0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 319.883938] IPVS: ftp: loaded support on port[0] = 21 [ 319.892522] hfs: unable to parse mount options 2018/05/21 21:42:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000fffffff0000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 319.943842] hfs: unable to parse mount options 2018/05/21 21:42:12 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000440)={0xa, [0x4, 0x8, 0x3, 0x9, 0xe5, 0x8, 0x8, 0xc2e, 0x5, 0x10000]}, &(0x7f0000000480)=0x18) get_thread_area(&(0x7f00000004c0)={0x0, 0x20101000, 0x2000, 0x6, 0x7, 0xffffffff, 0xfffffffffffffffc, 0xe11, 0x7fff, 0xffffffffffffffe1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101080, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="d0ef3f82edb051ff5f63096accd0b1f1a74caab17bc56bae038801c336cc8cd4453a4f32a5fb062269011665a03d49443d4cc8e305"], @ANYBLOB="0801000002000200f7ffffff0006000061e64e6d05662685a89ff8ea000000b64f7813a8357d7fecb15c2bc3e5fda8a9a06de1a3c2f5ba64b3f33dc55dfb4340a9e98bca45d6f883d53f23428168463bfc3afe727c54ac122e16cbc8a905e80d4ea8eada2de9eaacf6c9e7bc89f0a656d6c314c2086b127c495fdbcda0ebc0304f2cd249b18123ae845d2d3d3034920b70f1e44378"]) write$sndseq(r2, &(0x7f0000000280)=[{0x9000000000000000, 0x2, 0x7, 0x3, @time={0x77359400}, {0x2, 0x8}, {0xffffffff, 0xf46e}, @control={0x5cd, 0x7ff, 0x8000}}, {0xaae2, 0x81, 0x3, 0x401, @tick=0x101, {0x2}, {0x2, 0x4}, @result={0xfff, 0x9}}, {0x2, 0x2, 0x101, 0xffffffffffffffff, @tick=0x7, {0x81, 0x7fffffff}, {0xc56, 0x101}, @time=@time={0x0, 0x989680}}, {0x100000000, 0x9, 0x8000, 0x40, @tick=0x10000, {0x56, 0x8}, {0x5, 0x2}, @quote={{0x7f}, 0x3, &(0x7f0000000040)={0x98e, 0xffff, 0xffffffff, 0x7, @tick=0x5, {0xcf8d}, {0x8, 0x6}, @raw8={"c79dd73169e3fec077cc45fd"}}}}, {0x200, 0x4, 0x8, 0x5, @tick=0x7, {0xfff, 0x4}, {0x1, 0xa}, @control={0x9, 0x6a98, 0x1}}, {0xa45, 0x101, 0x100, 0x20, @time={0x77359400}, {0x0, 0x8001}, {0x8100000, 0x5}, @note={0x2, 0x575, 0x9, 0x8, 0x9}}, {0x1, 0x7, 0xfff, 0x4000000, @tick=0x7fffffff, {0x9, 0x6}, {0x3, 0x9}, @note={0x4, 0x5, 0x5c59, 0x7, 0x3}}, {0x81, 0x80000000, 0x1, 0x100000000, @tick, {0x2, 0x8}, {0x0, 0x80000001}, @time=@tick=0x6}], 0x180) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'bond_slave_1\x00', 0x1000}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0xf000) ioctl$void(r2, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0xe0c0, 0x7) 2018/05/21 21:42:12 executing program 5: r0 = socket$inet(0x10, 0x9, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000000c0)={0x90, 0x3}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000100)='team0\x00') sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856808000f00083c14cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r0, r1, 0x7, 0x1, &(0x7f0000000140)="fde5eb1809e2b8d50b735dc481c6b8635a0839d92296d8b19c92399f30425316a68c2b50a7b2ccc7fec17fc195cf02f2dcc704776d36a033841a0766da39e6da3c2b81b239fbe9aafab21b1645f96cb4c72b070d5635fb5ed8ea19e333dd0c54c4a69e1d01e1fa64b010742b6cc3f891ba12d7a56c0a79e0c5c634c4e23e97cdeb02396f1a40bc8037d13a0aad2e29330d31c3688d567f59e2db63608ee5c5ce8c722f5039e5d031e125a342a1b8f15afaba3f0feb8cf2ad9a10d554ac3e6cb64f31e57087c697573728023d983824de340e15414371dc7153310813cf978b5a385ee5de2316e14f38f241e1", 0x200, 0x7fff, 0x1, 0x8, 0x3, 0x4, 0xffffffff}) 2018/05/21 21:42:12 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x0, 0x0, {0x0, 0x7530}, {0x77359400}, {0x0, 0x0, 0x0, 0x9}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "2a56ec1a9deb1448"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) getsockname(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f0000000200)=0x80) setsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000240)=0x81, 0x4) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d}, 0x10, &(0x7f000000eff0)={&(0x7f0000012f80)={0x2, 0xfffffffffffffffc, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}, 0x1}, 0x0) 2018/05/21 21:42:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x7}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000fffffff000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:13 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80184132, &(0x7f0000000040)) mq_timedsend(r0, &(0x7f0000000080)="fad9e5367b0496415719d8", 0xb, 0xcd1f, &(0x7f00000000c0)={0x77359400}) 2018/05/21 21:42:13 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0xd, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:13 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x9) 2018/05/21 21:42:13 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@ipv4={[0xfffffff0], [0xff, 0xff], @broadcast=0xffffffff}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/21 