8) [ 340.938690] binder: BC_ATTEMPT_ACQUIRE not supported 2018/05/19 11:19:47 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:47 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={"06686230d6072e8308000800fb0600"}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x100, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)={r3, r4, 0xfffffffffffffc00}) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000100)={0x8, 0x7e4, 0x200}) 2018/05/19 11:19:47 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:47 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0, 0x2000000}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 340.967856] binder: 22062:22072 ioctl c0306201 20000540 returned -22 2018/05/19 11:19:47 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='mime_typ)em0eth0\x00') 2018/05/19 11:19:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653004002000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x101340, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000580)={"bf360888a5975a052ae1657aca246b783fe6c4591569f209c1e638f8eaea84d7ba75d53ec2eaaa5825b9240e7f544e62238c411e6d46e20c1360463ecd5ea2289652344a84d1fab1e10cf7c2c446f318ef9d4b65993f1a52239d4f7ae0ba210ace1f15ebd24fe0a80f44d3758212a421737ce31ce880cafb443de81913039aebdd78dc8a9b43ded7f72f657ac27d6673e70814785e1802ad4d0979b7a965abfaab84c8c9bff9849c82c74f81ac8ae5d186e3b8d56f6b4608643c1c6af7207879411b390dcc9b800929b0e7701e7f62d98fc33468f59c4077b23c420f041eab1ffb014859f00d657605047b4d1bb6918398e62d6da1604167c9c4847fe4aca6685d3bfa4e576cbbbb45d3aea9345d8d788d967752c055148b205f8aef6cd81c2c6cd369726f41b5cfc4cbcb41cbb97ba5f38c02881b304c975d4fba91326ff63fedad141d29310a38f8084abcbc082046f0b3bf627d9e2316cf5a2e4d86a19befe9b75bb5d94c12e91c208b64cdbd96802aa023c9f5800438a4506074d8c4e6d598fee766e42733ecfa20a7348fb571f119fbd5c87d6ca040d9c7b7acb8df7574de0985201329443e46fe8a673c9a8c840d6e652d4c55a1d42a799a61ab0a1647364516fa24019d6131017735969bf59db9445e211a3123abb27861d79852e75bf1d04a7e118438849f6a72d3de723a2b50f8f7afe01a7c13de5f28dfb92f87a5b12628b91b5a4dc8e6f5359afa5971878f45fa4d509733fe94c2a66c20a1805fd01c59ac3ab7ea82bc4504e43bb8229ce82847d45ac8bcea2bc3f1c197eca5fa45429c234adc0f5f693e29dcd5ea485a30b5de9ca5aeca373d79150dd6366cdf7df83c65f9d8a34ef735d5f971f11adad5ad10711fcc55d4d05418754e529451f6ffdee5b4a0d829f1c85edfc927270a61da1c54acc733474c405e759332dd07434d455999781e814dd1897cf3abf765112a6e1e602d7b67dc95796b215ea45aa32359377c2dfdb019fdef1c73502c89c41a61ff7aeefce29f1a1a8a383187d31595cef964f9081bda17f32454ffc5ce630648a8971332868d19211b398a6de6af18c2b7a964b7ffdb2de0d46a9f000e8969fc97256262b204035f2dba73d2b3a2c953c6e8d1a15cae7b32c5ec837a0f2304844f497a2e9dbeff550803e7d81d9e318137e2c03ec1efa6110c7728703ee172af3d848b43d923edbe0e897c52a5962a043508616a100aeb22496b63affa76f54afdba0e63c3ad822441d18e1e86ae3e1f80b3d49b1a9f9c96e42fcaf888ddf888fa1601383679ab59914ebf6614b876f74685b7ff2c4f97fd1b7db379cebb03b0c3f7bd8feedc7b1e0f1d8e9be01c6ddf476b7317978867fa4629b8decefac6ed4fb78165a1017972c8e05a25c588ab804626aedbf602464faa3faa22a0ceea5d4c660439e1e292c4ab03ca73a3"}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)={{}, {0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {0x2, 0xf002, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xf000, 0x11f004, 0xf}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 341.134177] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 341.142133] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:19:48 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:48 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0, 0xfeffff}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 341.249420] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 341.316268] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 341.324203] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:48 executing program 6: ioprio_set$pid(0x0, 0x0, 0x80000001) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x2a00) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/239, 0xef}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f00000002c0)=""/103, 0x67}], 0x5) 2018/05/19 11:19:48 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x600}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0xb8e2) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(xtea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x10) 2018/05/19 11:19:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x64, 0x3ff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = socket(0x2, 0x2, 0x0) sendfile(r0, r0, 0x0, 0xffff) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x80) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xa, 0x18, "300ea40679f1385c7a825aa94f4f50dd7de7fbde38b6f74d4c2ceadaeb0dccac172d439d3e0dd46a8a378790ed8aa7593886dcad2b77b3beb93526ad62b870d1", "8505b0e51c2b9f11d5e715adbe33b26af37d2b37cd1aaae5ee0803f491ce6a39", [0x1]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000000)="207cbe518e1a70006461a6a7015c8d168ee04ce93db1320500c1c48149d3de855b07dc00abbb17d0c5521f6331ae51d8ec54ef1c7b841e6fd51b8ecbe6d625651644a383cee87de0f43344affd73e074af2d86d6011a72fa9c0e92ea", &(0x7f00000002c0)}, 0x20) 2018/05/19 11:19:48 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0, 0x2}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:48 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x0, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:48 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) [ 341.490242] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:48 executing program 6: mkdir(&(0x7f00002b2000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mqueue\x00', 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) lseek(r0, 0x0, 0x2000000000000001) 2018/05/19 11:19:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x800) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000200)=""/213, &(0x7f0000000180)=0xd5) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x481) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000040)='K', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x3ff}, &(0x7f0000000340)=0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f00000003c0)=""/59, &(0x7f0000000400)=0x3b) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000380)={0x4, 0x9, 0x0, 0x1, 0xfffffffffffffffb, 0x4, 0x8, 0x7, r5}, 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x74, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="108000007a99b90d4eeba843afe875d8f01dcff4"], &(0x7f00000001c0)=0x18) 2018/05/19 11:19:48 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x0, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:48 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) [ 341.710856] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 341.718588] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:19:48 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0, 0xfffffe00}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:48 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000b40)=@l2={0x1f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="d41053cb17d3de6ce06d8396d382ffcd0731d2337b3e12281596e161525fd41d211786ca3bffcd2164092cca98d25429cf5988b967fa03e2eb907854cc3b5ffed2b15743eaecc27f16d0a184b4a5901f09b267"}], 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000000000002"], 0xffffffffffffffb9}}], 0x1, 0x0) sigaltstack(&(0x7f0000003000/0x1000)=nil, &(0x7f0000000040)) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x40000, 0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) [ 341.773456] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 341.812286] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 341.820328] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:48 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x2300}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 341.952444] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 342.132494] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 342.140255] FAT-fs (loop5): Filesystem has been set read-only [ 342.157273] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 342.177663] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 342.188197] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 342.243286] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:49 executing program 6: prctl$setmm(0x23, 0x2, &(0x7f0000fff000/0x1000)=nil) 2018/05/19 11:19:49 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x0, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1000, 0x109400) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x947c, 0x7}, {0x0, 0x5}, {0x0, 0x9}]}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") tkill(r3, 0x1000000000016) 2018/05/19 11:19:49 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xc700}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:49 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x12}) r1 = socket(0xa, 0x1, 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000280)={"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"}) r3 = dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000040)={0x5, 0xe9, 0x86}) timer_create(0x5, &(0x7f0000000100)={0x0, 0x3c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_gettime(r4, &(0x7f00000001c0)) 2018/05/19 11:19:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:49 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:49 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0, 0x100000000000000}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:49 executing program 6: r0 = socket(0x2, 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x40010101, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3f, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x7d, 0x20000000008, 0x80, 0xa}, 0x2c) [ 342.991599] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 342.999260] FAT-fs (loop5): Filesystem has been set read-only [ 343.040588] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 343.050028] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 343.057991] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 343.058569] Unknown ioctl 1342221989 [ 343.083188] Unknown ioctl 1342221989 [ 343.190351] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:50 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:50 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0, 0x200000000000000}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:50 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65303e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x2300000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:50 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) pipe(&(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000140)=0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x200, 0x2a00) fanotify_mark(r2, 0x1, 0x10000, r3, &(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/05/19 11:19:50 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b40)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000000), &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x18e) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@empty, @multicast2=0xe0000002, r1}, 0xc) getsockname$inet(r0, &(0x7f0000000180)={0x0, 0x0, @dev}, &(0x7f00000001c0)=0x10) 2018/05/19 11:19:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff) ioctl$BLKROSET(r1, 0x90000915, &(0x7f0000000000)=0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000200)) 2018/05/19 11:19:50 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:50 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:50 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffffff45, 0x2000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) open$dir(&(0x7f0000000100)='./file0\x00', 0x40000, 0x20) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x181300, 0x0) r2 = dup2(r1, r1) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) readv(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/174, 0xae}], 0x1) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e86a4b9500a1139a0d93a78de7ed00ae239537b41a4eacfcfd438dfbe84ef20bd7e66cfb9bde86f5b1d1bae840e6c373fd2d58909d8ac8f1aca1b6e95b92948d4525d", 0x43}], 0x1, &(0x7f0000002000)}, 0x8000) sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bce5", 0x2}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/05/19 11:19:50 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 343.947128] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 343.954829] FAT-fs (loop5): Filesystem has been set read-only [ 343.964594] kernel msg: ebtables bug: please report to author: Wrong len argument [ 343.974336] kernel msg: ebtables bug: please report to author: Wrong len argument [ 343.977832] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:50 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20040, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) r1 = getpid() sendmsg$unix(r0, &(0x7f00000014c0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000013c0)=[{}, {&(0x7f0000000140)="92d3afdbe78482850c139046e7cd56d3c2a227c72402c3f2a7fa551c1cfd97eb85e40c8644bf357d3a9557eb6e699ed73cb454736301d27c2c46f2db4cf1ad8d73fba1e4cb960845ad5a9b291a778afe0443a1acfdcc5030725c02d19355d1fbc58de98ca7a9fe78461c4af052107e126054a0e10ae92f7339733d80782b9b85e7f5fc7e8da4678703d1cc6379d786e65ad5ffead724da8ecc72507360f6ef803915f08f39d4652550f33cc5a5", 0xad}, {&(0x7f0000000200)="ac4f6da2c16c1fced08d16a5d1dc530731f36dfeb04980f19236a959fa275f1a927f550ea553c7f4bad9d3246277afdc455073b242cfdd18ec180cafb12940392298555e5d33aa7f0c99fdfa81fbd98e96aac7491e686b71a8ed3a49276d0dc327f6029276b978e2b056e1d7ce1061e928aae803c93cc78bf36e3f14ece5b21034e0d5d3492da96409cf25284eb266d24872d8c0db971476627e64af626979d0aca1344289d16d7451de6b6470f7f3232ced95eff8165e248b207ac08a713754fe09208211c40866e15663ceb0df665576d7e5da269577f8e7ca34a3c14ebf33230f34392a8d8c2809445ef17d012824482265d152c840b6dd6bd87cfac51595cf8fceba533e07dad64da07762e66aa1e6134f94f92c3455769a6ab8e744056922dbf9758b9773cdfd501fce1c3b00ada55988b4bef055b3e52416e17beed7502e724af80a6fff645b1852b9555d68989a4806ed6cd83920c3d3fef9e00597f979968d0a983dc626dcefc04c12609d3ab9617e3441e4a915b60697f47d7e8b198a86c4e8875970789d9f3c7cc4aeb37e2a333f35cc71f6587541d10a323ac45cf501713779e5df07bc819e23c6121627637f510f2a0d53f380646fb14b3d4ec7e6cf155d13fad950cc867696dd880823dae315a7c7d0f985a077ad4f3d1a7d3d922b2b593e2867f3252dbc10efb3fb4ca71fb01904c196d1d563df870bf58c26298cc311ce1e197129396ea90f5097115b5c785b62fc3d8021f39791c973657d023bb3319fe25ca78ee9d7ea3112df8a5018d777032ffefbd0cf1c8347f4c1e6077a58738be3cbe47f57748a4272de58894462d931dfd424b44f55185ffdf514e707eac7598ca609adda78cfd5330dc8ece6943e54192f585d8549bb74727a30ba0f70248808d963ef8a2af96b2d5ad069fd3807b765715c91a94eeda505e8d61680919d6977f102f1723b52060cc95b07bd4b909fe45687f5f7cbc690d3d53d1e6612c8c9a2ef0349623c3dc2ad277671ced2df99db86cdbe0b9b637c8f983d03afb65fd471340355c5a0fb02a4ecc6af6aeb06f0529ec97289dc1f7a6984a8eedb6239ea7235e8af40c7507fff19b814bf7bbb272c43a591a3faf81a47a5951a7bdf891f6b621ed685c2487030c8db54e816dac616da4371c38c9938f0460399855102058f58083f2ec09a856f190a096d4baa3bcb99a85058d46f4f5807ade758ffb61839baab7255c7b7fec99fdc28379ce4f48de11da417925f14da9d2fa3e55c1fd5c7e62da87d5365f6741f208943c32e15debcbe88056ca5e7427d8943b4f54376b6c9cd75e463a44b0d9d821e1c6dfd76a297b4d5ef6b1c589d0542f194c7e3cd660a3276b643de272e0e8f9f9d9b54ad72b7a60ae056babb4dc6b1fd35b659380953236cfb886011300dc37043e583d0cac9a94526d0d236c600e1c820a164ebcf5a5b4b11ada3319090e82740eb8c473e65b64d1ef2138ecdc6ff872a1c8fb6017d0f2b0739d781236b7f793022a65a19f1039583d4ff62ee6d5b067f4254032d0aff702ed47c4d343ded224a9e56c49b612e6b1fb6cb8f11964396cd7e1ac8553cc2e2be02e4bfe669630a60b361b255badb9e0ae7912b6347a217dc683bc750346f067c02c472f365ee477b5d604fd4c2b7fcc5009b5ab85b279ae2b64e11e1c23c16fc8fae17c59b06cda68d27224adb7e1dcafcc2a14022858a09e4c7891cac458e4ebf404f6565f22986d21bfdfdbf67b7c071b850a25fc99e0fc1235c86d5a63134d9c1e8161e30ae353c6ebfaa66e5cdbae92e65f906244301e04efac1ccbb1c8178d6deff21079e13b041494257505216d83d7606ceae4e3a09b42e3742ae19895bb4c0b54438cd5909b66a3dce3c1bc66bb6671a606e2e308ff7188e1d46c9367fd7a34fb51cc5f28633a6a1f77c894c4d4ee5d1dc2cc9848389c8f984106f336f35cba8c9aa021289a6470bface66ddb71d2c657c84dfe9ead2cd15739060605257c1f33f9b8b2db62e51a193a63393163bb4b9f7fe73987d62efa8dc02e6bc5f850b73c36594e68cf21aab891394eb6cde061f73825fcc5ca560dcf54ed4e482fa8c401c4bbc26edd8556a39505d21add31aed9509d786a6a8e2e42a68e40b25682d6fc2e80c613ed70119455eac9dd9c104659f61e4a479b3258878dbc9305f343b037c2540b1ff56f19276a2aa889dd173e442139c66f77ea85374cd0696f5ff6b85966d4be98eb627e6de4c8e6f4417028767416e84b342bfbe603a37a3277ce675ddd1b213b460c1e138626c9908b59ea4307d3d6756720301fd428e36f07fdf76ba046db410cbc72db0d12f6147fe0391a851d41fa140a7c41b25d6a0b5394097e4f5b4029044ebbe190914355fb5462e4f461acd81ba5c5ca104d4070f636ff2a6194912ee41fe51d648219d88ee97a1b6593313005547576e6cd296cf2cc470827de2122e0efb1ab79358bb76ad5ed3e334272562b4288ada40cd5fe620c77fdbdd8534e6f57da59c262de5a67f2188975ccbc3b050b8c4555b5a3b4cf0879f6c6d0772cc9bfd000795a5c5f300755e89062e247988739dd805f069c8ed37d9d66c996e81f47b68bb2c8d784f45a1cb4e347d0d0cea3cfd8d0f8068302c2d20b71677abf273ed26a32ef520d18c76ed9921d29362ae228e9c55e3e56fe7b5c0accf90eea99fb45a524f5966746686ad24083e76693e020adcca5b8b1608b347ca75abded50b7d760036ec41561c53a106122644f9a8d30804e23f940c0304fb4b1438a100285b53d82b512255f5354c1e6f9ecc9bb73b8261467c91d35397614cb96cbdb947614125d44a89b3fb9140f46267cce5fb246eab18f3aa1337a19e6e6e61de53b456bc300dd3e39a9bd9be7e4f750297d69e5aa782e38c6bb1f3e4ee2b4357b5cbfc42d7e946c71a5310fa22cb3964182c78f34edb7a28c07f4192aa462d1cfdcef3adee35269e3de3dacce3aef33f1764d8a5d0a037b3e17cb563b35b96bce40e04825b39ad5a293592cd829cbbf05e17fb65016c5e54550d90f212dad3d1ea5341983047dd80b7e3ccf8d34835876c51f3282759e64e65e0ec1c1a70f1cc2c9025e0576b39a0a218901b8938fa5f2195cadeb137da13bd3d923072b826daa4bb8a0c6b717c484aaaa73578897c8f13032a5996676241a2346bef518b24ae9863e5ec5390a7c38fd6e53fb220d80dfd610c7c67fb74ffc3f4937536a964f711d0b93d78c04d53605966f0e4893be298af10f8c10515e3470a8d80d7c7616444952775a2c91f6b7b0352a93e213e43adfd226aaea98016f3dec3927704de687313473087a796f0d51e5324c6d16b90d12658ceedbb950dbf0463b5a968e3d935940975ccfe86dd3302054cc07e1e470c9cd359ddb674fa4bb1d4fe3a8a0e878b5c1803fba7325255ca6c1af941ff4c5a5df0199d21b1a66deebca3656cb7b67ce8b9af55b5d1359406ab3b51987efeb7698db2f0d8d36accd038473100e3ecd20ebc6d0ca658aba0342a2c52444b8989c64926614e57eb30ff6a54040977252ec75d7ca8efcdd7a828e290f88f028ded9a6ec1b6af1cbdcc431eafb55dffae197bd80cb3533ccb1c169599885ded5ea0e4d9be20b75459576454b2041d2a3c0bf403e92412286bd87c56acf07594fd1c7f1889bb1f5af3bf12649f62aadff88b0e3e473ef8333312851fb7f5ded1c3639781f3487b51a92876bcc19327b0be4428e289dcc19e30a898c2e2041f6b7bb0d3eeb0f8af8af28e26e6f37803d6d41208deaa43247d8e4d5babf6ca74ee26b3044f67de76cff2d1975d1660275dfd1b4e0bdf4fc4bfee8948ba9f5158acce1a558d8a4f8c69b2b14a6a5f96e754630dbbebe8eb9e32fd9f5f9dbae4ecf14104ce74bdd96bfbadb931263d07251635dcca5e7a6e3ecf0ecefcf83e9d3a91e37622f085d58f3e32b79444fd01e95c2e1d127bc52cf04fbed55c5ea8e8afbd2044e35a89448d67fa08af470752af3791192af0442f9c009e04fe99cd3b80ac3d40354d99508753caa0446ca83814242c61016c6c1a63e3eac9a55217bf3bb7dd5a988ba643b3f8f627a5fb566159d6e2941dd5f9b395ceb2028f66a14bce0a486e5521a48ff1a4e53a35199aaa6684af10d749917a181b06f5e1d02515b74784d135738d54c33b716d10ee23fba9dc6139fb34d60e7566a41124bb23e7cbb72f23731df99ae4d17ef2edfe64083531e16224ca5a88d6699cb5b6962adeb52f61ffe015c99e60987dae745ed845f2737c9d1dd170640bbd5078254b207e07717193cde3fb9b1fe43dfc8b9f5daa54f00dcc30d1453ba7c4d23962cf95957fe81498aac56b9d005a1b8f0ea490a8cb9c8f2f005067309d39072e33db994c9e39c057625152928688309e6f539ed6b3a6db059db1f6891e5efbf282d464373aa112c7cfc3231b3620af2de8550874bfead15832a53ef9807e150dbc3f84b34eb876c76ddcf5b107ef251657416bbe760b153d713e45b6b75c7d6291e209103f64a02f296104b0d40bdb19598032cff4afd393107db28688f64df68dc8e302cc6c40f8bbee7c51601e8f1bcde64f4b988afc5706fdf9ba39147917b4cf038373b0e2b551d5c20913c8f8c39caa0f2eb48a4269de8b58ee1cefe5d95a6b294c33192780ed84afe634fe8fe7d53bab48dc048cc09eac33c05b0d6e85b72bf1b557230b6359ba21d2a45a761ca3c2667de9e2f5cf8393b10acffdfa7b2dc9887d990da15da4be2ad32b4af2385570e2be63d4168bb6dcbf916295572c96adf0d868971dfdf6238785c7501590377fd64e9369be254295ef136af5f60b8c903db832e02fb4b3bbeacc617b86c454c49234ebdfd1a0b8b20b92b2a6f424b0257dec6bb44b4a8a0b8fcc0a81fcc1ce391a1d346cc5a19b957b6794bed4806c70406e87d1096b1eb6c0657f7f1ef3f2e4293dd8af015eceb5a1122012211f816f321d56e0f85279aa8ceb5f1f4eaf304f7a690722c1b9fee24fda2519bdda93c1bfc675395c77dd6ce01b298d5df5c77d66d228945323b5c393254dd80fb4a3f92376000b2700dd97471791daff5b831b3326e738862f2db343f73c410f2cb3cda01cac4ae2d6e54d3211a24dac6ed9050e7bf116aabe2e142236917bc3188476eee930d468e36eb278de769f91e2ccf45844c975634dcf3b5e2e4a9a8a7860cd145536a70169eaae32ef6d868405b01c390855c10f2f051bec870668aab99fed11316dab3733f10a45921ae24563784ffb309246b9e9fc8194ad2a06747f96337155be47339564beb0b18843ecbdd574e50059582a3c105db041e3948cdb33769877f54e776e3ac467a90145297960ed2ea8296c1e6a90be604448dc81e0913a5fb9cda851ea1a039323e50032175bc690b37649cc6df48ff268127784ebbeaa7f333f698d0e113115f344dcf3dd9bf245bc00fc632efed752802b0bf1b42b869ea6d6c9eed704f0bd56bf3504acd7c3fc55a7eeb4c1613d3c4e01872606d90252419418979842defa5734216398542fbecaeebd950790a172d3ebe425480dbda9af67d4d9bc08f00e0388c0b72d3ac74bfe382c7785fc9bb802ed6701b1cf389ad315f61eb4ed30ee17d2f9a1ff2a82ac74058336ee10b19ba728720fdb10682763c8af44af0c83075bfe4096abfe6c8105be7d6c762a54d11aa67f4f794d122d17e0880ddef8fa2a11bc6a58e09fc6aa8357c6ef2f2146561950f66ada9eded9995c74b7a875208b6ac5459e5019ac5794259349ed80966b27e2ba819f879c351784", 0x1000}, {&(0x7f0000001200)="ea24b5f472e8306b76cfe7e757e340c75bc4b344350665fb754cce109b9cf94edcd88bc2b19f7aba2203a5f0a6c99783edb954cbe3707c0f976d9689718e0366922d415965db5f7ded8340d57ad6e73c4c5bd504482f44d5069178a6bed615be729fd8b904adeb40a96441e391e7ee0406704ce74a4498ed6bfbdbe4f8491a035dd32fad5b509ad6dab7deb38beac0b44dc81067809395112575186cdd496e67a5a0888f1147b954dbcf68adf0d92bfd13eb6bb2", 0xb4}, {&(0x7f00000012c0)="88b9f77913c2b8adc0e657255c443fa12a850096871b82d9f0b713f9e482307a6624f7ceb1f7172e8ffae13966d971fc9559e2299a0f6ce0165db32a0aceb67039c434838a0116db5828aeac3047f46bcf7757136d9c8e70afbcc548d4f7d706740b9fec675fdda65aaf021f2b5d467b30df5c627a763908ba63df9b39cf0b8d215a4c5c625ebe4e1b829ef14d78b0e4a3946b5efe4a00ba5b715b2120aa6cdd604a3b98037314e463f64d7e71c94825232171f9d734a6bb3943bc49f158e40f9f9f6c3003e7b95ad6c509f72ea3a67f4844c42ef7308be6fedb649a0f7dafe376a0afdd092048a48258f62cc3679ca1f62d665534e3", 0xf6}], 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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"], 0x48, 0x40000}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000001440)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000001480)=r2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001500)={r2, @in6={{0xa, 0x4e23, 0x8, @empty, 0xfff}}, 0x3, 0x1, 0x80, 0x8001, 0x22}, 0x98) sched_getscheduler(r1) fchdir(r0) 2018/05/19 11:19:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x2}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 343.991141] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 344.000867] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:50 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:50 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 344.123864] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530803e00"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:51 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mq_open(&(0x7f0000000000)='lo(em1#\\\x00', 0x40, 0x80, &(0x7f0000000040)={0x2a44, 0x9, 0x7, 0x2af, 0x5, 0x8, 0x3f, 0xfffffffffffffffd}) r1 = shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) shmdt(r1) 2018/05/19 11:19:51 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:51 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0) [ 344.408894] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 344.416595] FAT-fs (loop5): Filesystem has been set read-only [ 344.441072] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 344.450936] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 344.462158] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 344.561954] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x900}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:51 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x40000, 0x0, 0x12, r1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000640), &(0x7f0000000100), &(0x7f00000007c0)) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:19:51 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 2018/05/19 11:19:51 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:51 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:51 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xtea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="bca9d94e6a059d186467b6428e52a472ad4c4ebf1bd5331687356dc09fdfef928cfabc241094c5"]], 0x6c859fd2) recvmsg(r1, &(0x7f0000000040)={0x0, 0xffffff82, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f00000005c0)=""/175, 0xff98}], 0x2, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) 2018/05/19 11:19:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:51 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000b, 0x20010, r0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=""/59, &(0x7f0000000100)=""/193, &(0x7f0000000200)=""/163}) 2018/05/19 11:19:51 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xdc41}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x100}, 0x8) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000100)) ioctl$VT_WAITACTIVE(r0, 0x5607) 2018/05/19 11:19:51 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2), 0x0) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:51 executing program 4 (fault-call:3 fault-nth:0): r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:51 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x20) [ 345.217949] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 345.225638] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:19:52 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 345.304111] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 345.324508] FAULT_INJECTION: forcing a failure. [ 345.324508] name failslab, interval 1, probability 0, space 0, times 0 [ 345.335899] CPU: 1 PID: 22372 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #58 [ 345.343194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.352570] Call Trace: [ 345.355192] dump_stack+0x1b9/0x294 [ 345.358850] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.361115] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 345.364057] ? perf_trace_lock_acquire+0xe3/0x980 [ 345.364088] should_fail.cold.4+0xa/0x1a [ 345.364110] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.364135] ? graph_lock+0x170/0x170 [ 345.364151] ? print_usage_bug+0xc0/0xc0 [ 345.364171] ? find_held_lock+0x36/0x1c0 [ 345.397475] ? __lock_is_held+0xb5/0x140 [ 345.401534] ? check_hlist.isra.2+0xa20/0xc40 [ 345.406037] ? check_same_owner+0x320/0x320 [ 345.410350] ? perf_trace_lock+0x900/0x900 [ 345.414576] ? rcu_note_context_switch+0x710/0x710 [ 345.419500] __should_failslab+0x124/0x180 [ 345.423732] should_failslab+0x9/0x14 [ 345.427528] kmem_cache_alloc+0x2af/0x760 [ 345.431673] ? may_expand_vm+0x1e3/0x8b0 [ 345.435731] ? copy_vma+0xe00/0xe00 [ 345.439355] __split_vma+0x11a/0x7f0 [ 345.443072] ? _parse_integer+0x13b/0x190 [ 345.447236] ? find_vma_prev+0x140/0x140 [ 345.451291] ? vmacache_update+0x10e/0x140 [ 345.455545] ? find_vma+0x34/0x190 [ 345.459100] do_munmap+0xcfa/0xf90 [ 345.462637] mmap_region+0x658/0x1870 [ 345.466434] ? __x64_sys_brk+0x790/0x790 [ 345.470491] ? arch_get_unmapped_area_topdown+0xba/0x920 [ 345.475999] ? arch_get_unmapped_area+0x750/0x750 [ 345.480868] ? lock_acquire+0x1dc/0x520 [ 345.484854] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 345.488906] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 345.493915] ? cap_mmap_addr+0x52/0x130 [ 345.497888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.503418] ? security_mmap_addr+0x80/0xa0 [ 345.507732] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.513279] ? get_unmapped_area+0x292/0x3b0 [ 345.517677] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.523209] do_mmap+0xde2/0x1360 [ 345.526657] ? mmap_region+0x1870/0x1870 [ 345.530708] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 345.534763] ? down_read_killable+0x1f0/0x1f0 [ 345.539249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.544775] ? security_mmap_file+0x166/0x1b0 [ 345.549264] vm_mmap_pgoff+0x1fb/0x2a0 [ 345.553149] ? vma_is_stack_for_current+0xd0/0xd0 [ 345.557987] ? __sb_end_write+0xac/0xe0 [ 345.561959] ksys_mmap_pgoff+0x4c9/0x640 [ 345.566022] ? find_mergeable_anon_vma+0xd0/0xd0 [ 345.570767] ? __ia32_sys_read+0xb0/0xb0 [ 345.574824] __x64_sys_mmap+0xe9/0x1b0 [ 345.578705] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 345.583713] do_syscall_64+0x1b1/0x800 [ 345.587590] ? syscall_return_slowpath+0x5c0/0x5c0 [ 345.592509] ? syscall_return_slowpath+0x30f/0x5c0 [ 345.597432] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 345.602792] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.607628] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.612808] RIP: 0033:0x455a09 [ 345.615987] RSP: 002b:00007f8745542c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 