21:42:13 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TCFLSH(r0, 0x80047437, 0x706ffc) 2018/05/21 21:42:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000c84fb8)=@routing={0x0, 0x4, 0x4, 0x0, 0x0, [@local={0xfe, 0x80, [], 0xffffffffffffffff}, @remote={0xfe, 0x80, [], 0xffffffffffffffff}]}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x8, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x2ba, 0x0, 0xffff, 0xdf8, 0x8, 0xf6f, 0x7, 0x1000000, 0x198, 0xfffffffffffffffc, 0x2f, 0x8c, 0x0, 0xe6, 0x7]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x1, 0x8, 0x4, 0x7ff, 0x3, 0x80, 0x6, r1}, &(0x7f0000000180)=0x20) 2018/05/21 21:42:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000f0000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:13 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x7fffd) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r4, 0x3, 0x0, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r1, r3) 2018/05/21 21:42:13 executing program 6: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000100)=""/187, 0xbb}, {&(0x7f00000001c0)=""/45, 0x2d}], 0x3, &(0x7f0000000240)=""/49, 0x31, 0x100000001}, 0x2000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) readahead(r0, 0x7ff, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) rt_sigsuspend(&(0x7f0000000340)={0x80000000}, 0x8) connect$llc(r0, &(0x7f0000000400)={0x1a, 0x322, 0x7, 0x3, 0x401, 0x6}, 0x10) write$sndseq(r1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x81, 0x4}, {}, @control}], 0x30) rt_sigsuspend(&(0x7f00000003c0)={0x7}, 0x8) 2018/05/21 21:42:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)) open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x140) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010058, 0x0, 0xb9}]}) 2018/05/21 21:42:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) write(r3, &(0x7f00000003c0)="1b0000004a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) recvfrom$ipx(r3, &(0x7f0000000280)=""/152, 0x98, 0x0, &(0x7f0000000100)={0x4, 0x0, 0x0, "3d1cafe9b33a"}, 0x6f3000) r4 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r4}], 0x1, 0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/27, &(0x7f0000000080)=0x1b) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffc, 0x79, 0x5, 0xffffffffffff8958, 0x8, 0x3, 0x3, 0x270, 0x8b, 0x38, 0x3a7, 0x7f, 0x100, 0x20, 0x1, 0x3, 0x3, 0x1c5825f8}, [{0x6, 0x200, 0x80000000, 0x1, 0x3f, 0x1ff}, {0x0, 0x4, 0x1, 0x200, 0x7, 0x0, 0x10000, 0x82}], "29c8ac4b016ca6ec1021ef7fa219b3bdeec3f356c1a4ca815180b914e5eaad7bbf56e44c35407ab6f1664523d9cbbe1e96dcf6f85a47d2311ca2603dda10de421f3cdc9342", [[], [], [], [], []]}, 0x5bd) 2018/05/21 21:42:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x900000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:13 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2000a02a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:13 executing program 7: clock_gettime(0x1, &(0x7f0000000000)) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="c626262c8523bf012cf66f") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) migrate_pages(0x0, 0x40, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0xa9f) 2018/05/21 21:42:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000f000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xe5, "014df0512bfe890887020969a0ccd60a80a3981014ca7bfafe38a91fcee273e09f59e1e388d36755dcef014e90a49b0dfda745df9eb18c6a2c339ba80db53fd7ccfa2d2c99cfde52b01e849b150e06d5b7e945fc231daa4e9a49628529ff21e42057a159f113641c535c474f5b06ee4b99c0bbe802cd43c6d80b416e61db022c44f068509db5473b713829cbe04ec9ad766fcc56338e00a418ef5c2b7c279bb65a59f84bd5436487dc6b96b7e105d81c3a8ef2c99aa2b2d06cf8160d4738636916c6433a2739888180ce1f93cd44735a12e7d4560e7a0159af2c435c85d0c4ac5614b07d4b"}, &(0x7f0000000100)=0xed) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0xfffffffffffffffa}, &(0x7f0000000180)=0x8) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x7fffffffffffffff) 2018/05/21 21:42:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x0, 0x0, [0x3f, 0x7ff, 0x5d, 0x6]}) fchmod(r1, 0x8) 2018/05/21 21:42:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0xffffff7f00000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x900000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000f0ffffff00000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:14 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x4, 0x4000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000440)={0x80000001, 0x8, 0x600000000000000, 0xb4, r1}, 0x10) r2 = socket(0xa, 0x80006, 0x6e) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r3}], 0x1, 