345.623690] RAX: ffffffffffffffda RBX: 00007f87455436d4 RCX: 0000000000455a09 [ 345.630948] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 00000000201bf000 [ 345.638211] RBP: 000000000072bea0 R08: 0000000000000013 R09: 0000000000000000 [ 345.645473] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000015 2018/05/19 11:19:52 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x40000, 0x0, 0x12, r1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000640), &(0x7f0000000100), &(0x7f00000007c0)) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/15, 0xf) [ 345.652735] R13: 000000000000049f R14: 00000000006faf88 R15: 0000000000000000 [ 345.660904] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x7fffffffffffffff}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:52 executing program 4 (fault-call:3 fault-nth:1): r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:52 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x4000, 0x0) r2 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002700)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000002800)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0, 0x0}, &(0x7f0000002880)=0xc) r5 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000028c0)={{{@in, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000029c0)=0xe8) fstat(r0, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002a80)=0x0) fstat(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000002c00)={0x0, 0x0}) r12 = getuid() ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000002e00)={0x74, 0x0, [0xec8e, 0x2, 0x9, 0x1]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002c40)={0x0, 0x0, 0x0}, &(0x7f0000002c80)=0xc) sendmsg$unix(r1, &(0x7f0000002dc0)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000000240)="d973b5507a6dbf811296a32bbc0b61f0be7ee7b5437d00abfc38cd4eeb5249b9be386eb575ab2615154241e4bd0167a18e6c5aed115196f311718bf35068e5c5f65efe8e3052fa2ab86a215a1b687c50b6a7f35de08f4b9655469b6d2a651690e61e", 0x62}, {&(0x7f00000002c0)="bb083ebe87b706f7ba5456601b6994ceb20411b1f97695892bfa2ec3e62cbf41d1e8392df44ed20a3760d37f21704672d8d06b14e8685bc3f687c7a4956936ee576ce9222f50dcb0743ccd7bb31fbd1ffbf14c6b0fa577315253774e78a93316b2dfd6c6937521202871c4f08ca1e775b2f8eb465cb09799a5fdab54d114de422517e47c854772a573874c268af8f11f596157544d671b98bec58a8c6c19e9d359cb3cf2ba13", 0xa6}, {&(0x7f0000000380)="2c47c51888ebcf823d35e0b2bca7940010375d5a8cf17ab6da37ccb7cd15ba55121c1d472e39963dc3608c939b2167f54ba8626880a47a02d0048da16d2cfd76bdf8ef92fccd27837ca88d4fb113d998bde0822caf5f21476f142376f80a8ac5e3c052f266b10537e133cbdbe869adac96c8b6a1d23621988304008cd58ab6939d71b7e98c25a5a69152273cb1aa6264db5f878f28fbbeb17775e8cf7b9fabea169af974f1e42851c48b8371589d107c8f63ce59757044ceb4c1c0e790412e389fba86ed555b31762876b983479cabc0d5de2b550a4d4e512941fa27437fa365673954257ee6f25963b9e87166f18ad4d3", 0xf1}, {&(0x7f0000000480)="37d4d2add1c676b00d3ab0758be9fa0dfc17cdcb32c43c84381f362b7306db7cc78bd8c054aacb00b8a158560226254fea24e23ac1b7764559866d4a9ff24a821ed69508099dec4b5ad8e1eced1a5e684ea1f3e4b2de62f16cc5ac1244f4f85bc805b21ea1f03c299fe6553f96a31ed140ab9615", 0x74}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="e7b7cd7af70c074b19ee1cfd88d78eaa2be4b082dc1399548bb6651db69518968b756d633ee7eee67db529df4635a6c66b2de388d4e51e39f084c9284780035689ee1979d7595ed254b741bdfa23088a31fbfd1c2301ca7433d3f03d1e12ceb221667e246c926af63af9c10bb163be8cc5399e68d9", 0x75}, {&(0x7f0000002580)="4e64e166321a60e91cfdacebef8c04f4a1a11ed43ef87625804df34b2ffb01c510aa9698fae7b49e5b02cd40bc129dbbae3ce247009f461bcd4a8f9a030c4f0ad02e8c463c1d", 0x46}, {&(0x7f0000002600)="9f27a9682bac1fcaa62d9856ef9e5d6283bb347aa2d14b6c16c62bde6b5d6988d1", 0x21}], 0x9, &(0x7f0000002cc0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000002000000000000000010000006bc251a1", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0xd0, 0x10}, 0x40) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x40, 0x0) ioctl$LOOP_SET_FD(r14, 0x4c00, r0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002e80)={r11, r12, r4}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r15, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) [ 345.832294] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 345.933405] FAULT_INJECTION: forcing a failure. [ 345.933405] name failslab, interval 1, probability 0, space 0, times 0 [ 345.944967] CPU: 0 PID: 22401 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #58 [ 345.952269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.961631] Call Trace: [ 345.964241] dump_stack+0x1b9/0x294 [ 345.967904] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.973126] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 345.978426] ? find_held_lock+0x36/0x1c0 [ 345.982491] should_fail.cold.4+0xa/0x1a [ 345.986638] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.991777] ? __kernel_text_address+0xd/0x40 [ 345.996295] ? unwind_get_return_address+0x61/0xa0 [ 346.001246] ? __save_stack_trace+0x7e/0xd0 [ 346.005569] ? save_stack+0xa9/0xd0 [ 346.009208] ? save_stack+0x43/0xd0 [ 346.012829] ? kasan_kmalloc+0xc4/0xe0 [ 346.016705] ? kasan_slab_alloc+0x12/0x20 [ 346.020847] ? kmem_cache_alloc+0x12e/0x760 [ 346.025167] ? __split_vma+0x11a/0x7f0 [ 346.029057] ? do_munmap+0xcfa/0xf90 [ 346.032761] ? mmap_region+0x658/0x1870 [ 346.036723] ? do_mmap+0xde2/0x1360 [ 346.040344] ? vm_mmap_pgoff+0x1fb/0x2a0 [ 346.044997] ? ksys_mmap_pgoff+0x4c9/0x640 [ 346.049232] ? __x64_sys_mmap+0xe9/0x1b0 [ 346.053286] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.058654] ? lock_downgrade+0x8e0/0x8e0 [ 346.062795] ? graph_lock+0x170/0x170 [ 346.066612] __should_failslab+0x124/0x180 [ 346.070849] should_failslab+0x9/0x14 [ 346.074650] kmem_cache_alloc+0x47/0x760 [ 346.078713] anon_vma_clone+0x138/0x720 [ 346.082683] ? unlink_anon_vmas+0xa40/0xa40 [ 346.086997] ? may_expand_vm+0x1e3/0x8b0 [ 346.091064] ? copy_vma+0xe00/0xe00 [ 346.094689] ? __split_vma+0x11a/0x7f0 [ 346.098567] __split_vma+0x311/0x7f0 [ 346.102271] ? _parse_integer+0x13b/0x190 [ 346.106427] ? find_vma_prev+0x140/0x140 [ 346.110508] ? find_vma+0x34/0x190 [ 346.114048] do_munmap+0xcfa/0xf90 [ 346.117586] ? check_same_owner+0x320/0x320 [ 346.121913] mmap_region+0x658/0x1870 [ 346.125703] ? __x64_sys_brk+0x790/0x790 [ 346.129750] ? arch_get_unmapped_area_topdown+0xba/0x920 [ 346.135204] ? arch_get_unmapped_area+0x750/0x750 [ 346.140047] ? lock_acquire+0x1dc/0x520 [ 346.144040] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 346.148101] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 346.153109] ? cap_mmap_addr+0x52/0x130 [ 346.157092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.162625] ? security_mmap_addr+0x80/0xa0 [ 346.166948] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.172484] ? get_unmapped_area+0x292/0x3b0 [ 346.176887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.182416] do_mmap+0xde2/0x1360 [ 346.185862] ? mmap_region+0x1870/0x1870 [ 346.189929] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 346.193996] ? down_read_killable+0x1f0/0x1f0 [ 346.198509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.204059] ? security_mmap_file+0x166/0x1b0 [ 346.208559] vm_mmap_pgoff+0x1fb/0x2a0 [ 346.212445] ? vma_is_stack_for_current+0xd0/0xd0 [ 346.217283] ? __sb_end_write+0xac/0xe0 [ 346.221262] ksys_mmap_pgoff+0x4c9/0x640 [ 346.225332] ? find_mergeable_anon_vma+0xd0/0xd0 [ 346.230122] ? __ia32_sys_read+0xb0/0xb0 [ 346.234196] __x64_sys_mmap+0xe9/0x1b0 [ 346.238088] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 346.243116] do_syscall_64+0x1b1/0x800 [ 346.247005] ? finish_task_switch+0x1ca/0x840 [ 346.251506] ? syscall_return_slowpath+0x5c0/0x5c0 [ 346.256443] ? syscall_return_slowpath+0x30f/0x5c0 [ 346.261382] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 346.266745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.271596] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.276778] RIP: 0033:0x455a09 [ 346.279970] RSP: 002b:00007f8745542c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 346.287666] RAX: ffffffffffffffda RBX: 00007f87455436d4 RCX: 0000000000455a09 [ 346.294936] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 00000000201bf000 [ 346.302213] RBP: 000000000072bea0 R08: 0000000000000013 R09: 0000000000000000 [ 346.309481] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000015 [ 346.316741] R13: 000000000000049f R14: 00000000006faf88 R15: 0000000000000001 2018/05/19 11:19:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:53 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2), 0x0) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:53 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="65746830402dff", 0xfffffffffffffffe) 2018/05/19 11:19:53 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x40000, 0x0, 0x12, r1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000640), &(0x7f0000000100), &(0x7f00000007c0)) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:19:53 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x91000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:19:53 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xff0f000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 346.472192] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 346.480140] FAT-fs (loop5): Filesystem has been set read-only [ 346.493671] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 346.504723] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 346.514220] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:53 executing program 4 (fault-call:3 fault-nth:2): r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:53 executing program 0: r0 = memfd_create(&(0x7f0000001200)='@\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', '@\x00'}, &(0x7f0000000080)='\x00', 0x1, 0x0) fcntl$getown(r0, 0x9) 2018/05/19 11:19:53 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:53 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0x2710}}) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000000040), &(0x7f000044b000), 0x0) [ 346.625832] FAULT_INJECTION: forcing a failure. [ 346.625832] name failslab, interval 1, probability 0, space 0, times 0 [ 346.637521] CPU: 0 PID: 22426 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #58 [ 346.644821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.654198] Call Trace: [ 346.656816] dump_stack+0x1b9/0x294 [ 346.660473] ? dump_stack_print_info.cold.2+0x52/0x52 [ 346.665696] should_fail.cold.4+0xa/0x1a [ 346.669810] ? save_stack+0x43/0xd0 2018/05/19 11:19:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 346.673466] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 346.678589] ? ksys_mmap_pgoff+0x4c9/0x640 [ 346.682838] ? __x64_sys_mmap+0xe9/0x1b0 [ 346.686904] ? do_syscall_64+0x1b1/0x800 [ 346.690982] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.696384] ? graph_lock+0x170/0x170 [ 346.700238] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 346.704824] ? find_held_lock+0x36/0x1c0 [ 346.708885] ? __lock_is_held+0xb5/0x140 [ 346.712962] ? check_same_owner+0x320/0x320 [ 346.717283] ? rcu_note_context_switch+0x710/0x710 [ 346.722210] __should_failslab+0x124/0x180 [ 346.726465] should_failslab+0x9/0x14 [ 346.730272] kmem_cache_alloc+0x2af/0x760 [ 346.734433] mmap_region+0x9a6/0x1870 [ 346.738236] ? __x64_sys_brk+0x790/0x790 [ 346.742301] ? arch_get_unmapped_area+0x750/0x750 [ 346.747166] ? lock_acquire+0x1dc/0x520 [ 346.751180] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 346.755241] ? cap_mmap_addr+0x52/0x130 [ 346.759216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.764752] ? security_mmap_addr+0x80/0xa0 [ 346.769089] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.774648] ? get_unmapped_area+0x292/0x3b0 [ 346.779074] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.784630] do_mmap+0xde2/0x1360 [ 346.788096] ? mmap_region+0x1870/0x1870 [ 346.792168] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 346.796234] ? down_read_killable+0x1f0/0x1f0 [ 346.800722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.806251] ? security_mmap_file+0x166/0x1b0 [ 346.810741] vm_mmap_pgoff+0x1fb/0x2a0 [ 346.814630] ? vma_is_stack_for_current+0xd0/0xd0 [ 346.819749] ? __sb_end_write+0xac/0xe0 [ 346.823731] ksys_mmap_pgoff+0x4c9/0x640 [ 346.827802] ? find_mergeable_anon_vma+0xd0/0xd0 [ 346.832556] ? __ia32_sys_read+0xb0/0xb0 [ 346.836614] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 346.841471] __x64_sys_mmap+0xe9/0x1b0 [ 346.845353] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 346.850435] do_syscall_64+0x1b1/0x800 [ 346.854329] ? finish_task_switch+0x1ca/0x840 [ 346.858827] ? syscall_return_slowpath+0x5c0/0x5c0 [ 346.863763] ? syscall_return_slowpath+0x30f/0x5c0 [ 346.868712] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 346.874098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.878946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.884139] RIP: 0033:0x455a09 [ 346.887328] RSP: 002b:00007f8745542c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 346.895047] RAX: ffffffffffffffda RBX: 00007f87455436d4 RCX: 0000000000455a09 [ 346.902315] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 00000000201bf000 [ 346.909585] RBP: 000000000072bea0 R08: 0000000000000013 R09: 0000000000000000 [ 346.916856] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000015 2018/05/19 11:19:53 executing program 4 (fault-call:3 fault-nth:3): r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 346.924118] R13: 000000000000049f R14: 00000000006faf88 R15: 0000000000000002 [ 346.935825] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 346.945087] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop6 2018/05/19 11:19:53 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2), 0x0) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) [ 346.995172] BTRFS error (device loop6): superblock checksum mismatch [ 347.007224] BTRFS error (device loop6): open_ctree failed [ 347.030235] BTRFS error (device loop6): superblock checksum mismatch [ 347.037485] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:19:53 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x40000, 0x0, 0x12, r1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000640), &(0x7f0000000100), &(0x7f00000007c0)) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:19:53 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x91000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:19:54 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="65746830402d02", 0xfffffffffffffffe) [ 347.282471] FAULT_INJECTION: forcing a failure. [ 347.282471] name failslab, interval 1, probability 0, space 0, times 0 [ 347.294424] CPU: 1 PID: 22465 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #58 [ 347.301729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.311103] Call Trace: [ 347.313708] dump_stack+0x1b9/0x294 [ 347.317335] ? dump_stack_print_info.cold.2+0x52/0x52 [ 347.322548] ? perf_trace_lock_acquire+0xe3/0x980 [ 347.327421] ? print_usage_bug+0xc0/0xc0 2018/05/19 11:19:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000803e00"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 347.331522] ? rcu_note_context_switch+0x710/0x710 [ 347.336489] should_fail.cold.4+0xa/0x1a [ 347.340585] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 347.345723] ? perf_mmap+0x7cb/0x1b00 [ 347.349498] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 347.349552] ? graph_lock+0x170/0x170 [ 347.357203] FAT-fs (loop5): Filesystem has been set read-only [ 347.360811] ? mutex_trylock+0x2a0/0x2a0 [ 347.360837] ? find_held_lock+0x36/0x1c0 [ 347.360863] ? __lock_is_held+0xb5/0x140 [ 347.378948] ? check_same_owner+0x320/0x320 [ 347.383299] ? rcu_note_context_switch+0x710/0x710 [ 347.388249] ? lock_downgrade+0x8e0/0x8e0 [ 347.392425] __should_failslab+0x124/0x180 [ 347.396687] should_failslab+0x9/0x14 [ 347.400510] __kmalloc+0x2c8/0x760 [ 347.404075] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 347.409285] ? find_held_lock+0x36/0x1c0 [ 347.413377] ? rb_alloc+0xa9/0x5d0 [ 347.416951] rb_alloc+0xa9/0x5d0 [ 347.420341] ? kernel_text_address+0x79/0xf0 [ 347.424781] ? perf_aux_output_end+0x6c0/0x6c0 [ 347.428130] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 347.429383] ? unwind_get_return_address+0x61/0xa0 [ 347.429403] ? __save_stack_trace+0x7e/0xd0 [ 347.429433] perf_mmap+0x12ea/0x1b00 [ 347.429460] ? perf_release+0x50/0x50 [ 347.429481] ? lock_downgrade+0x8e0/0x8e0 [ 347.429502] ? graph_lock+0x170/0x170 [ 347.429519] ? __lock_is_held+0xb5/0x140 [ 347.466347] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 347.471577] ? __lock_is_held+0xb5/0x140 [ 347.475674] ? rcu_read_lock_sched_held+0x108/0x120 [ 347.480721] ? kmem_cache_alloc+0x5fa/0x760 [ 347.485069] ? mmap_region+0x9a6/0x1870 [ 347.489048] mmap_region+0xd5c/0x1870 [ 347.492857] ? __x64_sys_brk+0x790/0x790 [ 347.496931] ? arch_get_unmapped_area+0x750/0x750 [ 347.501773] ? lock_acquire+0x1dc/0x520 [ 347.505741] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 347.509793] ? cap_mmap_addr+0x52/0x130 [ 347.513761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.519292] ? security_mmap_addr+0x80/0xa0 [ 347.523606] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 347.529140] ? get_unmapped_area+0x292/0x3b0 [ 347.533543] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 347.539074] do_mmap+0xde2/0x1360 [ 347.542524] ? mmap_region+0x1870/0x1870 [ 347.546574] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 347.550639] ? down_read_killable+0x1f0/0x1f0 [ 347.555129] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.560657] ? security_mmap_file+0x166/0x1b0 [ 347.565148] vm_mmap_pgoff+0x1fb/0x2a0 [ 347.569038] ? vma_is_stack_for_current+0xd0/0xd0 [ 347.573885] ? __sb_end_write+0xac/0xe0 [ 347.577859] ksys_mmap_pgoff+0x4c9/0x640 [ 347.581922] ? find_mergeable_anon_vma+0xd0/0xd0 [ 347.586672] ? __ia32_sys_read+0xb0/0xb0 [ 347.590734] __x64_sys_mmap+0xe9/0x1b0 [ 347.594615] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 347.599626] do_syscall_64+0x1b1/0x800 [ 347.603506] ? finish_task_switch+0x1ca/0x840 [ 347.607993] ? syscall_return_slowpath+0x5c0/0x5c0 [ 347.612917] ? syscall_return_slowpath+0x30f/0x5c0 [ 347.617861] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 347.623238] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.628078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.633258] RIP: 0033:0x455a09 [ 347.636435] RSP: 002b:00007f8745542c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 347.644135] RAX: ffffffffffffffda RBX: 00007f87455436d4 RCX: 0000000000455a09 [ 347.651397] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 00000000201bf000 [ 347.658658] RBP: 000000000072bea0 R08: 0000000000000013 R09: 0000000000000000 [ 347.665920] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000015 [ 347.673181] R13: 000000000000049f R14: 00000000006faf88 R15: 0000000000000003 2018/05/19 11:19:54 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) close(r0) [ 347.692573] BTRFS error (device loop6): superblock checksum mismatch [ 347.706467] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 347.728446] BTRFS error (device loop6): open_ctree failed [ 347.735863] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:54 executing program 2: add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r0 = add_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000280)="f20406a05309501245cf1ba5af3d9957e57d2773876d0643e4bd54dbc276e18172511d516f97b457bb8b9b62c99319d560e5e53df4bf498bc813dd2481f922250aa6235eb9629510bb45685ab39b7856bbbc5208c4a1526945c42f338704341177ef58c69a07156174f900dda317ded5241efbac1bf8eccf9fe7e9e85075746608f23bac182026388c89d48e0e87ca8db2e1c4bf2a698320fc54d1fc34d3c755d7ee47dd4a1373a38dc37fa6e327fba73bdf52787dbdce752ae83c5211c0fb315a04674345", 0xc5, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) fsetxattr(r1, &(0x7f0000000380)=@random={'security.', 'cpusetppp1user{trusted%nodevmime_type%systemsystem\x00'}, &(0x7f00000003c0)='&userposix_acl_accessclo\x00', 0x19, 0x3) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setparam(r2, &(0x7f0000000080)=0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x9}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000480)={r3, 0x9, 0x30, 0x7c5, 0x5}, &(0x7f00000004c0)=0x18) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='\x00', r0) io_setup(0x9, &(0x7f0000000500)=0x0) io_cancel(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x9, r1, &(0x7f0000000540)="8c5af78d93996579bc49a30ec05ebb98141f026635330efd68761121ebc00e029cc865ccb453e68c43cf", 0x2a, 0x80, 0x0, 0x1, r1}, &(0x7f00000005c0)) 2018/05/19 11:19:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:54 executing program 4 (fault-call:3 fault-nth:4): r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 347.927809] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 348.023355] FAULT_INJECTION: forcing a failure. [ 348.023355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.035300] CPU: 0 PID: 22502 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #58 [ 348.042593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.052883] Call Trace: [ 348.055476] dump_stack+0x1b9/0x294 [ 348.059106] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.064294] should_fail.cold.4+0xa/0x1a [ 348.068356] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 348.073471] ? graph_lock+0x170/0x170 [ 348.077277] ? is_bpf_text_address+0xd7/0x170 [ 348.081783] ? kernel_text_address+0x79/0xf0 [ 348.086195] ? __unwind_start+0x166/0x330 [ 348.090349] ? find_held_lock+0x36/0x1c0 [ 348.094409] ? __lock_is_held+0xb5/0x140 [ 348.098475] ? check_same_owner+0x320/0x320 [ 348.102788] ? do_mmap+0xde2/0x1360 [ 348.106415] ? vm_mmap_pgoff+0x1fb/0x2a0 [ 348.110476] ? rcu_note_context_switch+0x710/0x710 [ 348.115406] ? mutex_trylock+0x2a0/0x2a0 [ 348.119469] ? __might_sleep+0x95/0x190 [ 348.123450] __alloc_pages_nodemask+0x34e/0xd70 [ 348.128133] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 348.133169] ? __lock_is_held+0xb5/0x140 [ 348.137244] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 348.142432] ? find_held_lock+0x36/0x1c0 [ 348.146507] perf_mmap_alloc_page+0xf0/0x170 [ 348.150905] rb_alloc+0xc2/0x5d0 [ 348.154259] ? kernel_text_address+0x79/0xf0 [ 348.158664] ? perf_aux_output_end+0x6c0/0x6c0 [ 348.163240] ? unwind_get_return_address+0x61/0xa0 [ 348.168183] ? __save_stack_trace+0x7e/0xd0 [ 348.172536] perf_mmap+0x12ea/0x1b00 [ 348.176257] ? perf_release+0x50/0x50 [ 348.180054] ? lock_downgrade+0x8e0/0x8e0 [ 348.184217] ? graph_lock+0x170/0x170 [ 348.188017] ? __lock_is_held+0xb5/0x140 [ 348.192085] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 348.197280] ? __lock_is_held+0xb5/0x140 [ 348.201358] ? rcu_read_lock_sched_held+0x108/0x120 [ 348.206384] ? kmem_cache_alloc+0x5fa/0x760 [ 348.210697] ? mmap_region+0x9a6/0x1870 [ 348.214665] mmap_region+0xd5c/0x1870 [ 348.218474] ? __x64_sys_brk+0x790/0x790 [ 348.222551] ? arch_get_unmapped_area+0x750/0x750 [ 348.227386] ? lock_acquire+0x1dc/0x520 [ 348.231365] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 348.235420] ? cap_mmap_addr+0x52/0x130 [ 348.239386] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.244909] ? security_mmap_addr+0x80/0xa0 [ 348.249216] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.254744] ? get_unmapped_area+0x292/0x3b0 [ 348.259146] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.264674] do_mmap+0xde2/0x1360 [ 348.268121] ? mmap_region+0x1870/0x1870 [ 348.272184] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 348.276258] ? down_read_killable+0x1f0/0x1f0 [ 348.280750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.286283] ? security_mmap_file+0x166/0x1b0 [ 348.290785] vm_mmap_pgoff+0x1fb/0x2a0 [ 348.294679] ? vma_is_stack_for_current+0xd0/0xd0 [ 348.299517] ? __sb_end_write+0xac/0xe0 [ 348.303496] ksys_mmap_pgoff+0x4c9/0x640 [ 348.307564] ? find_mergeable_anon_vma+0xd0/0xd0 [ 348.312326] ? __ia32_sys_read+0xb0/0xb0 [ 348.316385] __x64_sys_mmap+0xe9/0x1b0 [ 348.320277] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 348.325316] do_syscall_64+0x1b1/0x800 [ 348.329243] ? finish_task_switch+0x1ca/0x840 [ 348.333751] ? syscall_return_slowpath+0x5c0/0x5c0 [ 348.338672] ? syscall_return_slowpath+0x30f/0x5c0 [ 348.343595] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 348.348953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.353801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.358987] RIP: 0033:0x455a09 [ 348.362177] RSP: 002b:00007f8745542c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 348.369874] RAX: ffffffffffffffda RBX: 00007f87455436d4 RCX: 0000000000455a09 [ 348.377134] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 00000000201bf000 [ 348.384393] RBP: 000000000072bea0 R08: 0000000000000013 R09: 0000000000000000 [ 348.391651] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000015 [ 348.398920] R13: 000000000000049f R14: 00000000006faf88 R15: 0000000000000004 2018/05/19 11:19:55 executing program 2: r0 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8, 0x40800) request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)='/dev/admmidi#\x00', r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0xffff, 0x0, 0x10003, 0xfffffffffffffffd}) get_mempolicy(&(0x7f0000000240), &(0x7f0000000280), 0x27, &(0x7f0000ffc000/0x2000)=nil, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000140)={0x9, r2}) 2018/05/19 11:19:55 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x91000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:19:55 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x40000, 0x0, 0x12, r1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000640), &(0x7f0000000100), &(0x7f00000007c0)) keyctl$get_security(0x11, 0x0, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:19:55 executing program 0: r0 = socket(0xa, 0x1, 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='md5sumkeyringppp1-\x00', &(0x7f0000000080)='\x00', &(0x7f00000000c0)="40706f7369785f61636c5f61636365737373797374656d402347504ceb2e656d316d643573756d2900"], &(0x7f0000000200)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='&(/@\x00', &(0x7f00000001c0)='eth0:\x00'], 0x1100) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x70, 0x84d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/05/19 11:19:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:55 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:55 executing program 4 (fault-call:3 fault-nth:5): r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xf4ffffff}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 348.765935] FAULT_INJECTION: forcing a failure. [ 348.765935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.778159] CPU: 0 PID: 22522 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #58 [ 348.785463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.794833] Call Trace: [ 348.797451] dump_stack+0x1b9/0x294 [ 348.801108] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.806341] should_fail.cold.4+0xa/0x1a [ 348.810437] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 348.815569] ? graph_lock+0x170/0x170 [ 348.819397] ? is_bpf_text_address+0xd7/0x170 [ 348.822983] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 348.823907] ? kernel_text_address+0x79/0xf0 [ 348.823930] ? __unwind_start+0x166/0x330 [ 348.823952] ? find_held_lock+0x36/0x1c0 [ 348.823971] ? __lock_is_held+0xb5/0x140 [ 348.831506] FAT-fs (loop5): Filesystem has been set read-only [ 348.835858] ? check_same_owner+0x320/0x320 [ 348.835883] ? rcu_note_context_switch+0x710/0x710 [ 348.835908] ? __might_sleep+0x95/0x190 [ 348.867172] __alloc_pages_nodemask+0x34e/0xd70 [ 348.871837] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 348.876855] ? __lock_is_held+0xb5/0x140 [ 348.880920] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 348.886103] ? find_held_lock+0x36/0x1c0 [ 348.890163] perf_mmap_alloc_page+0xf0/0x170 [ 348.894566] rb_alloc+0x14c/0x5d0 [ 348.898014] ? perf_aux_output_end+0x6c0/0x6c0 [ 348.902592] ? unwind_get_return_address+0x61/0xa0 [ 348.907515] ? __save_stack_trace+0x7e/0xd0 [ 348.911837] perf_mmap+0x12ea/0x1b00 [ 348.915549] ? perf_release+0x50/0x50 [ 348.919350] ? lock_downgrade+0x8e0/0x8e0 [ 348.923495] ? graph_lock+0x170/0x170 [ 348.927284] ? __lock_is_held+0xb5/0x140 [ 348.931343] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 348.936533] ? __lock_is_held+0xb5/0x140 [ 348.940590] ? rcu_read_lock_sched_held+0x108/0x120 [ 348.945595] ? kmem_cache_alloc+0x5fa/0x760 [ 348.949906] ? mmap_region+0x9a6/0x1870 [ 348.953870] mmap_region+0xd5c/0x1870 [ 348.957666] ? __x64_sys_brk+0x790/0x790 [ 348.961726] ? arch_get_unmapped_area+0x750/0x750 [ 348.966561] ? lock_acquire+0x1dc/0x520 [ 348.970526] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 348.974579] ? cap_mmap_addr+0x52/0x130 [ 348.978545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.984074] ? security_mmap_addr+0x80/0xa0 [ 348.988393] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.993920] ? get_unmapped_area+0x292/0x3b0 [ 348.998319] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 349.003854] do_mmap+0xde2/0x1360 [ 349.007301] ? mmap_region+0x1870/0x1870 [ 349.011357] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 349.015416] ? down_read_killable+0x1f0/0x1f0 [ 349.019901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.025432] ? security_mmap_file+0x166/0x1b0 [ 349.029921] vm_mmap_pgoff+0x1fb/0x2a0 [ 349.033804] ? vma_is_stack_for_current+0xd0/0xd0 [ 349.038640] ? __sb_end_write+0xac/0xe0 [ 349.043302] ksys_mmap_pgoff+0x4c9/0x640 [ 349.047372] ? find_mergeable_anon_vma+0xd0/0xd0 [ 349.052120] ? __ia32_sys_read+0xb0/0xb0 [ 349.056176] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 349.061016] __x64_sys_mmap+0xe9/0x1b0 [ 349.064900] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 349.069909] do_syscall_64+0x1b1/0x800 [ 349.073787] ? finish_task_switch+0x1ca/0x840 [ 349.078273] ? syscall_return_slowpath+0x5c0/0x5c0 [ 349.083192] ? syscall_return_slowpath+0x30f/0x5c0 [ 349.088126] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 349.093483] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.098323] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.103502] RIP: 0033:0x455a09 [ 349.106678] RSP: 002b:00007f8745542c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 349.114381] RAX: ffffffffffffffda RBX: 00007f87455436d4 RCX: 0000000000455a09 [ 349.121642] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 00000000201bf000 [ 349.128900] RBP: 000000000072bea0 R08: 0000000000000013 R09: 0000000000000000 [ 349.136161] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000015 [ 349.143420] R13: 000000000000049f R14: 00000000006faf88 R15: 0000000000000005 [ 349.166197] BTRFS error (device loop6): superblock checksum mismatch [ 349.179086] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 349.190432] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 349.202391] BTRFS error (device loop6): open_ctree failed [ 349.208374] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 349.389253] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:57 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0x20000) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/91) 2018/05/19 11:19:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x400040, 0x11f) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) 2018/05/19 11:19:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:57 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:19:57 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x40000, 0x0, 0x12, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:19:57 executing program 4 (fault-call:3 fault-nth:6): r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:57 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x91000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 350.350560] FAULT_INJECTION: forcing a failure. [ 350.350560] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.362541] CPU: 1 PID: 22560 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #58 [ 350.369834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.379207] Call Trace: [ 350.381834] dump_stack+0x1b9/0x294 [ 350.385500] ? dump_stack_print_info.cold.2+0x52/0x52 [ 350.390731] should_fail.cold.4+0xa/0x1a [ 350.394843] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 350.399989] ? graph_lock+0x170/0x170 [ 350.403825] ? is_bpf_text_address+0xd7/0x170 [ 350.408352] ? kernel_text_address+0x79/0xf0 [ 350.412815] ? __unwind_start+0x166/0x330 [ 350.416997] ? find_held_lock+0x36/0x1c0 [ 350.421095] ? __lock_is_held+0xb5/0x140 [ 350.425203] ? check_same_owner+0x320/0x320 [ 350.429558] ? rcu_note_context_switch+0x710/0x710 [ 350.434527] ? __might_sleep+0x95/0x190 [ 350.438539] __alloc_pages_nodemask+0x34e/0xd70 [ 350.443247] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 350.448310] ? __lock_is_held+0xb5/0x140 [ 350.452556] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 350.454017] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 350.457767] ? find_held_lock+0x36/0x1c0 [ 350.457807] perf_mmap_alloc_page+0xf0/0x170 [ 350.457828] rb_alloc+0x14c/0x5d0 [ 350.457850] ? perf_aux_output_end+0x6c0/0x6c0 [ 350.457867] ? unwind_get_return_address+0x61/0xa0 [ 350.457884] ? __save_stack_trace+0x7e/0xd0 [ 350.457911] perf_mmap+0x12ea/0x1b00 [ 350.457933] ? perf_release+0x50/0x50 2018/05/19 11:19:57 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) socketpair$ax25(0x3, 0x3, 0xff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r0, 0x9) r1 = dup2(r0, r0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000200)=0x7000) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/253) 2018/05/19 11:19:57 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000000c0)={0x1000, 0x3}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}, 0x1}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x101000, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{0x8c87, 0x9}, 0x3}, 0x10) [ 350.457950] ? lock_downgrade+0x8e0/0x8e0 [ 350.457968] ? graph_lock+0x170/0x170 [ 350.457985] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 350.457997] ? lock_downgrade+0x8e0/0x8e0 [ 350.458020] ? __lock_is_held+0xb5/0x140 [ 350.465530] FAT-fs (loop5): Filesystem has been set read-only [ 350.469552] ? rcu_read_lock_sched_held+0x108/0x120 [ 350.469568] ? kmem_cache_alloc+0x5fa/0x760 [ 350.469585] ? mmap_region+0x9a6/0x1870 [ 350.469599] mmap_region+0xd5c/0x1870 [ 350.469621] ? __x64_sys_brk+0x790/0x790 2018/05/19 11:19:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 350.485432] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 350.486977] ? arch_get_unmapped_area+0x750/0x750 [ 350.486996] ? lock_acquire+0x1dc/0x520 [ 350.487014] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 350.487031] ? cap_mmap_addr+0x52/0x130 [ 350.487053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.487069] ? security_mmap_addr+0x80/0xa0 [ 350.487089] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.487107] ? get_unmapped_area+0x292/0x3b0 [ 350.487125] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.487144] do_mmap+0xde2/0x1360 [ 350.492453] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 350.495191] ? mmap_region+0x1870/0x1870 [ 350.495209] ? vm_mmap_pgoff+0x1a1/0x2a0 [ 350.495230] ? down_read_killable+0x1f0/0x1f0 [ 350.495249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.495266] ? security_mmap_file+0x166/0x1b0 [ 350.495285] vm_mmap_pgoff+0x1fb/0x2a0 [ 350.495311] ? vma_is_stack_for_current+0xd0/0xd0 [ 350.495335] ? __sb_end_write+0xac/0xe0 [ 350.495354] ksys_mmap_pgoff+0x4c9/0x640 [ 350.495372] ? find_mergeable_anon_vma+0xd0/0xd0 [ 350.495385] ? __ia32_sys_read+0xb0/0xb0 [ 350.495409] __x64_sys_mmap+0xe9/0x1b0 [ 350.495426] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 350.495445] do_syscall_64+0x1b1/0x800 [ 350.495460] ? finish_task_switch+0x1ca/0x840 [ 350.495478] ? syscall_return_slowpath+0x5c0/0x5c0 [ 350.495494] ? syscall_return_slowpath+0x30f/0x5c0 [ 350.495511] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 350.495532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.500072] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 350.503483] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.503497] RIP: 0033:0x455a09 [ 350.503505] RSP: 002b:00007f8745542c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 350.503521] RAX: ffffffffffffffda RBX: 00007f87455436d4 RCX: 0000000000455a09 [ 350.503530] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 00000000201bf000 [ 350.503539] RBP: 000000000072bea0 R08: 0000000000000013 R09: 0000000000000000 [ 350.503547] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000015 2018/05/19 11:19:57 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:19:57 executing program 4 (fault-call:3 fault-nth:7): r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3f000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 350.503556] R13: 000000000000049f R14: 00000000006faf88 R15: 0000000000000006 [ 350.771123] BTRFS error (device loop6): superblock checksum mismatch [ 350.778380] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:19:57 executing program 6: socket(0xa, 0x20000000000001, 0x91000000000000) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 350.924300] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 351.099838] BTRFS error (device loop6): superblock checksum mismatch [ 351.115584] BTRFS error (device loop6): open_ctree failed [ 351.207079] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 351.214722] FAT-fs (loop5): Filesystem has been set read-only [ 351.231982] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 351.244169] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 351.253371] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 351.314226] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:58 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = dup(0xffffffffffffff9c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x793}, 0x4) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/35) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000100)={0x5, 0xfffffffffffffffe, 0x7fff, 0x7, 0x10001, 0x1}) accept$alg(r0, 0x0, 0x0) 2018/05/19 11:19:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast=0xffffffff}, 0x1, 0x2, 0x0, 0x1}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000300)="2673beda3cff088caf25460b0759be4e1306e78fc06d4d1a7ac6b737d9bd999d234572efa3b71988b881d38aa38b6de325851b6f70286a796d9234b0f665623afcf33a70a40ab51e8dc92f2ac1d9a3f5cc6ab7b4f2115c6868728e83a062d80008008229e3b20f6727d41629b3f48c0fb147c5e2a897a8556d65f7ec3fa645de122dcb585b9c9db1b0be19cd7811018b108fbad9aefd26d93698c15b2e04354974890d56fa770e4b609c6496c4a178680120cf702e564b1d1f32", 0xba}, {&(0x7f0000000240)="0443491c94503c06b806dbe6c23727a80b2573583d0a54872c2e55bd7ebdc4fce87d7623be869529bbcd6a40e66bca2b51fe69bff04f7de44b48f9d2ae5f7cdc1ca7f6b94bf19c5ef86fbd8989556936be6023", 0x53}, {&(0x7f00000003c0)="201f2636c92e1660ac1a769ddc2f6f605436c6ebb94050ec413af1cb39525265df296f8c3329d9053a3def9fbc6b9df4f2eb42c1c498937977767567ff36c0e1a5157f6210b46a86a105b66d5a20d36966746c07cedc7d677b314c738c5ccc12a5e9e0a76f432d74491d7b6949f47cb2effced632b6e27e77069a839df9b0f325b27d06b33c0dcab76a92a9dbc5675b001", 0x91}, {&(0x7f0000000480)="70d0bb993a16de33e612e4a57b814753390701902c2a880efe6021a2e7d9445077edb366d31824c99e8f24864911e91b09ebfcaef289254d885b89beed80af450a48410421368901d3a11ff1b7aff218e9121f5fed40d85930e690f5f89401537b98c8aa7db8e5fc7b2da502d2875dee38caaddf8e6b48de336cdee444463099a3f34b5c1ffe7beb207566379bc374918804089df8e08f2c68952851141a34151610871d1ce0bfaa1061b3322c0de24ff59114f1", 0xb4}, {&(0x7f0000000540)="fbe7bb08b95c349f7f517f6a9c638fccac0d102ca934d950f534d954e857431fb30a090c2a7f1285958c97c0f7fcaf48d4c107d62d1a02cd5e6c16cea4dcba1c205f0d9b1997026ccccbda20524ea6dba06b0340b122e068b578c6cd38240bc8997f95bf13eca5feab2b06496e296443533b038a70d2e9adbbede7204321ccca04646fe36d36b3156a44b8a69cac6d0c569d5f8ae69a4ea85a5e433022789de392b80508eb937ac406ed8ff75d7ffb52d69dfba94f9116c7042faac6b5e8", 0xbe}, {&(0x7f0000000600)="0be93fc5493a530f8d16f413b17017b5135304a6c41bef99cd5cc8f8b1c919e4fa6469969924be30ec305ff344ee09c30be02bd15418a191ff805d0fe3367d99bddb51071afe23c96bdabfb21b9e46dcf4ba47de944b7d53c6b61aad81fc10a94249e93f9b09881017e0ed1aa5d5987e107f445c5f8f5f3bf521c0c19afd37ec37", 0x81}], 0x6, &(0x7f0000000740)=[{0x110, 0x11f, 0x7fff000000, "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"}], 0x110, 0x800}, 0x4}], 0x1, 0x800) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000080)=@rc={0x1f}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1, &(0x7f0000000380)}}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000140), 0x4) 2018/05/19 11:19:58 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) 2018/05/19 11:19:58 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:58 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) socket(0x11, 0x80002, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:19:58 executing program 6: socket(0xa, 0x20000000000001, 0x91000000000000) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:19:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xd00}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:58 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:19:58 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 351.527358] BTRFS error (device loop6): superblock checksum mismatch 2018/05/19 11:19:58 executing program 0: socket(0xa, 0x20000000000001, 0x91000000000000) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:19:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 351.597232] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:19:58 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x7fffdfe40000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:58 executing program 6: socket(0xa, 0x20000000000001, 0x91000000000000) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 351.643271] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 351.650876] FAT-fs (loop5): Filesystem has been set read-only [ 351.670821] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 351.700349] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 351.708528] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:58 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) [ 351.851902] BTRFS error (device loop6): superblock checksum mismatch [ 351.864177] BTRFS error (device loop6): open_ctree failed [ 351.941671] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="6e65742f69705f7401006c65735f746172676574730085da98c38f336f9ba0f1406902b41e72aad8c5621852dd06a9bf3c25bb6b2e40880a7cf449600bd299ce956f0567ed54e19c82e5a06c15dd56c48473a540c379ab56fd52a0289b8c9920895c5ea188479d76d0c20b6eb98dc54ad124ac7db0f8e06730cbe244aee0002dd52205bee1213d081dea98dc2bb46e12cdfe5e1245bb78073ec47119efb566fb") ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000100)={0x8000000, 0x3, 0x23}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:19:59 executing program 0: syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f0000000200)={[{@codepage={'codepage', 0x3d, 'none'}, 0x2c}]}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x1, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xfffffffffffffffc}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e21, 0x4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x9}}, 0xfffffffffffeffff, 0x8, 0x2, 0x4, 0x15}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xffffffff, 0x1de6, 0x2, 0xa4b6, 0x8000, 0x1, 0x4, {0x0, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, 0x7, 0x93, 0x5, 0x4ea8, 0x4}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0x101}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r3, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, 0x5, 0x3, 0xb6ce, 0x100000000000, 0x6}, &(0x7f0000000500)=0x98) 2018/05/19 11:19:59 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) 2018/05/19 11:19:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:59 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x7ffffffffffff}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:19:59 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:19:59 executing program 3: socket(0x2, 0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:19:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x48080) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r2) write$binfmt_elf64(r0, &(0x7f0000000d00)=ANY=[], 0x0) close(r1) io_setup(0x20000000000008, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140)}]) 2018/05/19 11:19:59 executing program 2: request_key(&(0x7f0000000280)="7573c0aa00a4ddd1d30d34c02295d43e4c8a8a7550929b8f7cc6b09a1dbf7e108f62112647b8d94ba15352375aa95ed74a40eb89b87ecdff0fa2e1b680ca91962f857fd1d332d7996d3023a60a670907327c7d8cbd67944abda4fc228f36e10143ce661996aa8edc7ef4b393bea02c79bb2083a13c9f0a545dce1a142abd", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)="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", 0xfffffffffffffffe) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8000000000000, 0x6}, 0x1, 0x9, 0x10000, {0x5a0, 0x3ff}, 0x7, 0x81}) 2018/05/19 11:19:59 executing program 3: socket(0x2, 0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000000080)=""/15, 0xf) [ 352.630738] BTRFS error (device loop6): superblock checksum mismatch [ 352.668948] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:19:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:59 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3003, 0x0, 0x11, r0, 0x0) 2018/05/19 11:19:59 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 352.739756] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 352.747604] FAT-fs (loop5): Filesystem has been set read-only [ 352.772998] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x8000000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 352.783486] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 352.791263] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:59 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0xffffffffffffff9c, 0x6, 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}, 0x20) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000180)=0x1ff, 0x4) truncate(&(0x7f00000000c0)='./file0\x00', 0x6) [ 352.934264] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:19:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:19:59 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 352.993482] BTRFS error (device loop6): superblock checksum mismatch [ 353.021489] BTRFS error (device loop6): open_ctree failed [ 353.232817] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 353.240400] FAT-fs (loop5): Filesystem has been set read-only [ 353.259550] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 353.270226] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 353.278153] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 353.365238] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:00 executing program 3: socket(0x2, 0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:00 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3004, 0x0, 0x11, r0, 0x0) 2018/05/19 11:20:00 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:00 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e22, 0x2f98, @local={0xfe, 0x80, [], 0xaa}, 0x2}}, 0x9, 0x8, 0x3, 0xb724, 0x41}, 0x98) 2018/05/19 11:20:00 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0xa, 0x80801, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) request_key(&(0x7f0000004340)='big_key\x00', &(0x7f0000004380)={0x73, 0x79, 0x7a}, &(0x7f00000043c0)='proc\x00', 0xfffffffffffffffc) 2018/05/19 11:20:00 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) 2018/05/19 11:20:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000803e00"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xf5ffffff00000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:00 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = getpid() ptrace$peekuser(0x3, r0, 0x5) [ 353.791190] BTRFS error (device loop6): superblock checksum mismatch 2018/05/19 11:20:00 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:00 executing program 0: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000fbe000)='./control\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f000001aff8)='./file0\x00', 0x20040, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={r3, 0x7, "9ec50369e24313"}, &(0x7f0000000180)=0xf) 2018/05/19 11:20:00 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3002, 0x0, 0x11, r0, 0x0) [ 353.854947] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:00 executing program 6: r0 = socket(0x0, 0x20000000000001, 0x91000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 353.908741] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 353.916363] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:20:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xffffffff00000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 353.949016] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 353.957564] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 353.965418] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 354.105344] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 354.241367] BTRFS error (device loop6): superblock checksum mismatch [ 354.250611] BTRFS error (device loop6): open_ctree failed [ 354.348775] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 354.356662] FAT-fs (loop5): Filesystem has been set read-only [ 354.368273] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 354.376962] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 354.387862] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 354.464248] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:01 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x8000000000000, 0x11, r0, 0x0) 2018/05/19 11:20:01 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:01 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0xfffffffffffffff9, 0x3, 0x2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2018/05/19 11:20:01 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:01 executing program 6: r0 = socket(0x0, 0x20000000000001, 0x91000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3f00000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:01 executing program 7 (fault-call:7 fault-nth:0): mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:01 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4e) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x100000000, 0x536, 0x164a, 0x6}) 2018/05/19 11:20:01 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:01 executing program 0: clone(0x1, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000cd6f68)) socket(0x9, 0x6, 0x0) 2018/05/19 11:20:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:01 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x40000000, 0x11, r0, 0x0) [ 355.007819] BTRFS error (device loop6): superblock checksum mismatch [ 355.038284] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:01 executing program 6: r0 = socket(0x0, 0x20000000000001, 0x91000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 355.100642] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 355.108515] FAT-fs (loop5): Filesystem has been set read-only [ 355.139470] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xffffffffffffffff}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 355.149339] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 355.157580] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:02 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x7, 0x4) [ 355.315351] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 355.426380] BTRFS error (device loop6): superblock checksum mismatch [ 355.435868] BTRFS error (device loop6): open_ctree failed [ 355.586583] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 355.594259] FAT-fs (loop5): Filesystem has been set read-only [ 355.616274] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 355.624734] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 355.635258] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 355.720284] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 355.878064] FAULT_INJECTION: forcing a failure. [ 355.878064] name failslab, interval 1, probability 0, space 0, times 0 [ 355.889351] CPU: 1 PID: 22913 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #58 [ 355.896630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.905990] Call Trace: [ 355.908593] dump_stack+0x1b9/0x294 [ 355.912229] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.917408] ? _kstrtoull+0x180/0x230 [ 355.921198] ? _parse_integer+0x190/0x190 [ 355.925336] should_fail.cold.4+0xa/0x1a [ 355.929386] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.934486] ? graph_lock+0x170/0x170 [ 355.938275] ? lock_downgrade+0x8e0/0x8e0 [ 355.942411] ? find_held_lock+0x36/0x1c0 [ 355.946458] ? tcp_v4_rcv+0x1c60/0x38c0 [ 355.950444] ? check_same_owner+0x320/0x320 [ 355.954766] ? proc_cwd_link+0x1d0/0x1d0 [ 355.958818] ? rcu_note_context_switch+0x710/0x710 [ 355.963746] __should_failslab+0x124/0x180 [ 355.967975] should_failslab+0x9/0x14 [ 355.971763] kmem_cache_alloc+0x2af/0x760 [ 355.975897] ? wait_for_completion+0x870/0x870 [ 355.980653] getname_flags+0xd0/0x5a0 [ 355.984455] user_path_at_empty+0x2d/0x50 [ 355.988703] do_linkat+0x180/0x9d0 [ 355.992253] ? __ia32_sys_symlink+0x80/0x80 [ 355.996564] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 356.002100] ? fput+0x130/0x1a0 [ 356.005366] ? ksys_write+0x1a6/0x250 [ 356.009161] ? __ia32_sys_read+0xb0/0xb0 [ 356.013211] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 356.018738] ? do_syscall_64+0x92/0x800 [ 356.022701] __x64_sys_link+0x5e/0x80 [ 356.026484] do_syscall_64+0x1b1/0x800 [ 356.030362] ? finish_task_switch+0x1ca/0x840 [ 356.034842] ? syscall_return_slowpath+0x5c0/0x5c0 [ 356.039767] ? syscall_return_slowpath+0x30f/0x5c0 [ 356.044690] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 356.050045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 356.054882] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.060064] RIP: 0033:0x455a09 [ 356.063233] RSP: 002b:00007fdf1a208c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 356.070938] RAX: ffffffffffffffda RBX: 00007fdf1a2096d4 RCX: 0000000000455a09 2018/05/19 11:20:02 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3f00000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:02 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x80ffff, 0x11, r0, 0x0) 2018/05/19 11:20:02 executing program 6: r0 = socket(0xa, 0x0, 0x91000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:02 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000180)=""/136, &(0x7f0000000240)=0x88) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000280)=""/81, &(0x7f0000000300)=0x51) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x8000}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={r2, 0x8}, &(0x7f0000000400)=0x8) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x100}) 2018/05/19 11:20:02 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:02 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x500000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 356.078191] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000080 [ 356.085711] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 356.092967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 356.100229] R13: 0000000000000484 R14: 00000000006fad00 R15: 0000000000000000 2018/05/19 11:20:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000803e00"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:03 executing program 2: request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffe) socketpair(0x9, 0x806, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x8000) 2018/05/19 11:20:03 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x3f00, 0x11, r0, 0x0) 2018/05/19 11:20:03 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:03 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3f00000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 356.271608] BTRFS error (device loop6): superblock checksum mismatch [ 356.289527] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:03 executing program 6: r0 = socket(0xa, 0x0, 0x91000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 356.369920] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 356.377550] FAT-fs (loop5): Filesystem has been set read-only [ 356.403087] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 356.412335] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x5000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 356.420168] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 356.586405] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 356.706516] BTRFS error (device loop6): superblock checksum mismatch [ 356.713973] BTRFS error (device loop6): open_ctree failed [ 356.858343] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 356.865926] FAT-fs (loop5): Filesystem has been set read-only [ 356.876237] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 356.889717] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 356.899093] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 356.962286] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:04 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='//control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:04 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3f00000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:04 executing program 2: r0 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)='eth0@-\x00', 0xfffffffffffffffe) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)='eth0@-\x00', r0) 2018/05/19 11:20:04 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x0) 2018/05/19 11:20:04 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:04 executing program 6: r0 = socket(0xa, 0x0, 0x91000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:04 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x500}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:04 executing program 0: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x3f00, 0x11, r0, 0x0) 2018/05/19 11:20:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:04 executing program 2: r0 = msgget$private(0x0, 0x40) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)) msgctl$IPC_RMID(r0, 0x0) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r2 = memfd_create(&(0x7f00000000c0)=':\'lo\x00', 0x1) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000440)={0x40, 0xc, 0x20, 0xe8, r4}, &(0x7f0000000480)=0x10) dup3(0xffffffffffffff9c, r3, 