0x172) r4 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0xbbc1, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000200)={0x1, 0x8, 0xd9, &(0x7f0000000280)="86e2c9eaaf16266d256866769d1cfa0db83de7bd4076e183ec19ea3e2234219f21bd7ce213d00116b39664258e59f360ff77381e6b66a593cee3de52e0cabe4048e9e9ea44dd2ddb6f4ea7b67d284151b7e76d2c95a4d187f61962eb3f80c69ba2cc1f04be613f7194f84d8540a613c0b39bf791e4acc50cc6ebecd522cc152c43e54500a46be48dc8bce7a4199946b9ba7fbbed24adeafd69718b953b1f7ef9d47e8533271a5e2cb178ebf4b288b52783043d7d47f14500143eb2e2c56fcec229dbd8f10e69c65516f1bbbfe88ecc644478ebf753767df7f3"}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0xf5c, 0x4) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000}) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000180)=0xc) r7 = fcntl$dupfd(r2, 0x0, r3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r6, 0x80000, r7}) 2018/05/21 21:42:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x200000001, 0xfffffffffffffffe) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20100) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x9, 0x20000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) ptrace$getenv(0x4201, r3, 0x3, &(0x7f0000000200)) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)={0x0, 0x40, 0x0, &(0x7f0000000040)=0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f0000000140)=[@acquire={0x40046305}, @release={0x40046306}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000000200)}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='/dev/binder#\x00') 2018/05/21 21:42:14 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000700000000000000000000000000950000000000000005"], &(0x7f0000000080)='GPL\x00', 0x10000001, 0xb2, &(0x7f0000000200)=""/178}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) socketpair(0x5, 0x6, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f00000001c0)={r4, 0x20}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r0}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000040)={r1, r2}, 0x10) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000380)=""/142) 2018/05/21 21:42:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x100000000000000}, 0x10}, 0x1}, 0x0) [ 321.528533] binder: 20184:20192 got reply transaction with no transaction stack [ 321.536179] binder: 20184:20192 transaction failed 29201/-71, size 0-0 line 2763 [ 321.616445] binder: BINDER_SET_CONTEXT_MGR already set [ 321.654471] binder: 20184:20192 ioctl 40046207 0 returned -16 [ 321.665419] binder: 20184:20192 got reply transaction with no transaction stack [ 321.672987] binder: 20184:20192 transaction failed 29201/-71, size 0-0 line 2763 [ 321.695909] binder: undelivered TRANSACTION_ERROR: 29201 [ 321.701508] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/21 21:42:14 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x10040, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x802000005) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/21 21:42:14 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="af2f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/05/21 21:42:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x4}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000009202000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0xc0ffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff88, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xa00) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0)=0x2, 0x4) 2018/05/21 21:42:14 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0xfffffdef, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x9, &(0x7f00000001c0)="c19932c3598a6f0008002300de30a355bec59b8dd898036179f043645551575b137aad0d0c3d21a793721a7b6aaa33595aa9c2a551f15083fd45a11f158f75ecf01b1a608a6a631cccabc5") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x2}, [@ldst={0x7, 0x3f6, 0x0, 0x1d1}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x7f, 0x4) 2018/05/21 21:42:14 executing program 3: r0 = socket(0xa, 0x1, 0x6) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) 2018/05/21 21:42:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x900000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x762c) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000180)=0x4) write$cgroup_type(r0, &(0x7f00000012c0)='threaded\x00', 0x9) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/21 21:42:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000ffffff9e000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84800) write$vnet(r2, &(0x7f0000000180)={0x1, {&(0x7f00000000c0)=""/41, 0x29, &(0x7f0000000280)=""/245, 0x3, 0x3}}, 