0x80000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x20002, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000140)=0x98f8ecdfe791ef7f) 2018/05/19 11:20:04 executing program 3: r0 = socket(0x2, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:04 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x60000000000000, 0x11, r0, 0x0) [ 357.418120] BTRFS error (device loop6): superblock checksum mismatch [ 357.446392] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 357.454110] FAT-fs (loop5): Filesystem has been set read-only [ 357.461633] BTRFS error (device loop6): open_ctree failed [ 357.486729] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 357.515689] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:04 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 357.530194] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:04 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x7}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:04 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xffffffffffffffff}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 357.664385] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 357.777652] BTRFS error (device loop6): superblock checksum mismatch [ 357.819960] BTRFS error (device loop6): open_ctree failed [ 357.900507] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 357.908126] FAT-fs (loop5): Filesystem has been set read-only [ 357.926457] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 357.934969] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 357.942843] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 358.031283] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:05 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x602400, 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000100)) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) fcntl$getownex(r0, 0x10, &(0x7f0000001300)={0x0, 0x0}) waitid(0x1, r1, &(0x7f0000001340), 0x1000006, &(0x7f0000001380)) syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@locktable={'locktable', 0x3d, '+()vboxnet1\'posix_acl_accesscgroupppp1user\ncpuseteth0vmnet0selinux}'}, 0x2c}]}) syz_mount_image$ocfs2(&(0x7f0000000200)='ocfs2\x00', &(0x7f0000000240)='./file1\x00', 0x7, 0x1, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x1000, 0x9}], 0x8, &(0x7f00000012c0)='\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001500)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@mcast1}}, &(0x7f0000001600)=0xe8) connect$can_bcm(r0, &(0x7f0000001640)={0x1d, r2}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x80, 0x8, 0x591a6b86}) 2018/05/19 11:20:05 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./.ontrol/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:05 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x80000000000000, 0x11, r0, 0x0) 2018/05/19 11:20:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xffffffffffffffff}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:05 executing program 3: r0 = socket(0x2, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:05 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:05 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x600000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 358.354532] BTRFS error (device loop6): superblock checksum mismatch [ 358.358396] gfs2: not a GFS2 filesystem [ 358.370096] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xffffffffffffffff}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:05 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r0, 0x0) 2018/05/19 11:20:05 executing program 3: r0 = socket(0x2, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:05 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 358.495211] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 358.502991] FAT-fs (loop5): Filesystem has been set read-only [ 358.527289] gfs2: invalid mount option: „7×áZ áÚ5ÍÐy[Äÿ·O$D]ìkþ‹ñÄÍŸÀ6ˆ¥Sy˜Ãç^W EPÉ€CzÔ\ÓR‹k E›‡²Ð!h(ì(bs [ 358.538082] gfs2: can't parse mount arguments [ 358.545640] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 358.558109] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:05 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000600)={0x100000000, 0x1d3, 0x18, 0x4}, 0x6) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000180)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/50, 0x32}], 0x3, &(0x7f0000000400)=""/143, 0x8f, 0x1}, 0x1) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x440200, 0x0) ioctl(r1, 0x100000001, &(0x7f0000000540)="482b4ab90cb8e16419d1634c1167497fa9f7348e0a684d84ce6a56888cc4aa393750b397406bed05ae355a6f2910cc4fbb3c021c94aa7437bae30e7ab979c1579dc1af1b1ced33c501a5d24309676196b5ed306ce71f472735d19d2a4eb815ecb5e9d931eae5f4faa3a8792a0017e7933786ee76ebf55ca00bc54421de7e3c2592f4a7fdbbce3fd450d3b4086a2305d02146b70866ef9c3abe42756a") ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0xf9, 0x0, [0x3, 0x8, 0x4]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000500)=0x2, 0x4) [ 358.586272] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:05 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x400000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x7}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 358.716435] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 358.746125] BTRFS error (device loop6): superblock checksum mismatch [ 358.770163] BTRFS error (device loop6): open_ctree failed [ 358.967100] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 358.974736] FAT-fs (loop5): Filesystem has been set read-only [ 358.987169] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 358.995855] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 359.005434] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 359.064228] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:06 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x80ffff00000000, 0x11, r0, 0x0) 2018/05/19 11:20:06 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:06 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = dup(0xffffffffffffff9c) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000000c0)=""/68) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000240)=0x3ff, 0xffffffee) time(&(0x7f0000000040)) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000280)=""/193) 2018/05/19 11:20:06 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:06 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='.//ontrol/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:06 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xf5ffffff}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:06 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x7}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:06 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) [ 359.470492] BTRFS error (device loop6): superblock checksum mismatch [ 359.497750] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:06 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x7}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100000001, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000100)={0x5, 0x401}) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:06 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x8000000000000000, 0x11, r0, 0x0) 2018/05/19 11:20:06 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 359.631239] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 359.638872] FAT-fs (loop5): Filesystem has been set read-only [ 359.655293] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 359.666298] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:06 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:06 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xc0000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 359.674322] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:06 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x20000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000100)=0x3ef, 0x4) 2018/05/19 11:20:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 359.819326] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 359.917059] BTRFS error (device loop6): superblock checksum mismatch [ 359.924619] BTRFS error (device loop6): open_ctree failed [ 360.127786] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 360.135398] FAT-fs (loop5): Filesystem has been set read-only [ 360.149561] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 360.160508] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 360.169551] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 360.268246] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:07 executing program 0: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x80ffff00000000, 0x11, r0, 0x0) 2018/05/19 11:20:07 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:07 executing program 2: request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:07 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x200000000000000, 0x11, r0, 0x0) 2018/05/19 11:20:07 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000803e00"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:07 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/.ile0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:07 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xfffffff5}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:07 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='eth0@-\x00', 0xfffffffffffffffe) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x40200) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x26, 0x100, 0x70bd29, 0x25dfdbfd, {0x1c}, [@typed={0x4, 0x58}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xe2002, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000380)=""/85) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r3 = getpid() kcmp(r2, r3, 0x0, r1, r1) 2018/05/19 11:20:07 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:07 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x800000, 0x11, r0, 0x0) 2018/05/19 11:20:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 360.570014] BTRFS error (device loop6): superblock checksum mismatch [ 360.607226] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:07 executing program 0: r0 = socket(0x0, 0x20000000000001, 0x91000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:07 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 360.706151] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 360.714006] FAT-fs (loop5): Filesystem has been set read-only [ 360.745476] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 360.754693] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 360.762742] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 360.920304] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 360.951516] BTRFS error (device loop6): superblock checksum mismatch [ 360.960338] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:08 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control//ile0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:08 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x100000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:08 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:08 executing program 2: request_key(&(0x7f0000000200)="75732572c3b700", &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)="d5f93c54838c70efce6de3d508db50cbf62b0e79dd9eae89306310f41eb420f9f1990afd69ac460f5d1416935c4098d5ff89e0215a7d0f6ef31b4bbff0ca40a613bd39ecbe", 0xfffffffffffffffe) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x44) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000100)={0x2, 0x81}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000240)) fcntl$setsig(r0, 0xa, 0x7) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x3) 2018/05/19 11:20:08 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff84, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x0, 0xf6d]}) 2018/05/19 11:20:08 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0xfcffffffffff0f00, 0x11, r0, 0x0) 2018/05/19 11:20:08 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:08 executing program 0: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:08 executing program 2: r0 = request_key(&(0x7f00000001c0), &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000000)='[^\x00', 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x9, &(0x7f00000003c0)={0x17, 0x7f, 0x8, 0xf1}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000440)=@int=0x6, 0x4) request_key(&(0x7f0000000100)="7573657223d0132cde6b4400", &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)='eth0@-\x00', r0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x54, 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)="c47c5ca63e390abec56c74e2c36f825346361b0b16b2cd6712a1371d5e76239004c25d0f3c9646ed9aa2f0704835125e25dc8c400b7ce1e939a953f2c141e21f6c57ed6da0932d704a85dd7a28b9178c0c2b3bd0f0a3c61318ee52607c0eae5e6ae232caabe81faf5f550ea19af60574ade6d73eb4cd2eecf58335e1487868e595f534fc4d8414c203a1a277747897ed31cba204c4d147e5bc813ba0e96bc03b26e88b05266415e5aa89d1316d54fcc3aec34b4750899bdfc26c12", 0xbb, 0xffff}], 0x40801, &(0x7f00000002c0)={[{@nobarrier='nobarrier', 0x2c}, {@type={'type', 0x3d, "e8ac0b1d"}, 0x2c}, {@decompose='decompose', 0x2c}, {@uid={'uid', 0x3d, [0x35, 0x39, 0x0, 0x30, 0x7c, 0x7d]}, 0x2c}, {@type={'type', 0x3d, "2be55378"}, 0x2c}, {@session={'session', 0x3d, [0x0, 0x78, 0x37, 0x31]}, 0x2c}, {@nobarrier='nobarrier', 0x2c}, {@umask={'umask', 0x3d, [0x30, 0x36]}, 0x2c}]}) [ 361.838478] BTRFS error (device loop6): superblock checksum mismatch 2018/05/19 11:20:08 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:08 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x4000000000000000, 0x11, r0, 0x0) [ 361.883341] BTRFS error (device loop6): open_ctree failed [ 361.912621] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 361.920275] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:20:08 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 361.962911] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 361.971553] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 361.993724] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) fallocate(r0, 0x2, 0x9, 0x3) open_by_handle_at(r0, &(0x7f0000000180)={0x61, 0x4, "49a5f3590c44e0a123446c8255bbb9b848e8fa28ed6f652aaa7c2317656d73aaab8ef1dea9040c3405f0c9ff26b9d54b27cb0d66c5f19e756328fc429c47528f580bb7b83792dfbe831ec4be71c7165b584f3e0f63ae91fdba"}, 0x20200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000520001000000000000000059ddb549223f6e684a77ee000200f2eb232dd3d4", @ANYRES32=r1], 0x1c}, 0x1}, 0x0) 2018/05/19 11:20:08 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xffffffffffff0700}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 362.172272] BTRFS error (device loop6): superblock checksum mismatch [ 362.186466] BTRFS error (device loop6): open_ctree failed [ 362.213363] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 362.410226] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 362.417993] FAT-fs (loop5): Filesystem has been set read-only [ 362.432387] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 362.441873] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 362.451288] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 362.524305] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:09 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x40, 0x250040) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000011c0)=ANY=[@ANYBLOB="081000000700000038f6c5b695b053ce26cb9a1fc60397e209951b3c2b128c12411a7679567d50b5d90f519358e7b7ddf2adb7950fe78c0d1410ed8b8613481a4a9b14e9fbe6fcf308ebab0a847d2be5a4dd6908a1ab7758e61303e331ef73f757259353dde2572612ebad69773ae0329823274f18d0b2aa1fd987f9344b198fb7f820e5d6f6e8b4e5c45b2aad3403961d5d9843f98931019c9cd7164461d8ef835117d7a8ffea2af9392f9766fe01b4260d510045b4e752c33dff487fce64d30338d6fe1bccccad18926c8dc896c6ba509e60db8b818841c31f496526d35c0a3668be18ecf570c8fb561c5a7f7a04fe333b4518a32e4f1bd4510a68f1d99189441048470c50f06136d860dfaa06aca14a576060cbb86b1389a8414a940fd90de6b2d7c65b96f33ba81dae098f8c8e9ac0a08558ab202938d4896ea7a1f981ade2665b9e6d4d9b593c000571c0675bc18230310a1ef8338108caef4cadfbf1a47c910f35aba66f499fccd0841fd1d8deb8924b7bdee308bc3cf895373aa9a7352e5cd1eb9a60203b46fe9bf40cadfdb465fc9426bd71485fc5c37c88acea15ff9ec146444f16b385a7c4406581656cfe5c5f804522824ddc34b80c79e5f7414682928b348bd7b0f0c790a3de1d47fa49277c49ed9e10a7d4b2a179e496f68ce6f9e4ae08188cfcd348a8f8d0a794f174fd462cf31d75e45b83a40ffbf2e2a6dc51f47cd20b644f80d0cf5f9efc7b54d72703b47c80ada78f3a585a6e8887d98f3daa863babd471cc97815933e42fc3ee85c784c11f71c4e34561640baf179b3adb15e6a46c30ae8ca89a89d7f0f52b33d14ee56b8352a28b807257195b21cf92b58c0e7cd49e546b77ce8084fd00ca187017b0d639438879dfbb09fb96abe419f92f0ba1f92f98e2cb8d8bed1ef28699e2e6f2e1d3266e354b3389210755c748507ae6900cb965504b70ce0105d8cfb9dd08cae7f0c66f9999aaa87254f55dc324f0b25e287aa95fc7e12184b4c52ada69aae1a4053d82cfc94f8ad82936d6b14247611fe387c58d980dcb27189a8caa449128a7914a8d986f20bf3c32808475c6151dd5f308a0de95b33c75f9f396cce9a3f4c287f3b712becf17df6c614f5810fd02cf494d5abf22a7e523054f41292e9d8612bd331635ebe0e67f06403af95744e071b78f39c03962bce385b315ce75202d89d2bc4b82ddb3027ab1817e70431995f1bb74b4d964e051011f07c31aea16ecd93440b1dd14b9191494d60eb0cb48dd0b6d2c7e31968dc598882545a4b97e88b7c222686d6b39342ce6a0a068003d855f2e6f80aa3550a44a8962164a78818405883f3a6e1b3bbc7bfdf77d4b4aed3d768e5f100e66692fc7432dd41655706b91413136e5575c185c2d5bfa58363b967c042579c8cd6543968527eb3caed66d1e912ce68a51159678112e9a2a6b8ad577bd45d0355db08541a29e7fe1d4465a405840e4d496a12d216d3b3a195f75d7809938e37ea362ae342667aa77d459eba1e0f1220d609b8b7c1992353a0edca59f9fb9065edde4b08e14f8b538408438fee69bebbd64495daec62b8f67c3f2f339ee213c1b513d51fef60559a574f896169f6204ef31be4fda88f89700c5705298ada50d485f6decfd4457c593784f09fd7d310fc493fb9874b0235f21baa022f4e870af1007f511242211d372b6e6a809b2d1fb011d8d6a006b59f5cbd687fd59a3ddaab23d9cc0ba7cc810ed63fbc377b916d8efc96f65c5722747cd46611165c0da130173e349364fb4f5dd3f281c69a3735bc4fc57864aeb4d6f3bb795677ad8f77c32fa1f179b51e0e777333672c63e2cdf69e00522da360061a3d187a483ba01a0acb5b826e1e79715a3c34019dcbe1c08adcd2d3ad86bfd19edbe3679cf28a67ebb1b2cc2a317a53c7acb368337e92d52767f9c21e30e986e7b4d5e592b0687798070a1be57a25df8790ab8b47b2ca534fbeb691cbe5f465e69a376c8e064fa21269617e25529c922c69e4c830fccc3dbf82845edf33e7f511cd758c0c08db6f249264fdf1e27c6f2d542e829f5b033f38dc30a70c2a6a082178c4cd8647d66aa5fe16e8e89082e73dfe2c360329a54babe6c56b054908a78db35400730a338486f7c8e08edebb8cc014cce19d38729487f3ba80f30d6f01cf61ac4874ad9241e9115a1a10fad0298e8bc3c9aefb91366986eb79a1493ce2c326571ac00254e3b45d20fcc66080b16b7133d19e6b4f0e7f808ce15533de2f04cde59bd1e0238e4d51210c4c0ff563ac7c42c540bfb0f30cfd0b1a5d3d2b2d0a804a1ae417cba62af2605ddc3818d7a43c2a89eb16bea5b10229dc22c93dc7657efe2384eb30f24d85d9a9e43250abd33c28f17a9d1870782c12194fbe75f0430a244eb22c9d322b8ddd9d402ecf4b791a00f56a75c7873579384fda549b72db5c735211817ed4f45ca150867c8ff46f610226377c68156dc1e314916829f2f3950355b0dd8a79c1a2c5954f5ac551df12a3f3e8462b3fcdb6a1503b8104ad986a16fc30144373a50754ccd3142aa62d3dcc3ce391cd4253b1e7fa10d68a2cd6e6fba953ecc63c5a3342e7116dca3bc8f2e28e86617fe3d05b537d53f8e4fd95c1925a2d9c0c8f15adb5205640732bf3075fac360915efce12d995bb00d6f91f15c2ba62d0278412befe74df6b3ba2a03de7767ec6e5b2343b448df14c3e3314bca662b58b30b9610c8487eaac4a8803a9809bff76abbbdf20697720a403ef77c693c5e404f504222ae83c5aca123d9cf67267bd54f1b49a155febce39b5a6f05effa3b5d2ed6f9e4f851dba0034131386d7cb14dbe4be83baee6d368ad2768ea6dd803c872e8a7ecf4008673e0a565cd85d34427d1b3a0c5601a4c9374fd72f54aea00cb3b54fd232a49332a7e03201b6ecb64733537c4fe5ae50f74d2c4c1ee20b4274ba0c73307aaac09a93bdc81b032cfed3092872231fae58302a0557ff2d035598c9e5f6dba94bd24c0f75a50252b33f92a0308482c03eb83dc542429daf5fd459c84afef1182cfa908b2a6574e2df71a60406810b0e38afce0c5e0ec8f748b778d3baaa1f55281aee820da9a4488e44de0489a049fdede9cbb8db5f55f935527c22f4f91d003ca5772607a06bba9be47594f802012d45357975e71cbde711568f88fb2ca6fa633c13e71159d31ae8eaca64789e61c81bb7e6e7d7999201ba6ca645de22445d54c2af8726b5a2b798582d44f796a690d89fc6dd3e4d5081170f60dfaf36b7d9f341c38872c8f1305a1925d44afab90a728ee7de2acb9e75190e37b61847c8f13624dd87319bbd111842ceecdf6a45138f3c38b496a16d2e58dddc5d72fa14f8b4eda2f57be47a9320ebabc409b3ad7cf9776350ad0e1f194ee343d613d58bd79d01cc586b7f8059ec3376270aaea0d9124dc12ab8014c709c335e7c4060c45df55a1d984826f1bb85df18e8b78af562d27c13c37f937b36a2bbd0da93af5dff2e442a4ee4de66a5a57b6b9202c30be695e7b65e1f26c62e750eb49d291ac0ffa21490a518975aa55d802d654b2f57fb886478521a2616898dae65fb2de9aaf6500654317feb43129da9e341f1bd52add48566b376ae7c367d7c5d225919c19ecd3369e91adb43d2e8d4646294494c17b5b18b793f6327f0d40fec0333e93a4e282c9f1bf13e5276402dda1c749bf2b75e6cafaffdc0329aa144d9ed774e39852be67a430ae389ba52ab5ae7878f50269d7e24f2dcab4929432daf5103ebe642002c2f4392bec50bcf9626a75263bb2a38844ef8a48a519bac50ed729a4b195ba9acd18ee2d314697f6f3c86fe638072a6257422f0374405112e98fedf932441351e7b897881e62e76355c015f167f8ca76c097c81728db67a0f33a690f3eb28e12672e0b3941995a01b02bb2e3418f9af7020feb3e18ea35cd653d81f5a84801676e675fbce7e94ce5ba2ffab67e798d02bcf3f80c5d4886519cce84b1ebd8f434bab7e63d269081af31145245a4706c436a94105c8c25539686d5f9f3b33af43d9a89cd3028e00dbae7464a1a5b155f61f1466b583400ce2e663b84eb8f9577a0de3d655a077cae2ce99c1842def1224f2c3a8906b6490c9c38afa1e4f594368610697bbcddb933268f1ea5bcce658d0f80a4a1f2133de0a074c3eef2b54e15f061b809461ab69de6b4dccecef6e9887d26178204ff16d475bccbf81135c3560492af0076ada64f0bce292a28d002db8987f2897879b3511ca1b7fe6eafe0c9e73b464ec11dc69e9e0264e5541dcfd76a2413ae20014b5c90e97431bf2820e53bd087915b59d147265bf1b5304cd670c2a4a661967051150af36369ef96705dd0a6ab40df77b79f3c0bbdfab4705437709a9caa52a00de06df904a6ff559f91b64ebc1e8507e1fe556dda88ef736cc03cc2bb2b2e99c1baf31a9924e4c9c016c5a408441f895dda6c63865659156cddce0b15a74d1d6f5474ff0e2eb45bcac458edbde73d44e5d752e261f336a571f04e3ea360ad3bebf9e29a099aeadffa8c2147fec432e7c35d3961b1e856013fb8861a773fbe413c0dae1d2b34e0eb60940c6fc4cbea858b51b26648a7ef2157c5baa0a54189233543ed139f9a3853bf79b50842d92901df67e98df1059d7ec01e76c836acb38617dd392152690ed7c68ef4dad88cad762c0996e9d76aa5821340e06799425058585b69c652823c7dff8a059baae330b649eae8755f27587b3b2e80f957b56acb0955d1e860e61d686fc368bade57927774cc3867fe679f9ea6d6ecebfa0f9199ace7e78fef9694c639fb36703cae6492efd0313774d32ea421781318e6a775221450a25e57c2d2b89d15a1670faf773ae83842320aa19785f152cdde9f1e86895254d225c70e2fedfd1a7363977c5d28dc54a7709aae8ad80bd4898e48a5e07831ddb84fc013d99d6d97ec86e8a6a6f9c6279c4494cb131d51bb9c891ef1b4879dcd2fa38997d32aaa5e7c04ac417939c51939814925aba1cf7c576e3c696848a69c364e1a01854220b331b3a8d62177750992873643cbc7e00ca8ab77bf408945faff7f725491bc05183ff63b0eff1b5169902d1c5615ec7e7638aceab6b15ae171bbea50e9af4b05b4a8334b735721c97704b2b1482264b730e02f597d59f75cc9e9083e698cb24dc6d737488bf805cb6b0f07742a661b57945408b7630a5548201c07a73777d505b8e8642df09ad98c04e713bb28687ef87c8c59074cbb34359da896697a3b342f43f3dabf0d188a2f51a971b77e5dec0b82215561ecea38b1cbc81431d67046033a6e4a483cc07a9d15a7786585b8e1e18d204a61540a2d501f3d082162d628c59ed90cde92f0c3b55229fa67e1859012e8a261dbff24da2dfbbfaa7298634f027db842686e502ca5e0fde8367002c4fba6cda8f367185d842426bdbb162e2c5bec7c6d766244ccdaf76148276276e982c0b8e537c432345f3e7c30c755aad566337e7a8513b791c2cafeacefee686f697b7cdfe0fff96eff0298571cc01fe9f2ac0ab8bb06f38600f2b2c073e4eb9ff22d2d707a98e451603532618ab0a766a65d30ffebe819534031957c2f00b2b30385b23f1a98bba42e5dec47fad991d74161376bb09ac32f016e04a6fe0819e10a1c2fedea50a6c47216e098084b4496e742f35d04c57fd909e3023ce7607a92be175254f2be5fd5cb3f74ff3b383d55f683f530f9d88ff265925248a9b9e8c87b927c782b641b43178877f00897ce82ab864b39de3928002fd56c5958fc706f248b0b01e849e781095d2fbdfb0f0e705ce72db54e9961de852068bb89"], &(0x7f0000001180), 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x7, 0x3, 0x1, &(0x7f0000ff3000/0xd000)=nil, 0x1}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) bind$llc(r0, &(0x7f0000000180)={0x1a, 0x306, 0x5, 0x10001, 0xb887, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) 2018/05/19 11:20:09 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:09 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:09 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x3f000000, 0x11, r0, 0x0) 2018/05/19 11:20:09 executing program 0: r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f00000000c0), 0x69b) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0xe6, 0x3f, 0x2, 0x5}, 0x10) 2018/05/19 11:20:09 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)="2e2f636f6e74726f6c2f66696c65307f", &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3d00}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:09 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 363.028895] BTRFS error (device loop6): superblock checksum mismatch 2018/05/19 11:20:09 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001240)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001280)={0x1, 0x0, 0xd, 0x2, 0x3ff, 0xff, 0x7, 0x2, 0x0}, &(0x7f00000012c0)=0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001300)={r1, 0x5, 0x6, [0xbdd8, 0x1f, 0x3, 0x1, 0x4, 0xc0]}, &(0x7f0000001340)=0x14) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:09 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioprio_set$uid(0x1, 0x0, 0x7fff) r2 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001700)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) lstat(&(0x7f0000001800)='./bus\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000018c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003000)={{{@in=@rand_addr, @in6=@ipv4={[], [], @dev}}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000003100)=0xe8) lstat(&(0x7f0000001900)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000019c0)={0x0, 0x0, 0x0}, &(0x7f0000001a00)=0xc) r8 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001a40)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000001b40)=0xe8) r10 = getgid() socketpair$ax25(0x3, 0x0, 0xc4, &(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = gettid() r13 = getuid() getresgid(&(0x7f0000002e80), &(0x7f0000002ec0)=0x0, &(0x7f0000002f00)) sendmmsg$unix(r1, &(0x7f0000002f80)=[{&(0x7f0000000080)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000240)="331a0ae8373aaaaa25c0c5e02675e6f8d44e723f7741fbe5c422559be6a482bf2383885c137f36e0162496e1e6deefcce4c57a64fce16b57660abbd22c11b5dac9e0cef7c544f4d60b572bc71dc6a17055d8862d791a4543677e5942ff678e73fd0ea3b76d4f44b77cc28e93527f78f31879d8c592a174b5084592fa7e20a6139ed630bebdade6d88bdfab53f172", 0x8e}, {&(0x7f0000000300)="5212f97c447245602e38323be12f9a36163e344cd5c9507e97e9e8d3c803e13d4ddbd9f3d5a72b3ad22e748c56cd8b678110f09084fb0f1aacfcb90e515b4b828d1b059f0566d9c0c1551180c168513c0222699e3c9906bb826e1b170a0613ba010537b1a63a53b28660d9a6a07bd57eb224e184afdc7c967555a3afb43503241cc01366a91efbf19169f5dd0754396eaf967993129b5213b2d04829203dd546ec3f15f2b13f2709c6", 0xa9}, {&(0x7f00000003c0)="cb12349727f911b567d254f002840bd0f61c118e4e0174796b72bf1ada3ac6e878fabba4f2c18c88458ea84b0cae2b73e1c3aab074238c81249ec862e935799220a509b26bde3ba6ac9a070d339bdd1f72545cd6f036de449809359c5c4583103043f06852791c30e39e02e3d3ba78de2594ee747ad83982a0ce2b840936e0d1e2fcb6724667f858fd0b3a149ee57dbd656bffd1989b8601ba8fabb5e466d3c8c775", 0xa2}, {&(0x7f0000000140)="eaf8f14401e1a2ae2b4f1a60c839f9fa30fa85402e5cae611c16dbbd59276db4a4b8bb2c505fceaac765daaed21311fca6ebe258000d96af3e5bbe71a8192bc991a56c43d78994297ebab3e1", 0x4c}, {&(0x7f0000000480)="0e814d4489f00cd6bbe38b272b154bd3f8fbc7f736e50a18f439cd9d10298def766675a827dc05d3390104fe6c3f7ecb659fc2690c5cb0a61d69409b00a70feee1b4794133ccff878a8d0f2e04c65985456ad4f8abe894a4d4a8790dcb5b79fe94d5963059a0a38e065e733e57af4c8409369fd005d509ddfd0ba7b4714b2df7e560bd2a004aaafde3454a5213bbde8c236172897cf1f0f013e201ccc573236175aa8ac040beea9e7fef1de477783c861213706ecc45bf68768440c31127ba39fbbf9ffcf16d88732703dd638155", 0xce}, {&(0x7f0000000580)="d330116f2fd216f7ac2df805feaf865d08aa028092ae01f78b097df6da6604a09f797db7db72ddfc1db05b3b15cdc20365ae56acab0b493e6254ebd4cb33a39e1f4b8370ad272ca6dc7666f943422052e7b3fccc2fe88b456ba6c02d77b6ca09c5f5189a89ac8be14fd07659a21bf3b3cf8abc837d7305cea10efbaa91deae63274f6310bbc6df9ada9d40e0772ee7975b8c57130e9e9ad4cbde6e69b0976dad96bccfa8e6c172f77e09e37f0f4dcc5d12583813497148c9f8d8466e9dea45e99cd8214ab346d85349eff476c5f47e883d9885fe0aa08fb853fc177a5ee5182c14e088c667ec59f2abb28afa03eacc985c02494eb3654e", 0xf7}, {&(0x7f0000000680)="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", 0x1000}], 0x7, &(0x7f0000001bc0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="30000000000000000100000002001900", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r11], 0x100}, {&(0x7f0000001cc0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="d45197bb876b077d9213ac6546645e7bce4e958aedad07a18f4d2849ac9fd859cbd44bd658741b748147e86b25165383be19e833a91951a5369208da18698b4d8466dd3b", 0x44}, {&(0x7f0000002dc0)="c296c17ed1c46debead467d3ed6d6f4267a75c189ce0044c0be658a88855eaf5f0c2cf5092e511636ef2c53df7aa3e8c575783b2f2b8b20fce06c37170c8fb5319ecf1d1d3d0d4c6dc02eb6e7c689c", 0x4f}], 0x3, &(0x7f0000002f40)=[@cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x38, 0x1}], 0x2, 0x4000) clone(0x0, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000100), &(0x7f00000001c0)) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0)=[{{0x0, 0x0, &(0x7f0000003540)}}], 0x1, 0x0) fadvise64(r0, 0x0, 0x6, 0x4) 2018/05/19 11:20:09 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x300, 0x11, r0, 0x0) [ 363.094483] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:09 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:10 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) [ 363.223112] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 363.230966] FAT-fs (loop5): Filesystem has been set read-only [ 363.271010] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 363.284702] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 363.299720] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 363.381603] BTRFS error (device loop6): superblock checksum mismatch [ 363.389195] BTRFS error (device loop6): open_ctree failed [ 363.451471] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:10 executing program 2: add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000280)="6164ffffffff00000000c96b30e14899878ced22b170175c2eb1ad1374372229a4637503595b598f2f6dff000000000000004eb432e48a9afcacdfb988b48a2b5eaf052ff412da4c97dc909213fbe7acabea28fb2aad94d652cd105d34b7a662e3a8056bd53b3692db625bf98ea21aab26123806fde796180031c549c6fa4d09b87cf7980aed8d9640e40e3394b428c4dcc7f7343b5c57", &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)="8f0a58c7b2fec3296d1e60f7f91ec005542c4fef9f34c40302cb648b9f0aea60a0644b8b2bf30c42325fb9c2f8f80aff0a", 0x31, 0xfffffffffffffff8) request_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)='user\x00', r0) 2018/05/19 11:20:10 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0xffff8000, 0x11, r0, 0x0) 2018/05/19 11:20:10 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xd}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:10 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:10 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:10 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$can_raw(r1, &(0x7f0000000240)={0x1d}, 0x10) 2018/05/19 11:20:10 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) [ 364.108565] BTRFS error (device loop6): superblock checksum mismatch 2018/05/19 11:20:10 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_open_dev$dspn(&(0x7f0000001440)='/dev/dsp#\x00', 0x4, 0x4000) r2 = fcntl$dupfd(r1, 0x408, r0) sendmsg$rds(r2, &(0x7f0000001400)={&(0x7f0000000240)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000280)=0x9, 0x4) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) ioctl(r2, 0x7, &(0x7f0000000100)="362555243eda8c4cbb0060669a2fd028e784040be75310b5245e6ee8dd5f972195145da692bbeeace51bfb58d9141a49fadb620b68f9ce9e6475cacb279413ae352075d53e0d2ca9faac34fe779d9bdec7c0fb163d7d8acc5cfedfda56810557724f6109409c731b574b12832413e6aefbcb4c9451482715119285d1c1efc8ede2e0b83fd147c592efa808b19c48a291b2eb0377f1d4d5d62657157408f9f6dd7ae4bffb9a08d2864df959648a6a46018418299ad6982860def9aad8c4b37f4370d988b3d53ae29e37e380c91d72e15028a667a2ebef8d6e9ba1a779a830332aa6a9087c2c56a9") socketpair(0x3, 0x800, 0x7fff, &(0x7f0000001480)) 2018/05/19 11:20:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x400, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46ff0503ba0000ea7f0000000003003e00800000005a02000038000000d2030000000400000100200001000400ffff01010000000007000060f9ffffff060000000700000004000000000000000700000007000000070001000800000000000000010000fe9a7b4f0006000000d800000002000000317dc75e"], 0x7c) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) mlockall(0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x4) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000180)) 2018/05/19 11:20:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 364.155087] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:11 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) 2018/05/19 11:20:11 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 364.243678] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 364.251385] FAT-fs (loop5): Filesystem has been set read-only [ 364.281745] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:11 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) [ 364.305552] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 364.314227] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 364.344574] Unknown ioctl -2147199793 2018/05/19 11:20:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xc000000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 364.362532] Unknown ioctl -2147199793 2018/05/19 11:20:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 364.443637] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 364.519296] BTRFS error (device loop6): superblock checksum mismatch [ 364.541970] BTRFS error (device loop6): open_ctree failed [ 364.661929] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 364.669516] FAT-fs (loop5): Filesystem has been set read-only [ 364.684872] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 364.693757] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 364.701757] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 364.781266] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:11 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80001, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r0, 0xe, 0x2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000000000002000000000000000095000000000000004eb59c659b10e509592a6d35e5181c71a696b2d89ea786ffcdfb63bf4374ed94d7d9f8daa5f3f27a3015"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/19 11:20:11 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:11 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x400000000000000, 0x11, r0, 0x0) 2018/05/19 11:20:11 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:11 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xd000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:11 executing program 2: request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:12 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:12 executing program 2: request_key(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x9e, 0x100) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="c744240037010000c7442402a4fe0000ff2c24c4820d96570066ba4300ecf20f1bf8c46135de16400fc72d4a9300000fc71c69df6106360fc75cf70c66b812000f00d8", 0x43}], 0x1, 0x3, &(0x7f0000000200)=[@cstype3={0x5, 0xd}], 0x1) [ 365.168768] BTRFS error (device loop6): superblock checksum mismatch [ 365.193994] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x18) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0x400000) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/05/19 11:20:12 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:12 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x3000000, 0x11, r0, 0x0) [ 365.290563] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 365.298235] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:20:12 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x6000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 365.331570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 365.340929] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 365.349315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:12 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) [ 365.468455] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 365.589402] BTRFS error (device loop6): superblock checksum mismatch [ 365.613615] BTRFS error (device loop6): open_ctree failed [ 365.702477] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 365.710140] FAT-fs (loop5): Filesystem has been set read-only [ 365.723721] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 365.736354] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 365.744319] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 365.840239] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:13 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xa5, "fd793c1447ac76080fbe02b26cfb120b142836229a2cef843b2542d0f1de8467e6258110312a5fd97cc356a24e2ebafa7268aff76b633fd72084a898a9e86c41422b45be59c73b4cf95b6584c8adbf0d9086fe9d89c55e424e4b63707219fad94cfcd4720b9d77407c9e4cbb1bacbd4ff09f2aa667b3d4682b81c6d08a92b59378812f77adcba37d3e46b34a51efef02dc24148b468bb3ee76663f983628972ff78818d102"}, &(0x7f00000001c0)=0xad) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x7, 0x19, 0x2, 0x0, 0x5e5}, 0x14) 2018/05/19 11:20:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:13 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0&', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:13 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x4000, 0x11, r0, 0x0) 2018/05/19 11:20:13 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0xffff, 0x4}, {0x8, 0xff}, 0x5, 0x1}) read(r0, &(0x7f0000000200)=""/31, 0x1f) 2018/05/19 11:20:13 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:13 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:13 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x23000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:13 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000803e00"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:13 executing program 0: r0 = mq_open(&(0x7f0000000300)="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", 0x0, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xa947, 0x100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000015c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000001700)=0xe8) getresgid(&(0x7f0000001740), &(0x7f0000001780)=0x0, &(0x7f00000017c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000001800)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001840)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000001a40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001a80)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000001b80)=0xe8) r10 = getegid() sendmsg$unix(r1, &(0x7f0000001c80)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000140)="09531e62528a36dff31aff29c285dc80587a6b95799f92c546097a59697eab11403f80606dfbb79499e0c7afd823b097385e1663abd4daa365862c63b733aa1cfcc890e5b061c6310c87e0cf419eb01d465cccc641f864158d0b02295db414f4d5af74520e2b8d5b0002d76125aaf3989158a0", 0x73}, {&(0x7f0000000040)="69c7f5255a33e691303018aa287ef83cf751b0e71f86043f5b0ff9a767bab0", 0x1f}, {&(0x7f00000001c0)="f1bd722bc330e2858c4452ac09e116d158a0544cbd38ca551029c18f91223ca810043ae08eef6f9b100ad786ae0fdd917b9ad53bca6dd0fb3cbaf47042832b4474d60e0e49fbeea2de681ef39f551e5e38fad3dc5349df603284c8bc1dda52cfb7f24412c8a23685dd810add1cfc03551a2eaba2596717bf9616d9f59953a7798e962be033709a2b3883989d81de742cf7405c4c6467961eb693d87cc0c8cf49214862e896637b62b3be42fed7deed65cc20f6ca223c48c08cd48931ada80222075ce3e4258856416cab8106a0a5be1b", 0xd0}, {&(0x7f0000000400)="07073b173b3d42c1dbcfe3d9c6fbc06526bcab34d95ef2305b86beff9d59d4d827f78ccb80292abca9c40e70bbc4065353bbaedc1fd71e643c3765cfa07da73995747c516bded077969775fcb044f5b666492078972848ee", 0x58}, {&(0x7f0000000480)="385f2992e14902f5cd8bd1ecd4922365931912de5dbedb8ee92699f6dba1b3cdf12cfee48422d2e0f66f0b5c185f71318f239825b83c58661a634fa0a360d421a9ef53cc8adebbfd18289cd8594db3ff42c17a766cebb2156293649208fa1d330a0259702b8fd5d0cb9c3becd97a9c7c1aa5e83966fe2c39397eb30867947dd25bc5d11abc41bfd335f93842adf867a49489e4e8fa", 0x95}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f00000002c0)="1c0a8a8ed63a8289740bb002508536b9e83a810215dd78223045a84f44b31541f5d009ed38658534c2d5753a24045a01", 0x30}], 0x7, &(0x7f0000001bc0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x10, 0x1, 0x1}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0xc0, 0x4000}, 0x80) [ 366.320005] BTRFS error (device loop6): superblock checksum mismatch [ 366.358796] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:13 executing program 2: r0 = request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)='nodev\x00', 0xfffffffffffffff8) r1 = request_key(&(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)='encrypted\x00', r0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', r1) 2018/05/19 11:20:13 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) 2018/05/19 11:20:13 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 366.410251] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 366.417845] FAT-fs (loop5): Filesystem has been set read-only [ 366.434438] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 366.444359] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 366.452227] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:13 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x300}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:13 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:13 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="e38c541810c225668bce30c5ae77989f8fd31fb3318c2a63c1bbf2c9f773a383733085b5562703000000bd35e6b8ac285d5d80b51d8df5ffbef3d912347378ee96be7384d91612a5f4819162cb850d81a2632e1804091edfa33375e63a603f9ee72303c6bd1cbf4b97718ff3c2d6ecb044ff4001884c86edb3e1a0683f2d22d34773277fc7362f32e945fae0d14eb59e35000000000000000000000000000000", 0xfffffffffffffffe) [ 366.583631] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x2, 0x2}, 0x20) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00000000c0)) sched_yield() [ 366.681156] BTRFS error (device loop6): superblock checksum mismatch [ 366.689601] BTRFS error (device loop6): open_ctree failed [ 366.829748] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 366.837404] FAT-fs (loop5): Filesystem has been set read-only [ 366.878522] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 366.889023] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 366.896730] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 367.011283] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:14 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x300000000000000, 0x11, r0, 0x0) 2018/05/19 11:20:14 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:14 executing program 2: request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:14 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, 0x0, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:14 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001d0000000000b430b06c0e04e05bbe3c10ad538759703aac15c1c49c22c46e3cba5b9987f417393f1cad51f71c31501397f463d8a77f40a827b0058d7ab4e115573e0d80d50b1d621c90815979f506aa2d9e4ef7cecfd9231d5fffa500abfecce0a7233b35512c07f63630057338b69b5506eb27a2d0578ff13ce706c7b9c8fc9cab8775b7b32c2e0580d0463f60efe984b141d59177ef30af46ed469ceaee0fbda37ac70534ae1def8d443e100802901fd9f687819a5ec59d91373018b4aa5c"], 0x28}, 0x1}, 0x0) 2018/05/19 11:20:14 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)="2e2f636f6e74726f6c2f66696c6530fe", &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:14 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xfffffff}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:14 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x2, 0x4000) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{}, {}, {}]}) [ 367.465979] BTRFS error (device loop6): superblock checksum mismatch 2018/05/19 11:20:14 executing program 0: unshare(0x64000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x3}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xa00, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000140)={@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x1, 0x2, {0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, {&(0x7f0000000080)=""/87, 0x57}, &(0x7f0000000100), 0x2}, 0xa0) 2018/05/19 11:20:14 executing program 3 (fault-call:3 fault-nth:0): r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:14 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x100000000000000, 0x11, r0, 0x0) [ 367.523573] BTRFS error (device loop6): open_ctree failed 2018/05/19 11:20:14 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) [ 367.593895] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 367.601743] FAT-fs (loop5): Filesystem has been set read-only [ 367.629186] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000380)='xfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f557569642c62696f73697a653d372c6771756f74612c67727069642c00842bb61381751b7ae603ff3b2dcea08c"]) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0xb4, 0x3, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f538a2cf9825333fed4cff7c0743870329", 0x11, 0x8}, {&(0x7f0000000200)="98104bc665fd39b2cc779d9032d046b61965a7ae55753b2487aec69a26b2358479d663bd82e7e373cedf", 0x2a, 0xff}, {&(0x7f0000000240)="f51cec29cb1faf74be5f3b3cc78fad81e707ab50519342b37feb2ea0efd45ed5bfb72495403551bdc12f846e4202d4cecae25b9448eee8ad42ca77cbac0ca9dbb5398888580f", 0x46, 0x80000001}], 0x2, &(0x7f0000000400)={[{@nls={'nls', 0x3d, 'macceltic'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x31, 0x0]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x35, 0x39, 0x36, 0x35]}, 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@uid={'uid', 0x3d, [0x7d]}, 0x2c}]}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 367.637768] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 367.646281] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 367.762845] IPVS: ftp: loaded support on port[0] = 21 [ 367.786480] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 367.883344] BTRFS error (device loop6): superblock checksum mismatch [ 367.892813] XFS (loop2): unknown mount option [noUuid]. [ 367.907606] BTRFS error (device loop6): open_ctree failed [ 367.933532] ntfs: (device loop2): parse_options(): The show_sys_files option requires a boolean argument. 2018/05/19 11:20:15 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:15 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x600000, 0x11, r0, 0x0) 2018/05/19 11:20:15 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x1, &(0x7f0000000340)) 2018/05/19 11:20:15 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x1ff, {0x7, 0x6, 0x1, 0x7f, 0x4, 0x72a}, 0xff, 0x7}, 0xe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = fcntl$dupfd(r1, 0x0, r1) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) connect$inet(r2, &(0x7f0000ff1ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) listen$netrom(r2, 0x101) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000f0e000), 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xfffffffffffffff8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r3, 0x3, 0x20}, &(0x7f00000001c0)=0xc) r4 = accept4$inet(r2, 0x0, &(0x7f00008c5ffc), 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f000016ff74)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}}, &(0x7f0000cc2000)=0x8c) 2018/05/19 11:20:15 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:15 executing program 2: 2018/05/19 11:20:15 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x4000000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:15 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x2, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:15 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0xf7, "aadf6132ee48965a0b6dba9f3605476da17fe577f942b89e3f63a74b8a9ffe838276785aaa2ec48118f709a7d89393989193bb78634cf39eb607db4e25832c36dce7033d5b492b07616c8659261b1e7cfab609dc513c3bbac26cfa93fdb1af61d5d8dd30a13c7d3dbfe6e41d9ebc197db0b7fa6be1f61c4a66c808aad73f49ad3930abda1c47e9e8650a2de818920c419d5fe9ed520dfe5eabe57554ff16fa7064fc04c81faae35b0b751c4dc28c7faf72a5281ca6bcdc17c249194895206b0f39ba2b21893b67886c5abfb8f3e361683ef1d6334c45f20616d0b2f5bdba22206354c081e8095867d361aa0b8e5686875ea75d058cbaab"}, &(0x7f00000002c0)=0xff) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000300)={r1, 0x80}, 0x8) r2 = memfd_create(&(0x7f00000000c0)='user\x00', 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, [0x0, 0x6, 0x9, 0xad41, 0x3ff, 0x8, 0x1, 0x2, 0x8, 0x1, 0x3, 0x100, 0x1f, 0x4, 0x6]}, &(0x7f0000000440)=0x100) r3 = gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) kcmp(r3, r4, 0x0, r0, r2) ioctl$KDMKTONE(r2, 0x4b30, 0x1) 2018/05/19 11:20:15 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x60, 0x11, r0, 0x0) 2018/05/19 11:20:15 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x1, &(0x7f0000000340)) 2018/05/19 11:20:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 368.797542] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 368.805272] FAT-fs (loop5): Filesystem has been set read-only [ 368.883730] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 368.940535] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 368.991846] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 369.247350] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:16 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x1d, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:16 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:16 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x250000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80202, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)={r2}) ioctl$TIOCSCTTY(r1, 0x540e, 0x7) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x2}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) 2018/05/19 11:20:16 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0xffffffffffffc, 0x11, r0, 0x0) 2018/05/19 11:20:16 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x1, &(0x7f0000000340)) 2018/05/19 11:20:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:16 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x300000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:16 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000380)='xfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f557569642c62696f73697a653d372c6771756f74612c67727069642c00842bb61381751b7ae603ff3b2dcea08c"]) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0xb4, 0x3, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f538a2cf9825333fed4cff7c0743870329", 0x11, 0x8}, {&(0x7f0000000200)="98104bc665fd39b2cc779d9032d046b61965a7ae55753b2487aec69a26b2358479d663bd82e7e373cedf", 0x2a, 0xff}, {&(0x7f0000000240)="f51cec29cb1faf74be5f3b3cc78fad81e707ab50519342b37feb2ea0efd45ed5bfb72495403551bdc12f846e4202d4cecae25b9448eee8ad42ca77cbac0ca9dbb5398888580f", 0x46, 0x80000001}], 0x2, &(0x7f0000000400)={[{@nls={'nls', 0x3d, 'macceltic'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x31, 0x0]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x35, 0x39, 0x36, 0x35]}, 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@uid={'uid', 0x3d, [0x7d]}, 0x2c}]}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 369.614852] QAT: Invalid ioctl [ 369.623779] QAT: Invalid ioctl [ 369.638235] QAT: Invalid ioctl 2018/05/19 11:20:16 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000), 0x0, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:16 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x5, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:16 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x3f00000000000000, 0x11, r0, 0x0) [ 369.675266] QAT: Invalid ioctl [ 369.682180] QAT: Invalid ioctl [ 369.702568] QAT: Invalid ioctl 2018/05/19 11:20:16 executing program 2: socketpair(0x1f, 0x4, 0xffffffffffffff8d, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x9, 0x4) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:16 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000380)='xfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f557569642c62696f73697a653d372c6771756f74612c67727069642c00842bb61381751b7ae603ff3b2dcea08c"]) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0xb4, 0x3, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f538a2cf9825333fed4cff7c0743870329", 0x11, 0x8}, {&(0x7f0000000200)="98104bc665fd39b2cc779d9032d046b61965a7ae55753b2487aec69a26b2358479d663bd82e7e373cedf", 0x2a, 0xff}, {&(0x7f0000000240)="f51cec29cb1faf74be5f3b3cc78fad81e707ab50519342b37feb2ea0efd45ed5bfb72495403551bdc12f846e4202d4cecae25b9448eee8ad42ca77cbac0ca9dbb5398888580f", 0x46, 0x80000001}], 0x2, &(0x7f0000000400)={[{@nls={'nls', 0x3d, 'macceltic'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x31, 0x0]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x35, 0x39, 0x36, 0x35]}, 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@uid={'uid', 0x3d, [0x7d]}, 0x2c}]}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:16 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x20000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 369.809535] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 369.817264] FAT-fs (loop5): Filesystem has been set read-only [ 369.834300] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 369.843682] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 369.851376] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:16 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x4, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:16 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000), 0x0, 0x10000}], 0x1, &(0x7f0000000340)) [ 369.988330] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 370.299636] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 370.307321] FAT-fs (loop5): Filesystem has been set read-only [ 370.336884] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 370.346027] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 370.354557] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 370.432232] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:17 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x1000000000000, 0x11, r0, 0x0) 2018/05/19 11:20:17 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x6, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:17 executing program 2: r0 = add_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)="7f03f5204c09f525adff211daa5cff464227068831c44b9380d7e73bf6fe6dffb2b9184b5ecf0de2c352b2866d7292cebc99c866a11924dff304a89da867cb39beba9b4dd6cc57d5ce48c2d45c178ab74474e7b7f9e6aba65126230b0ee9d16bf5c0e276e3761c10454f1e057f416e509a6c973e1c01fbc0d241996c272feaaeb164e08c41cc3be333315edfa5b7bdda5f6c11ab1b28d3f34c4706b3430ac92e3337c3ae0d58ac026a619f0b90014375f41805f498b69e32f0d6b6e00cf7c1aabde11df7bb909df6a4a3a349da3ff5e07fbefcd1835c51052bca500a67eb68", 0xdf, 0xfffffffffffffffd) request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', r0) 2018/05/19 11:20:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000380)='xfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f557569642c62696f73697a653d372c6771756f74612c67727069642c00842bb61381751b7ae603ff3b2dcea08c"]) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0xb4, 0x3, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f538a2cf9825333fed4cff7c0743870329", 0x11, 0x8}, {&(0x7f0000000200)="98104bc665fd39b2cc779d9032d046b61965a7ae55753b2487aec69a26b2358479d663bd82e7e373cedf", 0x2a, 0xff}, {&(0x7f0000000240)="f51cec29cb1faf74be5f3b3cc78fad81e707ab50519342b37feb2ea0efd45ed5bfb72495403551bdc12f846e4202d4cecae25b9448eee8ad42ca77cbac0ca9dbb5398888580f", 0x46, 0x80000001}], 0x2, &(0x7f0000000400)={[{@nls={'nls', 0x3d, 'macceltic'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x31, 0x0]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x35, 0x39, 0x36, 0x35]}, 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@uid={'uid', 0x3d, [0x7d]}, 0x2c}]}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:17 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:17 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000), 0x0, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:17 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x7000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:17 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3", 0x24, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:17 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 2018/05/19 11:20:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:17 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0xf, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:17 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x4000000, 0x11, r0, 0x0) 2018/05/19 11:20:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x2}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xe321, 0x8001) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={r2, 0x7fff, 0x1}, &(0x7f0000000280)=0xfffffe34) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8000, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x5) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f00000000c0)={0x800, 0x10001, 0xfffffffffffffffc, 0x5a9e, 0x0, 0x5}) 2018/05/19 11:20:17 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x4000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 370.944151] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 370.951774] FAT-fs (loop5): Filesystem has been set read-only [ 370.964865] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 370.974760] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 370.985007] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 371.100359] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:17 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3", 0x24, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:17 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x14, r1, &(0x7f0000000080)=""/15, 0xf) [ 371.179105] RDS: rds_bind could not find a transport for 0.0.0.2, load rds_tcp or rds_rdma? [ 371.195920] RDS: rds_bind could not find a transport for 0.0.0.2, load rds_tcp or rds_rdma? [ 371.414855] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 