0x68) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x144) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30081000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd25, 0x25dfdbfd, {0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000400)=0x0) move_pages(r4, 0x2, &(0x7f0000000440)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000480)=[0x100, 0x5fd09ea6, 0x13, 0x2, 0x5a8f, 0x87a, 0x1e17, 0xffffffff7fffffff], &(0x7f00000004c0)=[0x0], 0x2) unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x200) 2018/05/21 21:42:14 executing program 0: unshare(0x2000400) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x20002) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x14}, 0x38, r1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r2, 0x0, 0x9, &(0x7f0000000080)=""/28, &(0x7f00000000c0)=0x1c) 2018/05/21 21:42:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x9}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:14 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:14 executing program 5: r0 = socket$inet6(0xa, 0xf, 0x3f) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x6, 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xd}, 0x1c) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="f67f986af9dc33a1a19f79f8bdd4546287209739ae649266f062bcd978b94585b9bf1100ed8bc3b5", 0x28}], 0x1, &(0x7f0000000100)}, 0x0) 2018/05/21 21:42:14 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x4000, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000140)={r3, 0x9}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000000000)) mq_open(&(0x7f0000000000)='/dev/ashmem\x00', 0x2, 0xc0, &(0x7f0000000080)={0x220, 0x10000, 0x3, 0x4, 0x4, 0x8001, 0xf001, 0x6}) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x4, 0x40) read(r1, &(0x7f0000000280)=""/100, 0x64) read(r0, &(0x7f0000000400)=""/100, 0x64) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0xc0000, 0x0) 2018/05/21 21:42:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x34000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000100000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) fchown(r1, r2, r3) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ppoll(&(0x7f00000004c0), 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x8) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)="8ad969bdc8d0403ffc9d", 0xa}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="66ba420066b8a6d966efc422f1aee966ba200066b8445566ef66baa000ed66b8d3008ee8b9800000c00f3235004000000f30f20f2c1a66baa100b80e000000ef6647f426460f01cb", 0x48}], 0x1, 0x0, &(0x7f0000000140), 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f00000003c0)=""/149, 0x95) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/21 21:42:15 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000007c0)={[{0x2f, 'cpu', 0x20}]}, 0x1) 2018/05/21 21:42:15 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00', 0x3) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x6, 0x4056, 0x8001, 0x8d1, 0x80000001, 0x200}}, 0x8) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:15 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xffffffff00000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 322.535924] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 322.544106] FAT-fs (loop6): Filesystem has been set read-only 2018/05/21 21:42:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000ffffff9e00000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 322.620707] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 322.666474] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 322.692281] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 322.702102] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 322.713319] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 2018/05/21 21:42:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x2000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0xfffffffffffffffb, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:16 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x806000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000000)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400001f86a302f9171a8e000000000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000"], 0x24}, 0x1}, 0x0) 2018/05/21 21:42:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0x3ff, 0x2200) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x2000) socket(0xd, 0x20000000802, 0x20000000000000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local, @in=@loopback}}, {{@in6=@dev}}}, &(0x7f00000001c0)=0xe8) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0x44) socket$inet(0x10, 0x0, 