371.422653] FAT-fs (loop5): Filesystem has been set read-only [ 371.464985] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 371.480790] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 371.492523] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 371.576311] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:18 executing program 2: request_key(&(0x7f0000000140)="d657cb57974cab345dc87ab0e8baf2d8e870788d68aef6cfa6c5970826e4345fec3d757982d272f564fd9f931f9ec9ccbc68c80f8b7a5964ea0d75", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:18 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0xffffffffffffffff, 0x11, r0, 0x0) 2018/05/19 11:20:18 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000000c0)={0xd37, 0x2, 0x4, 0x0, 0xb9, 0x4}) syslog(0x9, &(0x7f0000000000)=""/106, 0x6a) 2018/05/19 11:20:18 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3", 0x24, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000803e00"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:18 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x17, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3d00000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:18 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:18 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000040)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002500)=[{&(0x7f0000001500)=""/4096, 0xffffffffffffffc5}], 0x3c, &(0x7f00000025c0)}, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[0x6, 0xb7, 0x8, 0x9923, 0xfff, 0x1, 0x70a6]}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc08402}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000006356c918dd6f778f48d90a1bf02c3fb49b243c6f35031e42494d514d782d0d7c7514a435587e09bd9d177487e4b67b4d9945ae1659595843c347abecbfcb5fea75e627d08e5ea2563a715a0614c39379334d6f146206a85af7000a600b80fcb681c0007880729ab3dedcbf8d1c4ca164239815e828bfad5b269d9df08be2e329959dccc5c2a7af01d4bbc2160532", @ANYRES16=r1, @ANYBLOB="030225fd7000fedbdf250e0000003c00030008000500ac14140f080008000100000008000100030000000800040000100000080001000000000008000400800000000800030003000000"], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000001) bind(0xffffffffffffffff, &(0x7f0000000200)=@nfc={0x27}, 0x80) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/16) 2018/05/19 11:20:18 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x15, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:18 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000", 0x36, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:18 executing program 2: request_key(&(0x7f00000000c0)='looon\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:18 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x6000, 0x11, r0, 0x0) 2018/05/19 11:20:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 372.037870] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 372.046302] FAT-fs (loop5): Filesystem has been set read-only [ 372.063653] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 372.073327] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xc000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 372.081347] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:19 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = socket(0xa, 0x1, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000200)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[]) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x3, 0x6, 0x1f, "119c42f115d8d216359e9b4eb26de55b55ad0597b368fb5106a4ee4bf1e450f8566f247cfab5ebb6f045282e", 0x9}, 0xf54, [0x80000000, 0x10000, 0x348, 0x200, 0x27, 0x3000000000000, 0x20, 0x1, 0x1, 0x1, 0x1, 0xe5, 0x6, 0x7e, 0x401, 0x35, 0x3, 0x1000, 0x0, 0x401, 0xfffffffffffffffc, 0x1000, 0xfff, 0x40, 0xc86, 0x80, 0x3, 0xec0, 0x20, 0x2, 0x2, 0x5d, 0x8, 0x3, 0x8f, 0x1ff, 0x3, 0x7f, 0x37d, 0x9, 0x0, 0xff, 0x5, 0x1000, 0x79, 0x81, 0x6a5, 0xfffffffffffffffa, 0x6669, 0x7f, 0x69dd, 0x5, 0x7fffffff, 0x3, 0x9, 0x6, 0x2, 0x7, 0x7, 0x80, 0x7, 0x1, 0x2, 0x3, 0x1, 0x8, 0x0, 0x81, 0x109c, 0x7, 0xa986, 0x5, 0xfff, 0x1, 0x6, 0x1, 0x2, 0x8, 0xfffffffffffffffe, 0x6, 0x2, 0x5d, 0x5, 0x8, 0x2, 0x5da, 0xa9, 0x0, 0xca5, 0x2000, 0x100000001, 0x37, 0x81, 0x5, 0xffffffffffffffff, 0x10001, 0xffffffffffff8000, 0x1cd, 0x0, 0x8, 0x1e6a, 0xfff, 0x2, 0x1, 0x1000, 0x6adf, 0x93, 0x7b9, 0x9, 0xff, 0xffffffffffffff81, 0x6, 0x1, 0x3, 0x200, 0xfff, 0x7f, 0x8, 0x6, 0x8, 0x0, 0x1, 0x4e, 0x3f, 0x7, 0x5a58, 0x0, 0x1000], {0x77359400}}) ioctl(r0, 0x8912, &(0x7f00000001c0)="c626262c8523bf012cf66f") getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x4ac000000, 0x3ff}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000008c0)={r2, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e21, @rand_addr=0x80}]}, &(0x7f0000000900)=0x10) rename(&(0x7f0000000940)='./file0/file0\x00', &(0x7f00000007c0)='./file1/file0\x00') io_setup(0x1, &(0x7f0000000040)=0x0) io_destroy(r3) setsockopt$inet6_tcp_buf(r0, 0x6, 0xf, &(0x7f0000000800)="7c370718b4fefc6e546b58a0cf4328a08440edc96730614e8fea1b0c9a1018cd9fa321d2af45f9ef48583ededbd54867edaeaf18432820ea2e51e40b0a3c2dfe98a547d82e4b44611907245ca5339659a9480ad852d3af7cc11ebe156e765d2a81bdff14ab1c05ae36da8ea33b3da82d437641c0a82f12bac09229c77c60daca65a01f60907358f600dd069bdd495dccad33541663781f28d449c3667b223256c7ea9fcb11e5ac36869f0c43f586eef1598073db6df93b2a26", 0xb9) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000fc0)={@loopback, 0x0}, &(0x7f0000001000)=0x14) bind$can_raw(r1, &(0x7f0000001040)={0x1d, r4}, 0x10) socket$unix(0x1, 0x5, 0x0) 2018/05/19 11:20:19 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="65746830402d00c93d6a63d1a6f309797f6d6bc8dd275634ed136d80ab6b2a667821243244f50707b98f1c5b2712eef39e8155ad4691537883c4d1b852a778bf52fa4999db7851bc6d8b7583242cc9f8d2b7e466691c2dd8e44507847c", 0xfffffffffffffffe) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000140)="ec5ba140eba69a70c64588") r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x40400, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'bond_slave_0\x00', 0x1}, 0x18) 2018/05/19 11:20:19 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0xa, r1, &(0x7f0000000080)=""/15, 0xf) [ 372.200272] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:19 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000", 0x36, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:19 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r0, 0x0) 2018/05/19 11:20:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 372.480767] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 372.488555] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:20:19 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x10, r1, &(0x7f0000000080)=""/15, 0xf) [ 372.595424] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 372.625531] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 372.650817] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 372.755336] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374617400ef0a33da56f1195a2b4b0a5ec96f08abac6897f712404e7493f3080096deb511b01dc5c9c96c1a19acde28aba2c7ff52667a9b3c2b80a7bfe9cd231abddfc07fe8c12926c30fc2e2870285f52a5765402e7bffb43a4ad407bdaf3a7aa606212651212c7c3397c9e1c32878732870071558bdb163c7de14b152e6cb4f69d3c5f07239652daaccaf39bf831f7c5b5562843575cec8e21052ce39d2afcde9ea87d20528d21da776e2c6fcc429a716a9a2bee27192a022187c68f9c3c55fe742a9a4db63dcca33395c5812f5e4cf", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x0) 2018/05/19 11:20:19 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000", 0x36, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:19 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x8, 0x11, r0, 0x0) 2018/05/19 11:20:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xff0f}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:19 executing program 2: r0 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000140)="12d40000000e00000000", &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)='vboxnet0\x00', r0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400101) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000200)={0x5da, 0xfff}) 2018/05/19 11:20:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000803e00"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:19 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:19 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x9, r1, &(0x7f0000000080)=""/15, 0xf) [ 373.054150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 373.061825] FAT-fs (loop5): Filesystem has been set read-only [ 373.078571] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 373.089252] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 373.106756] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 373.198271] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:20 executing program 0: r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000140)={0x30, 0x0, 0x1, 0x2, 0x2, 0x8, 0x8, 0x8}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x8, 0x230882) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7fff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e23}}, 0x80, 0x8, 0xffffffff, 0x6, 0x20}, &(0x7f0000000600)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000640)={r3, @in6={{0xa, 0x4e23, 0x10001}}}, &(0x7f0000000700)=0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/19 11:20:20 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x9}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:20 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0xffffffff00000000, 0x11, r0, 0x0) 2018/05/19 11:20:20 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:20 executing program 2: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xffffffffffffff75, 0x400) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000100)=""/173) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f00000001c0)="1b38642d1fd0a86a682270d1479edf8b11e2"}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0xfffffffffffffeae) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) 2018/05/19 11:20:20 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000", 0x3f, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:20 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x3, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:20 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x7, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:20 executing program 2: request_key(&(0x7f0000000000)='useer', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)='eth0@-\x00', 0xfffffffffffffffe) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @remote}, &(0x7f0000000180)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r1) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) 2018/05/19 11:20:20 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8c00) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x8001, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xe2, "618c6e44461dead43be068bfb156839c2e26197b181d0596091e79c08efb4de49b5ed24022707ba400c6a1b0154d1a9341cb734c17483bd74059eb7fcadf668bac14e955eef5e0f1fcd567901d75e7ed508f24505deb1cd21fc7345349c096ca997d948efd642f029134b383d5e3437c57d0f4104ce3134cc9d4a072c6f54de82c532bf04447b5867eee77a1addcbca171ac69338a122d2d289c4ba71d71ba98b0af152fefc23fed08e73e83741107f33aa5f7a93cb96137cbceff473fa94c8da7df10ef4b7a977559b7bde44ddd9c9fa80342be91f6f9ab053ffd49192577f18797"}, &(0x7f0000000140)=0xea) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r1, 0x9}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x800001) 2018/05/19 11:20:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:20 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x80000, 0x11, r0, 0x0) 2018/05/19 11:20:20 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000", 0x3f, 0x10000}], 0x1, &(0x7f0000000340)) [ 374.155783] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 374.163575] FAT-fs (loop5): Filesystem has been set read-only [ 374.190396] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 374.199748] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 374.207446] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 374.368526] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:21 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0xd, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:21 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000", 0x3f, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xc7}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:21 executing program 2: r0 = add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="8a7e0fd72dca3ac0ae489dd22381a053ea153131ff4ec4900786333ad95cb62e8832e36f1f7bd3ee1bf606abb5d7125a6d44785c6093aeecce267677aba2b87d53912e178c96f4c537ac041dc83762a971ba9d3009da3ac3a172c237644c3bf59e685432c05c58c62ea8f5513a6e6a38bb64", 0x72, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x101000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)={0x8, {{0xa, 0x4e22, 0x7f, @local={0xfe, 0x80, [], 0xaa}, 0x8}}, 0x0, 0x1, [{{0xa, 0x4e21, 0x200, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x110) r2 = msgget$private(0x0, 0x286) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) r3 = getegid() r4 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)=0x0) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000640), &(0x7f0000000680)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f00000005c0)={{0xb, r4, r3, r4, r3, 0x80, 0xb8}, 0x9, 0xb7df, 0x100000000, 0x400000003, 0x7, 0x1ff, r5, r6}) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)='eth0@-\x00', r0) timerfd_gettime(r1, &(0x7f0000000040)) 2018/05/19 11:20:21 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8c00) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x8001, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xe2, "618c6e44461dead43be068bfb156839c2e26197b181d0596091e79c08efb4de49b5ed24022707ba400c6a1b0154d1a9341cb734c17483bd74059eb7fcadf668bac14e955eef5e0f1fcd567901d75e7ed508f24505deb1cd21fc7345349c096ca997d948efd642f029134b383d5e3437c57d0f4104ce3134cc9d4a072c6f54de82c532bf04447b5867eee77a1addcbca171ac69338a122d2d289c4ba71d71ba98b0af152fefc23fed08e73e83741107f33aa5f7a93cb96137cbceff473fa94c8da7df10ef4b7a977559b7bde44ddd9c9fa80342be91f6f9ab053ffd49192577f18797"}, &(0x7f0000000140)=0xea) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r1, 0x9}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x800001) 2018/05/19 11:20:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:21 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xffffffffffffffff) 2018/05/19 11:20:21 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:21 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8000000000000) 2018/05/19 11:20:21 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f424852", 0x44, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:22 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8c00) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x8001, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xe2, "618c6e44461dead43be068bfb156839c2e26197b181d0596091e79c08efb4de49b5ed24022707ba400c6a1b0154d1a9341cb734c17483bd74059eb7fcadf668bac14e955eef5e0f1fcd567901d75e7ed508f24505deb1cd21fc7345349c096ca997d948efd642f029134b383d5e3437c57d0f4104ce3134cc9d4a072c6f54de82c532bf04447b5867eee77a1addcbca171ac69338a122d2d289c4ba71d71ba98b0af152fefc23fed08e73e83741107f33aa5f7a93cb96137cbceff473fa94c8da7df10ef4b7a977559b7bde44ddd9c9fa80342be91f6f9ab053ffd49192577f18797"}, &(0x7f0000000140)=0xea) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r1, 0x9}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x800001) 2018/05/19 11:20:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:22 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0xe, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:22 executing program 2: r0 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)="9719823b20", 0x5, 0xfffffffffffffffd) keyctl$negate(0xd, r0, 0x475, r0) r1 = request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='{]ppp0[%./bdev&.\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="657468171f2d00", r1) [ 375.245799] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 375.253600] FAT-fs (loop5): Filesystem has been set read-only [ 375.281724] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xffffffffffffff7f}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 375.290603] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 375.299381] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 375.435348] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 375.671869] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 375.679526] FAT-fs (loop5): Filesystem has been set read-only [ 375.709435] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 375.719432] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 375.727723] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 375.778268] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:22 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8c00) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x8001, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xe2, "618c6e44461dead43be068bfb156839c2e26197b181d0596091e79c08efb4de49b5ed24022707ba400c6a1b0154d1a9341cb734c17483bd74059eb7fcadf668bac14e955eef5e0f1fcd567901d75e7ed508f24505deb1cd21fc7345349c096ca997d948efd642f029134b383d5e3437c57d0f4104ce3134cc9d4a072c6f54de82c532bf04447b5867eee77a1addcbca171ac69338a122d2d289c4ba71d71ba98b0af152fefc23fed08e73e83741107f33aa5f7a93cb96137cbceff473fa94c8da7df10ef4b7a977559b7bde44ddd9c9fa80342be91f6f9ab053ffd49192577f18797"}, &(0x7f0000000140)=0xea) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r1, 0x9}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x800001) 2018/05/19 11:20:22 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f424852", 0x44, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:22 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x3f00000000000000) 2018/05/19 11:20:22 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x13, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:22 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000100)) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/44) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="ff01", 0xfffffffffffffffe) 2018/05/19 11:20:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:22 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xf00000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:23 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getgroups(0x5, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) lchown(&(0x7f0000000240)='./file0\x00', r2, r3) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0x18) 2018/05/19 11:20:23 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8c00) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x8001, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xe2, "618c6e44461dead43be068bfb156839c2e26197b181d0596091e79c08efb4de49b5ed24022707ba400c6a1b0154d1a9341cb734c17483bd74059eb7fcadf668bac14e955eef5e0f1fcd567901d75e7ed508f24505deb1cd21fc7345349c096ca997d948efd642f029134b383d5e3437c57d0f4104ce3134cc9d4a072c6f54de82c532bf04447b5867eee77a1addcbca171ac69338a122d2d289c4ba71d71ba98b0af152fefc23fed08e73e83741107f33aa5f7a93cb96137cbceff473fa94c8da7df10ef4b7a977559b7bde44ddd9c9fa80342be91f6f9ab053ffd49192577f18797"}, &(0x7f0000000140)=0xea) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r1, 0x9}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x800001) 2018/05/19 11:20:23 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f424852", 0x44, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:23 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x8, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:23 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x3000000) [ 376.390170] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 376.397823] FAT-fs (loop5): Filesystem has been set read-only [ 376.413510] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 376.422752] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 376.430490] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xc700000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:23 executing program 2: request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) 2018/05/19 11:20:23 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8c00) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x8001, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xe2, "618c6e44461dead43be068bfb156839c2e26197b181d0596091e79c08efb4de49b5ed24022707ba400c6a1b0154d1a9341cb734c17483bd74059eb7fcadf668bac14e955eef5e0f1fcd567901d75e7ed508f24505deb1cd21fc7345349c096ca997d948efd642f029134b383d5e3437c57d0f4104ce3134cc9d4a072c6f54de82c532bf04447b5867eee77a1addcbca171ac69338a122d2d289c4ba71d71ba98b0af152fefc23fed08e73e83741107f33aa5f7a93cb96137cbceff473fa94c8da7df10ef4b7a977559b7bde44ddd9c9fa80342be91f6f9ab053ffd49192577f18797"}, &(0x7f0000000140)=0xea) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x800001) 2018/05/19 11:20:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:23 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x4000000) [ 376.552891] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:23 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x12, r1, &(0x7f0000000080)=""/15, 0xf) [ 376.865398] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 376.873424] FAT-fs (loop5): Filesystem has been set read-only [ 376.892695] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 376.903403] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 376.912410] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 376.996230] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:24 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f4248526653", 0x46, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:24 executing program 2: r0 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="1ae6b13f87ed81e9cc6dbfcab857ec5039c8c89964fe82a1a997185a37a81f7324c4dc1664eb5719a88b4a56506dbf5be78d340b2541deaa9b9b2e6ba10d139f04922b8bfc28ff53529473ff64a736593879b677d21d460ee93cce09a7fc8a40d583abc8aa72cdc8468db63dfb239bc09dbb4c3429d82376f6383c665732dccba238ce74cbaf9e3487b184ef0e9cc8782c8787713056a8489a5f", 0x9a, 0x0) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="8bf4da79022ad5ca91461fbcaf0e6920e698c1f7fb792e2bed0431d6f1c045d6311a85307fa14e86f3d7c599b030c0040fb6", r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x268800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000280)={r2}) 2018/05/19 11:20:24 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8c00) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x8001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x800001) 2018/05/19 11:20:24 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0xb, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:24 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x2) 2018/05/19 11:20:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3f00}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:24 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:24 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x16, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:24 executing program 0: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8c00) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x800001) [ 377.490605] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 377.498568] FAT-fs (loop5): Filesystem has been set read-only [ 377.518361] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 377.530534] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 377.544887] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 377.655362] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:25 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1000000) 2018/05/19 11:20:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x1f) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond_slave_1\x00', 0x800}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80000000200, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x307, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10, {0x2, 0x4e24, @rand_addr=0x10}, 'ip6_vti0\x00'}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x4000000000000196, &(0x7f0000000040)=[{0x4, 0x5}, {0x2800, 0x8}]}) fcntl$addseals(r1, 0x409, 0x9) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000100)=""/73) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000200)=""/233, &(0x7f0000000300)=0xe9) 2018/05/19 11:20:25 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f4248526653", 0x46, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xc0}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:25 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x800001) 2018/05/19 11:20:25 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0xc, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x800001) 2018/05/19 11:20:25 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x3f000000) 2018/05/19 11:20:25 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f4248526653", 0x46, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:25 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)='keyring\x00', 0xfffffffffffffffc) keyctl$revoke(0x3, r1) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/15, 0xf) keyctl$get_keyring_id(0x0, r2, 0x1) 2018/05/19 11:20:25 executing program 2: semget(0x3, 0x0, 0x484) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x7fffffff, @local={0xfe, 0x80, [], 0xaa}, 0x1f}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={r0, 0xfffffffffffffff5, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x9}]}, &(0x7f0000000240)=0x10) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0xd00000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 378.644520] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 378.652160] FAT-fs (loop5): Filesystem has been set read-only [ 378.667643] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 378.675979] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 378.683793] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) 2018/05/19 11:20:25 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0xe0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000200)=0x6e, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000300)={0x80002000}) r2 = socket(0x2, 0xffffffffffffffff, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)='keyring\x00', 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x400) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000340)) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xffffffffffff8001, 0x200) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r4, &(0x7f0000000080)=""/15, 0xf) [ 378.832485] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:25 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000000c0)={"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"}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 379.104666] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 379.112314] FAT-fs (loop5): Filesystem has been set read-only [ 379.144768] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 379.154345] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 379.166260] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 379.255378] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:26 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:26 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1000000000000) 2018/05/19 11:20:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x900000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:26 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:26 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0x108) 2018/05/19 11:20:26 executing program 2: request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='eth0@-\x00', 0xfffffffffffffffe) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8001, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x2, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x5}, 0x8) 2018/05/19 11:20:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:26 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:26 executing program 2: uname(&(0x7f0000000000)=""/4096) 2018/05/19 11:20:26 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000280)={0x2}) keyctl$get_security(0x11, 0x0, &(0x7f0000000080)=""/15, 0xf) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000200)={0x4, 0x80000000, 0x0, 0x6c, &(0x7f00000000c0)=""/108, 0x9f, &(0x7f0000000140)=""/159, 0x1b, &(0x7f0000000040)=""/27}) 2018/05/19 11:20:26 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x800000) 2018/05/19 11:20:26 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) [ 379.730380] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 379.738073] FAT-fs (loop5): Filesystem has been set read-only [ 379.765732] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x9000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 379.784526] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 379.794126] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:26 executing program 3: r0 = socket(0x2, 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000280)) getgroups(0x1, &(0x7f00000002c0)=[0x0]) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) keyctl$chown(0x4, r1, r2, r3) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x5, 