0xc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/05/21 21:42:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000007fffffff00000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:16 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x7f, "704125e10c19021360fd11bf179d60223251aca0477f9c7fbc62316dfe36887303d4cd315d8f8cc520f12ca0ad576e35aef7f0b0b71031a1f7b4825ed01071970c80523ba5fbc8622d91bf4fc68e9b7ac7737feab3af1a8ae86a4b3b907faac2c01f67299be3640f7b7b25f00ada507ba21451991eed3b77371ce16ba99c54"}, &(0x7f00000001c0)=0x87) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0x1}, &(0x7f0000000240)=0x8) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x6a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]}, 0x7a2) syz_open_dev$sndmidi(&(0x7f0000000940)='/dev/snd/midiC#D#\x00', 0x9, 0x840) 2018/05/21 21:42:16 executing program 7: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) r1 = socket(0x11, 0x4002, 0x81) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000480), 0x37, 0x0, 0x0, 0xfffffffffffffead) 2018/05/21 21:42:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x900}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:16 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x14000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x281, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x7fff, @empty, 0xfffffffffffff001}}, 0x481, 0x80, 0x65b, 0x4, 0xa0}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x7, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x81}}, 0x0, 0xe5f, 0x0, 0x400, 0x1c}, &(0x7f0000000280)=0x98) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r3}], 0x1, 0x9) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x200, 0x0) syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0x3a, 0x5, &(0x7f0000000640)=[{&(0x7f0000000380)="d74b5f7ba516f4b2bfc0a7bf82a86cf0ae8ddfee673b9bc2f1", 0x19, 0x1}, {&(0x7f00000003c0)="4484c2c613d77ea88190a5139cfa42cfaa5cbb7b576a4f37a3bc0641a49c4ecf9018ee1522d8e1c36b92417698045d3b948e2f240d7d9028737b3ca63af5d178803530be13376344da31f30682fd61fb3bcd44b20c0e5e54e335ee60e8c99d225bf5cb0caf272651bed1c7470a967caaf8be52e1b40bfd4a6eb46e406562a09e9f0b8e053353b42304735793eb40f6904be0e1d15b80078b9c67d19c4c953a4a755d69e7dc6e28930db0591ee3b420b33ee4c9f819ec26bd6ec43623e1e2269f5f43cf5a56e832657bf1a23603c3d9aa2eb92a64d5a3397da6485aaf9042f07f8a52b1", 0xe3, 0x4}, {&(0x7f00000004c0)="eea94b73b4c101a486f68cf0716d80df7b9f37a337ab0d47cc520b9ee285b5f8f37f3954952cd840b462fda56e1743d416561278ce988c6d9ed3a9fb36859fb86e6fb67044bc519c6a5f6c12b75fef0c285c11964fcd88c436ff506e643f6d3a617db3a950762c5f6e57f8d3f563ddf8320d05ba8543793ecb2d5a8cc6ba274fcd0919fc05eabdeead21504c082dcf39f5ab3365e075e33a7a6108f5cfb4822d42d2523ec7404dcd95fca01e1d6f887a8c2fc35c14", 0xb5, 0x4}, {&(0x7f0000000580)="fe47bc153eaffe762192a13d100fe55817c5e5314a6205f359c1af49ec07d520b177b6633b3eb494f10652f59babd5a4a94041952e20985705b4e1", 0x3b, 0xd0a}, {&(0x7f00000005c0)="205b6adef4cc5cacb783bc8bd29b371832b92884e311e73156f8121a8ce3a6a57ec29104f046c49526bd9e886d099caef54011e246d55a4a83826a41dbefaee5d1bc94c1977648ef918c4d37bb28009d59abc5b7a3be62d528e8cada1228ab12aeccd01b933fbbbd375215edb8aa0002", 0x70}], 0x2000, &(0x7f00000006c0)={[{@debug='debug', 0x2c}]}) 2018/05/21 21:42:16 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x80000000008912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0xe, 0x4, 0x4, 0xdc00, 0x0, 0xffffffffffffffff, 0x0, [0x8]}, 0x2c) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x6, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r3, 0x3}, 0x8) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000000c0)={0x4, 0x3}) 2018/05/21 21:42:16 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e23, @rand_addr=0x7f}}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x9, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 323.617652] kernel msg: ebtables bug: please report to author: Wrong len argument [ 323.648248] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/05/21 21:42:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000292000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:16 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x6, 0x9, 0x5a, 0xb8a, r3}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x0, 0x29, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) close(r2) close(r1) 2018/05/21 21:42:16 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x454, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x2, 0x70, 0x100, 0x4f3, 0x7, 0x70b4, 0x0, 0x8, 0x800, 0xc, 0x8, 0x9, 0x9, 0x7, 0x1f, 0x1, 0x1, 0x0, 0x400, 0x0, 0x7, 0x2, 0x100, 0x7209, 0x23a, 0x3ff, 0x6, 0x3, 0x101, 0x3f, 0x7fff, 0x4, 0x8, 0x9, 0x6, 0x6, 0x9, 