0x60000) r5 = dup2(r4, r0) r6 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xcd, 0x3e29603ccc73279c) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000340)) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000100)={0x9, 0x8, 0x1}) r7 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, &(0x7f0000000140)=""/15, 0xffffff62) 2018/05/19 11:20:26 executing program 2: request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)='eth0@-\x00', 0xfffffffffffffffe) [ 379.915361] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 380.137242] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 380.145105] FAT-fs (loop5): Filesystem has been set read-only [ 380.194432] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 380.204145] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 380.212294] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 380.280413] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:27 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:27 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000100)={{0x210e, 0x8, 0x2, 0x8, 0xfffffffffffffff7, 0x5}, 0x595a800000000}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000380)={0x3, &(0x7f0000000140)=[{}, {}, {0x0}]}) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000280)) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000001c0)={r1, 0x80200000000006}) 2018/05/19 11:20:27 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:27 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8) 2018/05/19 11:20:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x700}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000803e00"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:27 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x900000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:27 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:27 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) socket$pppoe(0x18, 0x1, 0x0) 2018/05/19 11:20:27 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xffffffff, 0x20000) pwritev(r2, &(0x7f00000005c0)=[{&(0x7f0000000280)="fe1dd3bdff28be90dc2296c682ea5d5bc46b636852810b06f55b11168b9b5bb4c5a960b6863ec2e6c80f427b212f1a080f763e2c9c5edfdb6d1523fc680874b40564ee654273740dd7983ee7187fd839968a5a8993588029e717cdb0192263de7d3f861dbc3f8225705035e6afdb72c19309a2fec51543e32db92c27dd56d64f87e1", 0x82}, {&(0x7f0000000200)="3f48113014107e5dd7fe4ed6625edb39c9d942d091311936a39c08f2ac35beadc572b18724ef17aefbf766eda425b9ced5bb", 0x32}, {&(0x7f0000000340)="a1585c95b6de5987ce27f587894c211b8d032cafa8a5a20113ead46972a162f77b5dec90bdb1cd548c511baef4c9fd764de0163dba8a4254007afaaa06ce67de291f17304dd5470dcaebc324a5fd3e87f52b1bdad45f5770380e9294495f6c505a69a5e4932359020c2d8ebbaff6fa7437586def237c0dcb793a1a93efd507af77da917e82ae30aa8fcf5e5282964c7fe88a8d4e0baab257067711e1f7b03e3ceba2a4c7a4916b063d937f4d851fdb09321d3c72fb14aa13dba592af0a12682bfddc697b53c21651", 0xc8}, {&(0x7f0000000440)="77dc48445e6d83fa166ab5113d7a5fb8ac15faac22de074d28dfef99b16ba567649625c4ae4f537480c806732d5805f64b0e602d5f729e5593c42ba50a61c07ecb6b03baef730c124332d01c786fafd0a408a29edb33d8e7e72c70aab6e81a9d35715dc66cd154716198d5dcf442dc6aa39adf3b60d16e3ac3fe1a4949c00d277b1a32c448873ce3fb7db9edee7d98359703d6f7aac388afc7346ad985a4fab12ce1d3e566e786cec4075e616735196d3be0bfdee9d2d9f4c0", 0xb9}, {&(0x7f0000000500)="0c6d299fa646ba32508b26bcee0b025a9ed9a151c1a79b1c8d2c69036c8afac5972cb174da351109b6411b5f826826b102ed2f72a1fbd1cf9025d1644434c80e56c86fbc3c5b19eecdf9303a40578aab6dca26c8d7e6133b271fcc83a6f77f7229c643df4d1eee896fbafa774634405ec8d348f600f0f7efa6ed966720259aea6951aa988c14084de353cfc2d33b42a09e669d6b627c9180469e", 0x9a}], 0x5, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000100)={0x7ff, 0x2, 0xffffffff, 0x7, 0x11, 0xa40}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x5, 0x800, 0x3, 0x6, r2, 0x1ff}, 0x2c) keyctl$get_security(0x11, r1, &(0x7f0000000680)=""/15, 0xf) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 2018/05/19 11:20:27 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x80ffff) 2018/05/19 11:20:27 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 380.861553] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 380.869222] FAT-fs (loop5): Filesystem has been set read-only [ 380.888647] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:27 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x900000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:27 executing program 2: socketpair(0xa, 0xa, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000100)={{0x3, 0x65}, {0x3, 0xe218}, 0x8e0c, 0x3, 0x2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0xffff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}}, 0x84) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) 2018/05/19 11:20:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x0, 0x900000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 380.907232] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 380.930383] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:27 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f00000000c0)=""/15, 0x4) [ 381.030443] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:27 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:27 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x3f00) 2018/05/19 11:20:27 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x900000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:28 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x800001) 2018/05/19 11:20:28 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x6000) [ 381.349913] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 381.357785] FAT-fs (loop5): Filesystem has been set read-only [ 381.401756] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 381.411418] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 381.420502] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 381.503273] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 381.511917] FAULT_INJECTION: forcing a failure. [ 381.511917] name failslab, interval 1, probability 0, space 0, times 0 [ 381.523757] CPU: 0 PID: 24677 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #58 [ 381.531063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.540452] Call Trace: [ 381.543049] dump_stack+0x1b9/0x294 [ 381.546677] ? dump_stack_print_info.cold.2+0x52/0x52 [ 381.551876] ? print_usage_bug+0xc0/0xc0 [ 381.555930] ? print_usage_bug+0xc0/0xc0 [ 381.560004] should_fail.cold.4+0xa/0x1a [ 381.564067] ? __handle_mm_fault+0x93a/0x4310 [ 381.568572] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 381.573678] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 381.578450] ? graph_lock+0x170/0x170 [ 381.582267] ? graph_lock+0x170/0x170 [ 381.586071] ? __lock_acquire+0x7f5/0x5140 [ 381.590313] ? find_held_lock+0x36/0x1c0 [ 381.594374] ? __lock_is_held+0xb5/0x140 [ 381.598428] ? debug_check_no_locks_freed+0x310/0x310 [ 381.603624] ? check_same_owner+0x320/0x320 [ 381.607941] ? rcu_note_context_switch+0x710/0x710 [ 381.612885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.618417] ? handle_mm_fault+0x55a/0xc70 [ 381.622651] __should_failslab+0x124/0x180 [ 381.626904] should_failslab+0x9/0x14 [ 381.630717] kmem_cache_alloc+0x2af/0x760 [ 381.634872] ? dccp_v6_request_recv_sock+0x12b8/0x1f10 [ 381.640156] jbd2__journal_start+0x1d3/0xa70 [ 381.644572] ? jbd2_write_access_granted.part.8+0x420/0x420 [ 381.650286] ? rcu_note_context_switch+0x710/0x710 [ 381.655232] ? __might_sleep+0x95/0x190 [ 381.659226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.664767] __ext4_journal_start_sb+0x17a/0x5e0 [ 381.669519] ? ext4_ioctl_setflags+0x1f1/0x7b0 [ 381.674102] ? ext4_journal_abort_handle.isra.4+0x260/0x260 [ 381.679809] ? lock_release+0xa10/0xa10 [ 381.683773] ? check_same_owner+0x320/0x320 [ 381.688090] ? rcu_note_context_switch+0x710/0x710 [ 381.693025] ext4_ioctl_setflags+0x1f1/0x7b0 [ 381.697428] ? ext4_ioc_getfsmap+0xeb0/0xeb0 [ 381.701843] ? down_read+0x1b0/0x1b0 [ 381.705548] ? __mnt_want_write_file+0x87/0xc0 [ 381.710125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.715675] ? mnt_want_write_file+0x141/0x330 [ 381.720270] ext4_ioctl+0xe41/0x4210 [ 381.723989] ? _parse_integer+0x13b/0x190 [ 381.728140] ? ext4_ioctl_group_add+0x560/0x560 [ 381.732818] ? _parse_integer+0x190/0x190 [ 381.736969] ? graph_lock+0x170/0x170 [ 381.740767] ? lock_release+0xa10/0xa10 [ 381.744738] ? check_same_owner+0x320/0x320 [ 381.749057] ? find_held_lock+0x36/0x1c0 [ 381.753126] ? graph_lock+0x170/0x170 [ 381.756922] ? find_held_lock+0x36/0x1c0 [ 381.760984] ? lock_downgrade+0x8e0/0x8e0 [ 381.765130] ? kasan_check_read+0x11/0x20 [ 381.769281] ? rcu_is_watching+0x85/0x140 [ 381.773433] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 381.778624] ? __fget+0x40c/0x650 [ 381.782067] ? match_held_lock+0x841/0x8b0 [ 381.786306] ? expand_files.part.8+0x9a0/0x9a0 [ 381.790882] ? kasan_check_write+0x14/0x20 [ 381.795111] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 381.800037] ? wait_for_completion+0x870/0x870 [ 381.804622] ? ext4_ioctl_group_add+0x560/0x560 [ 381.809288] do_vfs_ioctl+0x1cf/0x16a0 [ 381.813183] ? ioctl_preallocate+0x2e0/0x2e0 [ 381.817602] ? fget_raw+0x20/0x20 [ 381.821053] ? __sb_end_write+0xac/0xe0 [ 381.825036] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 381.830570] ? fput+0x130/0x1a0 [ 381.833856] ? ksys_write+0x1a6/0x250 [ 381.837653] ? security_file_ioctl+0x94/0xc0 [ 381.842060] ksys_ioctl+0xa9/0xd0 [ 381.845515] __x64_sys_ioctl+0x73/0xb0 [ 381.849406] do_syscall_64+0x1b1/0x800 [ 381.853286] ? finish_task_switch+0x1ca/0x840 [ 381.857773] ? syscall_return_slowpath+0x5c0/0x5c0 [ 381.862696] ? syscall_return_slowpath+0x30f/0x5c0 [ 381.867621] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 381.872982] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.877864] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.883048] RIP: 0033:0x455a09 [ 381.886222] RSP: 002b:00007f6495e22c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.893920] RAX: ffffffffffffffda RBX: 00007f6495e236d4 RCX: 0000000000455a09 [ 381.901180] RDX: 0000000000800001 RSI: 0000000040086602 RDI: 0000000000000013 [ 381.908438] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 381.915691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 381.922953] R13: 00000000000002b9 R14: 00000000006f81f8 R15: 0000000000000000 2018/05/19 11:20:28 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:28 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x800001) 2018/05/19 11:20:28 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xffff8000) 2018/05/19 11:20:28 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="24d2453b8f401cf5aaa067988d9584fb4ec3020180e5ee87326b772d9a551d346082e88b8fda83a2e16017dbe1b03ffd9fe3cfe847a7d0cd4c0c493c70e89f67435c") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x10, 0x0, 0xffff) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) msgget$private(0x0, 0x2) keyctl$get_security(0x11, r3, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:28 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x41, 0x50) openat(r0, &(0x7f0000000640)='./file0\x00', 0xa000, 0x0) syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0xfff0000000000, 0x80) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x470, 0x258, 0x118, 0x118, 0x388, 0x388, 0x388, 0x4, &(0x7f0000000100), {[{{@uncond, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @dev={0xac, 0x14, 0x14, 0x6}, @multicast2=0xe0000002, 0x1, 0x1}}}, {{@arp={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffffff, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, 0x9, 0x1, 0x1, 0x7, 0xff, 0x1, 'vlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3f, 0x4, 0x6b}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c0) 2018/05/19 11:20:28 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x0, 0x3f000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:28 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000340)) 2018/05/19 11:20:28 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x16001, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0600d8f3acc97884305b"], &(0x7f0000000140)=0xe) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e22, 0x80000001, @dev={0xfe, 0x80, [], 0x16}, 0x1}}, [0xff, 0x1, 0x5580f1a4, 0x1, 0x1f, 0x3, 0x0, 0x9, 0x40000000000, 0x200, 0xffff, 0x6, 0x4, 0xd279, 0x5]}, &(0x7f0000000280)=0x100) 2018/05/19 11:20:29 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626362c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, {0x8, 0x2, 0x2, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}}, 0x8) getsockopt$nfc_llcp(r0, 0x118, 0x6, &(0x7f0000000280)=""/4096, 0x1000) 2018/05/19 11:20:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x800001) [ 382.315768] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 382.323431] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:20:29 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xffffffffffffc) 2018/05/19 11:20:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:29 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000340)) [ 382.438467] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 382.464305] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 382.472708] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 382.578111] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:30 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x0, 0xf00}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:30 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000001c0)="683c0a0c72fafdac601e85b8efe76e43eb8e0c58964f7d0ee46293d593e9906c072c3651812001eaa3415756ccbc3e30d471f4cb33d742bb02e4bbc552ebab9eea91fccaf27164ba084641cfc80b501ec8c734e7f56cfaf35e1d709d6d1c06d90a216b2048bd23c80c4d4e6c8b722d7db2ecd506638f43b428c9ae4290ef1a3db6c127438d5328a74f9ecd6b7390ffc9b347ecb939f55b7758ee0b25f03488b6ee3beb94215a482ee8dd765345f8e773aef1b52348ea1b57828ff4c6f22bd4c7b2c91f7b7f007949a3db640d65d3ff469ce2d251", 0xd4, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000002c0)='eth0@-\x00', r0) 2018/05/19 11:20:30 executing program 3: r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000200)={r2, 0x1}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000380)={0x100000000, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={r1, 0x1, 0x1, 0x1f, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) recvfrom$inet6(r1, &(0x7f0000000280)=""/142, 0x8e, 0x100, &(0x7f0000000340)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0xc}, 0xffffffff}, 0x1c) keyctl$get_security(0x11, r3, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000803e00"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086610, 0x800001) 2018/05/19 11:20:30 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xfcffffffffff0f00) 2018/05/19 11:20:30 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)="2e2f636f6e74726f6c2f66696c653004", &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:30 executing program 6: r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000340)) 2018/05/19 11:20:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:30 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) [ 383.268851] EXT4-fs warning (device sda1): ext4_resize_fs:1914: can't read last block, resize aborted 2018/05/19 11:20:30 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x400000000000000) 2018/05/19 11:20:30 executing program 6: r0 = socket(0x2, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="24d2453b8f401cf5aaa067988d9584fb4ec3020180e5ee87326b772d9a551d346082e88b8fda83a2e16017dbe1b03ffd9fe3cfe847a7d0cd4c0c493c70e89f67435c") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x10, 0x0, 0xffff) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) msgget$private(0x0, 0x2) keyctl$get_security(0x11, r3, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x401c5820, 0x800001) 2018/05/19 11:20:30 executing program 3: r0 = socket(0x2, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x1, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x4b) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/15, 0xf) [ 383.504249] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 383.513386] FAT-fs (loop5): Filesystem has been set read-only 2018/05/19 11:20:30 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x200001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x674be64b, 0x4) request_key(&(0x7f00000000c0)="0300000040", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) [ 383.556509] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 383.592119] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 383.607352] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 383.742319] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:31 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:31 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x1}, 0x2, 0x2, 0x3, 0x2, 0xff, 0x6, 0x401}, 0x20) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="736563757269747900000000000000000000d9fe0000000000000000000000000e00000004000000c8040000ffffffff100100009002000000000000ff00f8030000f8030000ffffffff0400000000000000000000000800", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000010000000000000000000000000000000100000000ff000000ffffffff00000000ffffffffff0000ff000000ff000000006970646470300000000000000000000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600010508000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001e0000002000000000000000000000000736974300000000000000000000000000010000000000000fe800000000000000000000000000021ff02000000000000000000000000000100000000000000ff0000000000000000ffffff00000000ff0000000000000000626f6e6430000000000000000000000062726964676530000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb00aa040100000000000000000000000000000058018001000000000000000000000000000000000000000000000000480068626800000000000000000000000000000000000000000000000000000003000000010100000400117da90007000000ff07040094bd0000010001fcc50007000001010001004800686268000000000000000000000000000000000000000000000000000000fd000000060188008700720305000000060006120300070001fc09000400080006000200020002002800415544495400000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200168010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d3000004d501000000090100002800686c00000000000000000000000000000000000000000000000000000000a902000000000000480049444c4554494d45520000000000000000000000000000000000000000008000000073797a3100000000000000000000000000000000000000000000000001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x528) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000001c0)=0x4) keyctl$get_security(0x11, r1, &(0x7f00000000c0)=""/15, 0xf) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100)=0x2, 0x4) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000007c0)={0xaa, 0x2}) 2018/05/19 11:20:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x0, 0x7}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x800001) 2018/05/19 11:20:31 executing program 6 (fault-call:2 fault-nth:0): r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002780)='cpuacct.usage_user\x00', 0x0, 0x0) bind$can_raw(r0, &(0x7f00000027c0)={0x1d}, 0x10) 2018/05/19 11:20:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c65300000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:31 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x2000000) [ 384.492704] FAULT_INJECTION: forcing a failure. [ 384.492704] name failslab, interval 1, probability 0, space 0, times 0 [ 384.504063] CPU: 1 PID: 24841 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #58 [ 384.511445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.520810] Call Trace: [ 384.523426] dump_stack+0x1b9/0x294 [ 384.527084] ? dump_stack_print_info.cold.2+0x52/0x52 [ 384.532299] ? perf_trace_lock_acquire+0xe3/0x980 [ 384.537215] should_fail.cold.4+0xa/0x1a [ 384.541410] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 384.546546] ? lock_downgrade+0x8e0/0x8e0 [ 384.550723] ? proc_fail_nth_write+0x96/0x1f0 [ 384.555245] ? proc_cwd_link+0x1d0/0x1d0 [ 384.559337] ? find_held_lock+0x36/0x1c0 [ 384.563448] ? check_same_owner+0x320/0x320 [ 384.567806] ? rcu_note_context_switch+0x710/0x710 [ 384.570898] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 384.573454] __should_failslab+0x124/0x180 [ 384.573481] should_failslab+0x9/0x14 [ 384.573504] __kmalloc+0x2c8/0x760 2018/05/19 11:20:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x80086603, 0x800001) 2018/05/19 11:20:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 384.573525] ? strncpy_from_user+0x500/0x500 [ 384.573539] ? fput+0x130/0x1a0 [ 384.573560] ? __x64_sys_memfd_create+0x139/0x5a0 [ 384.581075] FAT-fs (loop5): Filesystem has been set read-only [ 384.585270] __x64_sys_memfd_create+0x139/0x5a0 [ 384.585293] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 384.585311] ? memfd_fcntl+0x15d0/0x15d0 [ 384.585333] ? do_syscall_64+0x92/0x800 [ 384.614296] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 384.615721] do_syscall_64+0x1b1/0x800 2018/05/19 11:20:31 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0x3) 2018/05/19 11:20:31 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) [ 384.615741] ? finish_task_switch+0x1ca/0x840 [ 384.615760] ? syscall_return_slowpath+0x5c0/0x5c0 [ 384.615777] ? syscall_return_slowpath+0x30f/0x5c0 [ 384.615798] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 384.615817] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.615836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 384.615848] RIP: 0033:0x455a09 [ 384.615856] RSP: 002b:00007f3a68392ba8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 384.615872] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 0000000000455a09 2018/05/19 11:20:31 executing program 6 (fault-call:2 fault-nth:1): r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x0, 0xf}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 384.615881] RDX: 0000000020000318 RSI: 0000000000000000 RDI: 00000000004baaee [ 384.615891] RBP: 000000000072bea0 R08: 0000000020000318 R09: 0000000000000000 [ 384.615900] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000014 [ 384.615909] R13: 0000000000000723 R14: 00000000006febe8 R15: 0000000000000000 [ 384.721527] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 384.729691] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:31 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xffffffff00000000) 2018/05/19 11:20:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x6611, 0x800001) [ 384.904225] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 384.993161] FAULT_INJECTION: forcing a failure. [ 384.993161] name failslab, interval 1, probability 0, space 0, times 0 [ 385.004729] CPU: 0 PID: 24863 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #58 [ 385.012030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.021397] Call Trace: [ 385.024012] dump_stack+0x1b9/0x294 [ 385.027655] ? dump_stack_print_info.cold.2+0x52/0x52 [ 385.032861] should_fail.cold.4+0xa/0x1a [ 385.036929] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 385.042071] ? find_held_lock+0x36/0x1c0 [ 385.046151] ? check_same_owner+0x320/0x320 [ 385.050482] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 385.055514] ? rcu_note_context_switch+0x710/0x710 [ 385.060456] __should_failslab+0x124/0x180 [ 385.064719] should_failslab+0x9/0x14 [ 385.068530] kmem_cache_alloc+0x2af/0x760 [ 385.072688] ? lock_downgrade+0x8e0/0x8e0 [ 385.076838] __d_alloc+0xc0/0xd30 [ 385.080287] ? do_raw_spin_unlock+0x9e/0x2e0 [ 385.084713] ? shrink_dcache_for_umount+0x290/0x290 [ 385.089729] ? __lock_is_held+0xb5/0x140 [ 385.093809] ? _raw_spin_unlock+0x22/0x30 [ 385.097977] ? __alloc_fd+0x346/0x700 [ 385.101778] ? exit_files+0xb0/0xb0 [ 385.105398] ? lock_downgrade+0x8e0/0x8e0 [ 385.109550] d_alloc_pseudo+0x1d/0x30 [ 385.113359] __shmem_file_setup+0x1ed/0x6e0 [ 385.117679] ? shmem_fill_super+0xa30/0xa30 [ 385.121997] ? get_unused_fd_flags+0x121/0x190 [ 385.126580] ? __alloc_fd+0x700/0x700 [ 385.130376] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 385.135905] ? _copy_from_user+0xdf/0x150 [ 385.140064] __x64_sys_memfd_create+0x2a7/0x5a0 [ 385.144735] ? memfd_fcntl+0x15d0/0x15d0 [ 385.148794] ? do_syscall_64+0x92/0x800 [ 385.152774] do_syscall_64+0x1b1/0x800 [ 385.156671] ? finish_task_switch+0x1ca/0x840 [ 385.161186] ? syscall_return_slowpath+0x5c0/0x5c0 [ 385.166125] ? syscall_return_slowpath+0x30f/0x5c0 [ 385.171075] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 385.176435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.181280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 385.186459] RIP: 0033:0x455a09 [ 385.189663] RSP: 002b:00007f3a68392ba8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 385.197370] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 0000000000455a09 [ 385.204632] RDX: 0000000020000318 RSI: 0000000000000000 RDI: 00000000004baaee [ 385.211896] RBP: 000000000072bea0 R08: 0000000020000318 R09: 0000000000000000 [ 385.219154] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000014 [ 385.226419] R13: 0000000000000723 R14: 00000000006febe8 R15: 0000000000000001 [ 385.427987] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 385.435790] FAT-fs (loop5): Filesystem has been set read-only [ 385.465654] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 385.475255] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 385.483917] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:32 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:32 executing program 6 (fault-call:2 fault-nth:2): r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:32 executing program 2: getrlimit(0x6, &(0x7f00000000c0)) r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c, 0x800) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000200)=""/112, &(0x7f0000000280)=0x70) r1 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x8, 0x1, [0x1fb]}, &(0x7f0000000300)=0xa) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={r2, 0x8, 0x2, [0xc39600000000, 0x4]}, 0xc) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r1) 2018/05/19 11:20:32 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x80086601, 0x800001) 2018/05/19 11:20:32 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x4000000000000000) 2018/05/19 11:20:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x0, 0xffffffffffffff7f}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) [ 385.631426] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 385.685066] FAULT_INJECTION: forcing a failure. [ 385.685066] name failslab, interval 1, probability 0, space 0, times 0 [ 385.696489] CPU: 0 PID: 24901 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #58 [ 385.703782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.713149] Call Trace: [ 385.715737] dump_stack+0x1b9/0x294 [ 385.719356] ? dump_stack_print_info.cold.2+0x52/0x52 [ 385.724541] ? __kernel_text_address+0xd/0x40 [ 385.729038] ? unwind_get_return_address+0x61/0xa0 [ 385.733998] should_fail.cold.4+0xa/0x1a [ 385.738074] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 385.743176] ? save_stack+0xa9/0xd0 [ 385.746806] ? save_stack+0x43/0xd0 [ 385.750428] ? kasan_kmalloc+0xc4/0xe0 [ 385.754313] ? kasan_slab_alloc+0x12/0x20 [ 385.758451] ? kmem_cache_alloc+0x12e/0x760 [ 385.762762] ? __d_alloc+0xc0/0xd30 [ 385.766393] ? d_alloc_pseudo+0x1d/0x30 [ 385.770370] ? __shmem_file_setup+0x1ed/0x6e0 [ 385.774867] ? __x64_sys_memfd_create+0x2a7/0x5a0 [ 385.779701] ? do_syscall_64+0x1b1/0x800 [ 385.783769] ? find_held_lock+0x36/0x1c0 [ 385.787837] ? check_same_owner+0x320/0x320 [ 385.792152] ? rcu_note_context_switch+0x710/0x710 [ 385.797073] ? kasan_check_read+0x11/0x20 [ 385.801227] ? rcu_is_watching+0x85/0x140 [ 385.805384] __should_failslab+0x124/0x180 [ 385.809619] should_failslab+0x9/0x14 [ 385.813409] kmem_cache_alloc+0x2af/0x760 [ 385.817544] ? __raw_spin_lock_init+0x1c/0x100 [ 385.822114] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 385.827118] ? shmem_destroy_callback+0xc0/0xc0 [ 385.831778] shmem_alloc_inode+0x1b/0x40 [ 385.835830] alloc_inode+0x63/0x190 [ 385.839450] new_inode_pseudo+0x69/0x1a0 [ 385.843502] ? prune_icache_sb+0x1a0/0x1a0 [ 385.847735] ? shrink_dcache_for_umount+0x290/0x290 [ 385.852749] new_inode+0x1c/0x40 [ 385.856119] shmem_get_inode+0xe5/0x8f0 [ 385.860097] ? shmem_encode_fh+0x340/0x340 [ 385.864328] ? exit_files+0xb0/0xb0 [ 385.867951] ? lock_downgrade+0x8e0/0x8e0 [ 385.872103] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.877646] ? d_set_d_op+0x31d/0x410 [ 385.881440] __shmem_file_setup+0x249/0x6e0 [ 385.885751] ? shmem_fill_super+0xa30/0xa30 [ 385.890070] ? get_unused_fd_flags+0x121/0x190 [ 385.894640] ? __alloc_fd+0x700/0x700 [ 385.898435] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 385.903967] ? _copy_from_user+0xdf/0x150 [ 385.908109] __x64_sys_memfd_create+0x2a7/0x5a0 [ 385.912771] ? memfd_fcntl+0x15d0/0x15d0 [ 385.916826] ? do_syscall_64+0x92/0x800 [ 385.920794] do_syscall_64+0x1b1/0x800 [ 385.924682] ? finish_task_switch+0x1ca/0x840 [ 385.929167] ? syscall_return_slowpath+0x5c0/0x5c0 [ 385.934086] ? syscall_return_slowpath+0x30f/0x5c0 [ 385.939009] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 385.944369] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.949204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 385.954900] RIP: 0033:0x455a09 [ 385.958073] RSP: 002b:00007f3a68392ba8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 385.965779] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 0000000000455a09 [ 385.973038] RDX: 0000000020000318 RSI: 0000000000000000 RDI: 00000000004baaee 2018/05/19 11:20:32 executing program 2: r0 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)="62d18d88b77d0c2897b82a5792", 0xd, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000280)="757344d7c6c55fc1abff650a7200", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)='eth0@-\x00', r0) syz_mount_image$msdos(&(0x7f0000000380)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x9, 0x3, &(0x7f0000000600)=[{&(0x7f0000000400)='p#', 0x2, 0x2}, {&(0x7f0000000440)="f6af7dccda11c29b24c6935db793ae1a9a78babec894fe227b302ff505d56c425413316073659557d4289a471a99b7548f675e52bdc5b94f09ca18397c889bfe7dd156a3116f077df9a8fe00a65e6a76792d4255b7bce6051c0e813c0985eeb3a98945e5c6663d8301add401c275d44e3f5afbaf01b53a2641482f7573f1c8fb9ea7f9bff49634351a6a24e19fc7537b5eba95ccc1c856e0f9b40b3abde30ed18a061cfd9eb6b6ccdd552c747afe628de6c81bf995ce25f885553e185ead5f047f7a0519d663c7e66152900646b421ea419b5251421daa02aff8", 0xda, 0xff}, {&(0x7f0000000540)="e2c11c3c8b8c94fbcfd69883e1dacd59f219ee4c96cf6102239c5cdba48642a662d7b5d73a76f1d94e5d6b20dc3fe5e9ec65a5c89f27d20465136b8e7f855fc1fae4a1173918377fd435a142677627e4563ebede8ff0c8af7da6401531924126f7c23cc0ee40469cda26ceef798fb50dc38673689759816e90cd3baeb4826c80cdee73dc549b0b6fab053f4cffa3795f2806349fe4eb", 0x96, 0x6}], 0x200800, &(0x7f0000000680)={[{@allow_utime={'allow_utime', 0x3d, [0x30, 0x35, 0x36, 0x31, 0x31]}, 0x2c}, {@nfs='nfs', 0x2c}]}) add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="6b2a5b70da540cf8fa97dbed979064e9022987f692100d9473f0f3b690f230cf5728520375e8ce3a085617f507a0ab1e2598b505529d8303427ab5c5b69ec14fd97ead6cce1113b2d009c2b783aaf0406adf012cacc5b330f0e24bc405", 0xfffffd88, r1) add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="b90d326fff476b3e1ea8355a5fd4fce23859efb633c0dc6c934f8149383a6d3656e4bdfc1a3429f9ff62d80d76445372cb33a1681e1abf219ed470db3618c807b9c74e9658e98c748408", 0x4a, r0) 2018/05/19 11:20:32 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x600000) 2018/05/19 11:20:32 executing program 3: r0 = socket(0x1, 0x0, 0x3) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xfff, 0x5, 0x2, 0x9, 0x9, 0x6, 0x7, {0x0, @in6={{0xa, 0x4e20, 0xffffffff, @remote={0xfe, 0x80, [], 0xbb}}}, 0x80000000, 0x8c2, 0x80, 0x8, 0x4}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000480)={r2}, &(0x7f00000004c0)=0x8) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000340)={r2, 0x8}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x40, 0x4}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x104, 0x204, 0x10001, 0x1ff, r3}, &(0x7f00000001c0)=0xfffffe4f) r4 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f00000003c0)={r5, 0x1}) 2018/05/19 11:20:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x2, 0x800001) 2018/05/19 11:20:32 executing program 6 (fault-call:2 fault-nth:3): r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 385.980293] RBP: 000000000072bea0 R08: 0000000020000318 R09: 0000000000000000 [ 385.987661] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000014 [ 385.994916] R13: 0000000000000723 R14: 00000000006febe8 R15: 0000000000000002 [ 386.295271] FAULT_INJECTION: forcing a failure. [ 386.295271] name failslab, interval 1, probability 0, space 0, times 0 [ 386.306710] CPU: 1 PID: 24930 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #58 [ 386.314004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.323397] Call Trace: [ 386.326029] dump_stack+0x1b9/0x294 [ 386.329687] ? dump_stack_print_info.cold.2+0x52/0x52 [ 386.334896] ? perf_trace_lock_acquire+0xe3/0x980 [ 386.339760] ? __kernel_text_address+0xd/0x40 [ 386.344283] ? unwind_get_return_address+0x61/0xa0 [ 386.349235] should_fail.cold.4+0xa/0x1a [ 386.353322] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 386.358453] ? save_stack+0xa9/0xd0 [ 386.362105] ? save_stack+0x43/0xd0 [ 386.365861] ? kasan_kmalloc+0xc4/0xe0 [ 386.369771] ? kasan_slab_alloc+0x12/0x20 [ 386.373940] ? kmem_cache_alloc+0x12e/0x760 [ 386.378276] ? __d_alloc+0xc0/0xd30 [ 386.381915] ? d_alloc_pseudo+0x1d/0x30 [ 386.385905] ? __shmem_file_setup+0x1ed/0x6e0 [ 386.390425] ? do_syscall_64+0x1b1/0x800 [ 386.394503] ? find_held_lock+0x36/0x1c0 [ 386.398606] ? check_same_owner+0x320/0x320 [ 386.402950] ? rcu_note_context_switch+0x710/0x710 [ 386.407896] ? kasan_check_read+0x11/0x20 [ 386.408193] FAT-fs (loop2): bogus number of reserved sectors [ 386.412127] ? rcu_is_watching+0x85/0x140 [ 386.412150] __should_failslab+0x124/0x180 [ 386.412174] should_failslab+0x9/0x14 [ 386.412194] kmem_cache_alloc+0x2af/0x760 [ 386.412213] ? __raw_spin_lock_init+0x1c/0x100 [ 386.412228] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 386.412245] ? shmem_destroy_callback+0xc0/0xc0 [ 386.412260] shmem_alloc_inode+0x1b/0x40 [ 386.412276] alloc_inode+0x63/0x190 [ 386.412291] new_inode_pseudo+0x69/0x1a0 [ 386.412304] ? prune_icache_sb+0x1a0/0x1a0 [ 386.412322] ? shrink_dcache_for_umount+0x290/0x290 [ 386.412344] new_inode+0x1c/0x40 [ 386.418208] FAT-fs (loop2): Can't find a valid FAT filesystem [ 386.422287] shmem_get_inode+0xe5/0x8f0 [ 386.422304] ? shmem_encode_fh+0x340/0x340 [ 386.422327] ? exit_files+0xb0/0xb0 [ 386.422346] ? lock_downgrade+0x8e0/0x8e0 [ 386.435407] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 386.439059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 386.439076] ? d_set_d_op+0x31d/0x410 [ 386.439097] __shmem_file_setup+0x249/0x6e0 [ 386.439117] ? shmem_fill_super+0xa30/0xa30 [ 386.439136] ? get_unused_fd_flags+0x121/0x190 [ 386.439154] ? __alloc_fd+0x700/0x700 [ 386.439173] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.439192] ? _copy_from_user+0xdf/0x150 [ 386.439213] __x64_sys_memfd_create+0x2a7/0x5a0 2018/05/19 11:20:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x800001) [ 386.439229] ? memfd_fcntl+0x15d0/0x15d0 [ 386.439248] ? do_syscall_64+0x92/0x800 [ 386.439267] do_syscall_64+0x1b1/0x800 [ 386.444314] FAT-fs (loop5): Filesystem has been set read-only [ 386.448932] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 386.448950] ? syscall_return_slowpath+0x5c0/0x5c0 [ 386.448968] ? syscall_return_slowpath+0x30f/0x5c0 [ 386.448989] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 386.479883] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 386.483163] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 386.483188] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.483200] RIP: 0033:0x455a09 [ 386.483208] RSP: 002b:00007f3a68392ba8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 386.483225] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 0000000000455a09 [ 386.483234] RDX: 0000000020000318 RSI: 0000000000000000 RDI: 00000000004baaee [ 386.483243] RBP: 000000000072bea0 R08: 0000000020000318 R09: 0000000000000000 [ 386.483253] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000014 [ 386.483262] R13: 0000000000000723 R14: 00000000006febe8 R15: 0000000000000003 [ 386.648248] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 386.656224] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 386.683718] FAT-fs (loop2): bogus number of reserved sectors [ 386.689697] FAT-fs (loop2): Can't find a valid FAT filesystem [ 386.820374] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:33 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f00000001c0)=""/15, 0xfffffffffffffe6c) 2018/05/19 11:20:33 executing program 6 (fault-call:2 fault-nth:4): r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:33 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x60) 2018/05/19 11:20:33 executing program 2: r0 = request_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)='ppp0\x00', 0xfffffffffffffff8) request_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="cc776c616e3000", r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4060000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x108, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4120}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2=0xe0000002}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3d}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x40801) 2018/05/19 11:20:33 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x5421, 0x800001) 2018/05/19 11:20:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x0, 0x600000000000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000803e00"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) [ 387.226819] FAULT_INJECTION: forcing a failure. [ 387.226819] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 387.239634] CPU: 0 PID: 24974 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #58 [ 387.246947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.256313] Call Trace: [ 387.258922] dump_stack+0x1b9/0x294 [ 387.262548] ? dump_stack_print_info.cold.2+0x52/0x52 [ 387.267731] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 387.272765] should_fail.cold.4+0xa/0x1a [ 387.276821] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 387.281921] ? graph_lock+0x170/0x170 [ 387.285716] ? find_held_lock+0x36/0x1c0 [ 387.289770] ? __lock_is_held+0xb5/0x140 [ 387.293834] ? check_same_owner+0x320/0x320 [ 387.298148] ? rcu_note_context_switch+0x710/0x710 [ 387.303073] ? __might_sleep+0x95/0x190 [ 387.307046] __alloc_pages_nodemask+0x34e/0xd70 [ 387.311718] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 387.316736] ? debug_check_no_locks_freed+0x310/0x310 [ 387.321934] ? check_noncircular+0x20/0x20 [ 387.326164] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 387.331173] ? percpu_counter_add_batch+0xf2/0x150 [ 387.336101] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 387.341637] alloc_pages_vma+0xdd/0x550 [ 387.345615] shmem_alloc_page+0x178/0x2c0 [ 387.349759] ? shmem_swapin+0x3a0/0x3a0 [ 387.353720] ? d_alloc+0x8e/0x370 [ 387.357165] ? find_lock_entry+0x2db/0x8a0 [ 387.361392] ? print_usage_bug+0xc0/0xc0 [ 387.365452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.371014] ? security_vm_enough_memory_mm+0x9d/0xc0 [ 387.376208] shmem_alloc_and_acct_page+0x1e9/0x800 [ 387.381133] ? shmem_alloc_hugepage+0x5e0/0x5e0 [ 387.385806] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 387.390993] shmem_getpage_gfp+0x6cf/0x4190 [ 387.395309] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 387.400497] ? print_usage_bug+0xc0/0xc0 [ 387.404552] ? shmem_mfill_atomic_pte+0x1c40/0x1c40 [ 387.409560] ? __lock_acquire+0x7f5/0x5140 [ 387.414133] ? print_usage_bug+0xc0/0xc0 [ 387.418185] ? __lock_acquire+0x7f5/0x5140 [ 387.422409] ? graph_lock+0x170/0x170 [ 387.426196] ? print_usage_bug+0xc0/0xc0 [ 387.430246] ? __lock_acquire+0x7f5/0x5140 [ 387.434474] ? __lock_acquire+0x7f5/0x5140 [ 387.438697] ? print_usage_bug+0xc0/0xc0 [ 387.442749] ? __lock_acquire+0x7f5/0x5140 [ 387.446970] ? debug_check_no_locks_freed+0x310/0x310 [ 387.452238] ? print_usage_bug+0xc0/0xc0 [ 387.456294] ? __lock_acquire+0x7f5/0x5140 [ 387.460519] ? check_noncircular+0x20/0x20 [ 387.464765] ? print_usage_bug+0xc0/0xc0 [ 387.468831] ? debug_check_no_locks_freed+0x310/0x310 [ 387.474013] ? print_usage_bug+0xc0/0xc0 [ 387.478072] ? perf_trace_lock_acquire+0xe3/0x980 [ 387.482916] ? graph_lock+0x170/0x170 [ 387.486705] ? print_usage_bug+0xc0/0xc0 [ 387.490756] ? perf_trace_lock+0x900/0x900 [ 387.494982] ? __lock_acquire+0x7f5/0x5140 [ 387.499202] ? graph_lock+0x170/0x170 [ 387.502992] ? __lock_acquire+0x7f5/0x5140 [ 387.507226] ? perf_trace_lock+0x900/0x900 [ 387.511454] ? graph_lock+0x170/0x170 [ 387.515244] ? find_held_lock+0x36/0x1c0 [ 387.519305] ? print_usage_bug+0xc0/0xc0 [ 387.523370] ? lock_downgrade+0x8e0/0x8e0 [ 387.527508] ? do_raw_spin_lock+0xc1/0x200 [ 387.531738] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.537270] ? iov_iter_fault_in_readable+0x23d/0x460 [ 387.542465] ? copy_page_from_iter+0x880/0x880 [ 387.547049] shmem_write_begin+0x110/0x1e0 [ 387.551282] generic_perform_write+0x39a/0x6a0 [ 387.555877] ? add_page_wait_queue+0x2a0/0x2a0 [ 387.560467] ? file_update_time+0xdc/0x640 [ 387.564693] ? current_time+0xc0/0xc0 [ 387.568490] ? __might_sleep+0x95/0x190 [ 387.572459] ? down_write+0x87/0x120 [ 387.576172] ? generic_file_write_iter+0xe5/0x850 [ 387.581008] __generic_file_write_iter+0x26e/0x630 [ 387.585948] generic_file_write_iter+0x430/0x850 [ 387.590702] ? __generic_file_write_iter+0x630/0x630 [ 387.595798] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.601330] ? iov_iter_init+0xc9/0x1f0 [ 387.605306] __vfs_write+0x64d/0x960 [ 387.609032] ? kernel_read+0x120/0x120 [ 387.612922] ? __lock_is_held+0xb5/0x140 [ 387.616991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.622521] ? __sb_start_write+0x17f/0x300 [ 387.626840] vfs_write+0x1f8/0x560 [ 387.630375] ksys_pwrite64+0x174/0x1a0 [ 387.634253] ? __ia32_sys_pread64+0xf0/0xf0 [ 387.638562] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 387.644102] ? fput+0x130/0x1a0 [ 387.647374] ? do_sys_ftruncate+0x44e/0x560 [ 387.651686] __x64_sys_pwrite64+0x97/0xf0 [ 387.655829] do_syscall_64+0x1b1/0x800 [ 387.659708] ? finish_task_switch+0x1ca/0x840 [ 387.664213] ? syscall_return_slowpath+0x5c0/0x5c0 [ 387.669136] ? syscall_return_slowpath+0x30f/0x5c0 [ 387.674071] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 387.679434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.684274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 387.689464] RIP: 0033:0x40fcc7 [ 387.692651] RSP: 002b:00007f3a68392ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 387.700351] RAX: ffffffffffffffda RBX: 0000000020000310 RCX: 000000000040fcc7 [ 387.707613] RDX: 0000000000000048 RSI: 0000000020010000 RDI: 0000000000000015 [ 387.714876] RBP: 0000000000000000 R08: 0000000020000318 R09: 0000000000000000 [ 387.722138] R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000015 2018/05/19 11:20:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000000000000000000200"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0189436, 0x800001) [ 387.729401] R13: 0000000000000001 R14: 00000000006febe8 R15: 0000000000000004 [ 387.853536] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 387.861171] FAT-fs (loop5): Filesystem has been set read-only [ 387.888560] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 387.897646] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 387.908759] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 388.007275] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) 2018/05/19 11:20:35 executing program 3: r0 = msgget$private(0x0, 0x8) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000000c0)=""/177) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/15, 0xf) 2018/05/19 11:20:35 executing program 6 (fault-call:2 fault-nth:5): r0 = socket(0xa, 0x20000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/19 11:20:35 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x1654, 0x1, {0xffffffffffffffff, 0x2, 0x6, 0x1, 0x4}}) 2018/05/19 11:20:35 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000000080)='./control/file0.', &(0x7f0000000040)='./control/file1\x00') pwrite64(r1, &(0x7f0000000280), 0x0, 0x0) close(r0) 2018/05/19 11:20:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c6530000000000000000000000000000000003e8000"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:35 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x4) 2018/05/19 11:20:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406edad38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b49c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x8004587d, 0x800001) 2018/05/19 11:20:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xa00) ftruncate(r0, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x0, 0xf5ffffff00000000}, @ipv6={0x0, 0x6, "098b3e", 0x8, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}, 0x3a) 2018/05/19 11:20:35 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x8, 0x1) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x18) renameat2(r0, &(0x7f00000002c0)='.\x00', r1, &(0x7f0000000340)='./file0\x00', 0x5) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='eth0@-\x00', 0xfffffffffffffffe) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x501002, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000240)={'ip6gre0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) utimensat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0x7530}, {0x0, 0x2710}}, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f00000004c0)={0x3, 0x5, 0x0, 0x8000, &(0x7f0000000380)=[{}, {}, {}, {}, {}]}) [ 388.886015] EXT4-fs (sda1): shut down requested (0) [ 388.894358] FAULT_INJECTION: forcing a failure. [ 388.894358] name failslab, interval 1, probability 0, space 0, times 0 [ 388.906034] CPU: 1 PID: 25016 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #58 [ 388.913333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.922702] Call Trace: [ 388.925314] dump_stack+0x1b9/0x294 [ 388.928974] ? dump_stack_print_info.cold.2+0x52/0x52 2018/05/19 11:20:35 executing program 3: socketpair(0x5, 0x3, 0x7ff, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000140)) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x200000, 0x0) getpid() keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/15, 0xf) [ 388.934193] ? print_usage_bug+0xc0/0xc0 [ 388.938290] should_fail.cold.4+0xa/0x1a [ 388.942388] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 388.947517] ? __isolate_free_page+0x7c0/0x7c0 [ 388.952132] ? __lock_acquire+0x7f5/0x5140 [ 388.956389] ? print_usage_bug+0xc0/0xc0 [ 388.960493] ? print_usage_bug+0xc0/0xc0 [ 388.964608] ? lock_downgrade+0x8e0/0x8e0 [ 388.968788] ? __lock_acquire+0x7f5/0x5140 [ 388.973053] ? print_usage_bug+0xc0/0xc0 [ 388.977135] ? __lock_acquire+0x7f5/0x5140 [ 388.981396] __should_failslab+0x124/0x180 [ 388.985661] should_failslab+0x9/0x14 [ 388.989484] kmem_cache_alloc+0x47/0x760 [ 388.993571] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 388.999484] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 389.005224] __radix_tree_create+0x4ce/0x820 [ 389.009666] ? radix_tree_maybe_preload_order+0x110/0x110 [ 389.015222] ? perf_trace_lock+0x900/0x900 [ 389.019477] ? perf_trace_lock_acquire+0xe3/0x980 [ 389.024350] ? print_usage_bug+0xc0/0xc0 [ 389.028432] ? graph_lock+0x170/0x170 [ 389.032251] ? perf_trace_lock+0x900/0x900 [ 389.036503] ? perf_trace_lock_acquire+0xe3/0x980 [ 389.041382] __radix_tree_insert+0xff/0x8d0 [ 389.045720] ? graph_lock+0x170/0x170 [ 389.049547] ? __radix_tree_create+0x820/0x820 [ 389.054154] ? lock_acquire+0x1dc/0x520 [ 389.058150] ? shmem_add_to_page_cache+0x494/0xdf0 [ 389.063111] ? lock_release+0xa10/0xa10 [ 389.067144] ? kasan_check_write+0x14/0x20 [ 389.071412] ? do_raw_spin_lock+0xc1/0x200 [ 389.075679] shmem_add_to_page_cache+0x96d/0xdf0 [ 389.080455] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 389.085669] ? shmem_put_link+0x270/0x270 [ 389.089847] ? percpu_ref_put_many+0x132/0x230 [ 389.094447] ? percpu_ref_tryget+0x2b0/0x2b0 [ 389.098878] ? find_lock_entry+0x2db/0x8a0 [ 389.103129] ? mem_cgroup_try_charge+0x52f/0xa40 [ 389.107916] ? mem_cgroup_low+0x1d0/0x1d0 [ 389.112088] ? security_vm_enough_memory_mm+0x9d/0xc0 [ 389.117300] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.122858] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 389.122871] FAT-fs (loop5): Filesystem has been set read-only [ 389.130336] ? shmem_alloc_and_acct_page+0x312/0x800 [ 389.130505] ? shmem_alloc_hugepage+0x5e0/0x5e0 [ 389.130531] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 389.151178] ? __radix_tree_preload+0x173/0x1d0 [ 389.155881] shmem_getpage_gfp+0x800/0x4190 [ 389.160204] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 389.165405] ? shmem_mfill_atomic_pte+0x1c40/0x1c40 [ 389.170412] ? __lock_acquire+0x7f5/0x5140 [ 389.174645] ? print_usage_bug+0xc0/0xc0 [ 389.178695] ? __lock_acquire+0x7f5/0x5140 [ 389.182921] ? print_usage_bug+0xc0/0xc0 [ 389.186975] ? __lock_acquire+0x7f5/0x5140 [ 389.191201] ? __lock_acquire+0x7f5/0x5140 [ 389.195428] ? print_usage_bug+0xc0/0xc0 [ 389.199483] ? __lock_acquire+0x7f5/0x5140 [ 389.203714] ? debug_check_no_locks_freed+0x310/0x310 [ 389.208900] ? print_usage_bug+0xc0/0xc0 [ 389.212965] ? __lock_acquire+0x7f5/0x5140 [ 389.217190] ? check_noncircular+0x20/0x20 [ 389.221419] ? print_usage_bug+0xc0/0xc0 [ 389.225476] ? debug_check_no_locks_freed+0x310/0x310 [ 389.230656] ? print_usage_bug+0xc0/0xc0 [ 389.234714] ? perf_trace_lock_acquire+0xe3/0x980 [ 389.239546] ? graph_lock+0x170/0x170 [ 389.243336] ? print_usage_bug+0xc0/0xc0 [ 389.247387] ? perf_trace_lock+0x900/0x900 [ 389.251615] ? __lock_acquire+0x7f5/0x5140 [ 389.255840] ? graph_lock+0x170/0x170 [ 389.259627] ? __lock_acquire+0x7f5/0x5140 [ 389.263876] ? graph_lock+0x170/0x170 [ 389.267666] ? find_held_lock+0x36/0x1c0 [ 389.271729] ? print_usage_bug+0xc0/0xc0 [ 389.275787] ? lock_downgrade+0x8e0/0x8e0 [ 389.279924] ? do_raw_spin_lock+0xc1/0x200 [ 389.284150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.289674] ? iov_iter_fault_in_readable+0x23d/0x460 [ 389.294850] ? copy_page_from_iter+0x880/0x880 [ 389.299434] shmem_write_begin+0x110/0x1e0 [ 389.303666] generic_perform_write+0x39a/0x6a0 [ 389.308244] ? add_page_wait_queue+0x2a0/0x2a0 [ 389.312831] ? file_update_time+0xdc/0x640 [ 389.317066] ? current_time+0xc0/0xc0 [ 389.320861] ? __might_sleep+0x95/0x190 [ 389.324835] ? down_write+0x87/0x120 [ 389.328539] ? generic_file_write_iter+0xe5/0x850 [ 389.333373] __generic_file_write_iter+0x26e/0x630 [ 389.338297] generic_file_write_iter+0x430/0x850 [ 389.343054] ? __generic_file_write_iter+0x630/0x630 [ 389.348150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.353677] ? iov_iter_init+0xc9/0x1f0 [ 389.357650] __vfs_write+0x64d/0x960 [ 389.361355] ? kernel_read+0x120/0x120 [ 389.365234] ? __lock_is_held+0xb5/0x140 [ 389.369296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.374829] ? __sb_start_write+0x17f/0x300 [ 389.379152] vfs_write+0x1f8/0x560 [ 389.382686] ksys_pwrite64+0x174/0x1a0 [ 389.386568] ? __ia32_sys_pread64+0xf0/0xf0 [ 389.390887] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 389.396421] ? fput+0x130/0x1a0 [ 389.399692] ? do_sys_ftruncate+0x44e/0x560 [ 389.404018] __x64_sys_pwrite64+0x97/0xf0 [ 389.408170] do_syscall_64+0x1b1/0x800 [ 389.412046] ? finish_task_switch+0x1ca/0x840 [ 389.416531] ? syscall_return_slowpath+0x5c0/0x5c0 [ 389.421446] ? syscall_return_slowpath+0x30f/0x5c0 [ 389.426364] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 389.431720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.436553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.441728] RIP: 0033:0x40fcc7 [ 389.444903] RSP: 002b:00007f3a68392ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 389.452609] RAX: ffffffffffffffda RBX: 0000000020000310 RCX: 000000000040fcc7 [ 389.459869] RDX: 0000000000000048 RSI: 0000000020010000 RDI: 0000000000000015 [ 389.467127] RBP: 0000000000000000 R08: 0000000020000318 R09: 0000000000000000 [ 389.474396] R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000015 [ 389.481659] R13: 0000000000000001 R14: 00000000006febe8 R15: 0000000000000005 2018/05/19 11:20:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=@file={0x0, "2e2f66696c653000000000000000000000000000000000000100"}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="52d9882a31bad99f57fd1bcbfd3083569e30d1bd822dc0169a7661eecde10cb74a07f62d67bcb393051f8a3da91f50f31bf1c1f60d1302b61d1fba38d33a7bf059af036460433441274741c664aceb8771f3fb74fbfba72cd56e125da2ca6130c05fdb7d2e55db6eb18aee703b8933a1222c83957425522a88f6e1d0d22d5426a7d9c5c1006e791516af7ed65e1e8f68365224722241925f2724b5ed6f195e03e7fd474bb7823bf79f162c12ac505b891750c83e39f8cce77024249cdb1d066b9513952527d8446a54eb402a2485bb599d12ba5f85e07701d131d9f8694b8c54616c", 0xe2}, {&(0x7f0000000240)="0a4028d5829eb03103a761485b6d32e0cab1a7c816cc4b5ae554d991addc7ce69f604c9e83dec73073ceb6c4", 0x2c}, {&(0x7f0000000300)="d651e91f2726e986de8585e36f9d34b5ab8a357607fc9ddca79023e203e6f13ac433f32b8ea4a478", 0x28}], 0x3, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x50, 0x1}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/19 11:20:36 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_int(r0, 0x29, 0x47, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/15, 0xf) [ 389.550975] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 389.559862] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 389.580158] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1041) [ 389.964857] ------------[ cut here ]------------ [ 389.969712] DEBUG_LOCKS_WARN_ON(sem->owner != get_current()) [ 389.969793] WARNING: CPU: 1 PID: 25013 at kernel/locking/rwsem.c:133 up_write+0x1c6/0x210 [ 389.983868] Kernel panic - not syncing: panic_on_warn set ... [ 389.983868] [ 389.991223] CPU: 1 PID: 25013 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #58 [ 389.998478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.007852] Call Trace: [ 390.010440] dump_stack+0x1b9/0x294 [ 390.014058] ? dump_stack_print_info.cold.2+0x52/0x52 [ 390.019239] ? up_write+0x1a0/0x210 [ 390.022861] panic+0x22f/0x4de [ 390.026057] ? add_taint.cold.5+0x16/0x16 [ 390.030213] ? __warn.cold.8+0x148/0x1b3 [ 390.034271] ? up_write+0x1c6/0x210 [ 390.037891] __warn.cold.8+0x163/0x1b3 [ 390.041762] ? up_write+0x1c6/0x210 [ 390.045388] report_bug+0x252/0x2d0 [ 390.049007] do_error_trap+0x1de/0x490 [ 390.052887] ? blk_start_plug+0xc4/0x360 [ 390.056937] ? math_error+0x420/0x420 [ 390.060722] ? vprintk_default+0x28/0x30 [ 390.064764] ? vprintk_func+0x81/0xe7 [ 390.068546] ? printk+0x9e/0xba [ 390.071826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.076659] do_invalid_op+0x1b/0x20 [ 390.080358] invalid_op+0x14/0x20 [ 390.083801] RIP: 0010:up_write+0x1c6/0x210 [ 390.088027] RSP: 0018:ffff88017f197680 EFLAGS: 00010286 [ 390.093375] RAX: 0000000000000030 RBX: ffff8801cc52cb00 RCX: ffffc90001eb0000 [ 390.100632] RDX: 000000000001e3e6 RSI: ffffffff8160f711 RDI: 0000000000000001 [ 390.107882] RBP: ffff88017f197708 R08: ffff8801857e6580 R09: fffffbfff11b090c [ 390.115135] R10: fffffbfff11b090c R11: ffffffff88d84863 R12: 1ffff1002fe32ed0 [ 390.122401] R13: dffffc0000000000 R14: ffff88017f1976e0 R15: ffff8801cc52cb58 [ 390.129681] ? vprintk_func+0x81/0xe7 [ 390.133473] ? up_read+0x110/0x110 [ 390.136997] ? wait_for_completion+0x870/0x870 [ 390.141565] ? lock_release+0xa10/0xa10 [ 390.145527] ? thaw_super_locked+0x109/0x260 [ 390.149923] percpu_up_write+0xcd/0x110 [ 390.153891] ? __percpu_up_read+0x50/0x50 [ 390.158031] ? down_write+0x87/0x120 [ 390.161745] ? thaw_super+0x16/0x30 [ 390.165360] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.170890] thaw_super_locked+0x1f5/0x260 [ 390.175107] thaw_super+0x1e/0x30 [ 390.178545] thaw_bdev+0x162/0x1a0 [ 390.182082] ext4_ioctl+0x180e/0x4210 [ 390.185867] ? lock_downgrade+0x8e0/0x8e0 [ 390.190003] ? ext4_ioctl_group_add+0x560/0x560 [ 390.194671] ? do_futex+0x249/0x27d0 [ 390.198383] ? rcu_is_watching+0x85/0x140 [ 390.202517] ? graph_lock+0x170/0x170 [ 390.206314] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 390.211489] ? exit_robust_list+0x290/0x290 [ 390.215795] ? find_held_lock+0x36/0x1c0 [ 390.219849] ? lock_downgrade+0x8e0/0x8e0 [ 390.223986] ? kasan_check_read+0x11/0x20 [ 390.228118] ? rcu_is_watching+0x85/0x140 [ 390.232247] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 390.237429] ? __fget+0x40c/0x650 [ 390.240875] ? expand_files.part.8+0x9a0/0x9a0 [ 390.245441] ? trace_hardirqs_off+0xd/0x10 [ 390.249661] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 390.254752] ? ext4_ioctl_group_add+0x560/0x560 [ 390.259432] do_vfs_ioctl+0x1cf/0x16a0 [ 390.263322] ? rcu_pm_notify+0xc0/0xc0 [ 390.267191] ? trace_hardirqs_off+0xd/0x10 [ 390.271410] ? ioctl_preallocate+0x2e0/0x2e0 [ 390.275804] ? fget_raw+0x20/0x20 [ 390.279260] ? kmem_cache_free+0x25c/0x2d0 [ 390.283482] ? __x64_sys_futex+0x477/0x680 [ 390.287701] ? do_futex+0x27d0/0x27d0 [ 390.291494] ? security_file_ioctl+0x94/0xc0 [ 390.295897] ksys_ioctl+0xa9/0xd0 [ 390.299361] __x64_sys_ioctl+0x73/0xb0 [ 390.303228] do_syscall_64+0x1b1/0x800 [ 390.307095] ? finish_task_switch+0x1ca/0x840 [ 390.311570] ? syscall_return_slowpath+0x5c0/0x5c0 [ 390.316483] ? syscall_return_slowpath+0x30f/0x5c0 [ 390.321401] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 390.326747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.331584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 390.336753] RIP: 0033:0x455a09 [ 390.339922] RSP: 002b:00007f6495e22c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.347607] RAX: ffffffffffffffda RBX: 00007f6495e236d4 RCX: 0000000000455a09 [ 390.354858] RDX: 0000000000800001 RSI: 000000008004587d RDI: 0000000000000013 [ 390.362116] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 390.369367] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 390.376620] R13: 00000000000002b9 R14: 00000000006f81f8 R15: 0000000000000000 [ 390.384379] Dumping ftrace buffer: [ 390.387907] (ftrace buffer empty) [ 390.391593] Kernel Offset: disabled [ 390.395216] Rebooting in 86400 seconds..