0x63b, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x7}, 0x200, 0x6, 0xfffffffffffffffe, 0x7, 0x100000000, 0x1ff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{}, 'port1\x00'}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 2018/05/21 21:42:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x4000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:17 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8906, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000fffffffffffff000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:17 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000000c0)) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000280)=""/4096, 0x1000}, &(0x7f0000000040)}, 0x20) creat(&(0x7f0000000180)='./file0/file0\x00', 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/05/21 21:42:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x9000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:17 executing program 7: accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x40, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', r1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40001, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 2018/05/21 21:42:17 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") listen(r0, 0x9) r1 = socket$rds(0x15, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000000)={0x3, {"b54bd57bd5dcc3"}, 0x5cc7}, 0x10) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:17 executing program 6: unshare(0x400) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}, 0x10) 2018/05/21 21:42:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x400) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="df000000ffff000053140a05a5d8dd17920c518011a285057ed1b3f868f3fc3fcf52f2b773d62c421952752c4dd58bf786d85972710ac1c6a159759ba36e9e631e3d07e648700af57c8cdd20d3227efebd515bc6edd9ffe8abbfde671ed71ae1b03c76f0369c9060295f0c21d357661cfd02dcea7bb2e2713e28712e751bc4afbf088cd605198fa04e23a9730f71d31604153225f5af0fe52bf0c057f8002a3c2bd0f7645c998874ab260037d70d5e7049dac7e32aab7f0a00fd7d6e5ee51d741b75565d8f8324af99bdecf9dde55fc979fa67560cca699cd99544ba0afefe"], 0x103480) write(r0, &(0x7f0000411000)="bc", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/05/21 21:42:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000292000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:17 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = msgget$private(0x0, 0x40) r2 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/15) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000040)=[{r3}], 0x2000000000000253, 0x9) 2018/05/21 21:42:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c853cbf012cf66f") pwrite64(r0, &(0x7f0000000280)="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", 0x1000, 0x23) getsockopt$ARPT_SO_GET_INFO(r0, 0x6, 0x18, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000040)=0x44) 2018/05/21 21:42:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x400300}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:17 executing program 6: r0 = socket(0x11, 0x8080b, 0x0) clock_gettime(0x0, &(0x7f0000003000)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000000240)=@nl, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/68, 0x44}], 0x2}, 0xfa}, {{&(0x7f00000005c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000640)=""/205, 0xcd}, {&(0x7f0000000740)=""/150, 0x96}, {&(0x7f0000000800)=""/74, 0x4a}, {&(0x7f0000000880)=""/227, 0xe3}, {&(0x7f0000000980)=""/10, 0xa}, {&(0x7f00000009c0)=""/197, 0xc5}, {&(0x7f0000000ac0)=""/46, 0x2e}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/179, 0xb3}, {&(0x7f0000000c40)}], 0xa, &(0x7f0000000d40)=""/4096, 0x1000, 0x1}, 0x80000000}, {{&(0x7f0000001d40)=@ipx, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/6, 0x6}], 0x2, &(0x7f0000002e40)=""/230, 0xe6, 0x8}, 0x1000}], 0x3, 0x40, &(0x7f0000003040)={r1, r2+10000000}) ioctl(r3, 0x200040, &(0x7f0000000400)="c627262c8523bf052cf66f") socketpair$ax25(0x3, 0x3, 0xcf, &(0x7f0000000000)) r4 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write$fuse(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd2) ioctl$SG_SCSI_RESET(r4, 0x2276, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000040)=""/29, 0xfff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000100)={0xe4, 0x0, 0xeccb, "f32124e8c534b4fdca1eff12d8fb2b8db73a473381abc83017a020e54f752fe15dba663d88645205fdccfa5cb159c4ae545cfa20f91150389e80c3bd1020f2a7227c7e30a545b612d15d66590fad3190de5a3e3547f27ebe52e6d2e00813957fdf8cee03d347eec955b9593ebeb2583e5b3bc93483300558c850e34161ed18b74dc75bb4aae7d729e5f99333d4e032a1befb07e4bef27176a2d1b9c69b3d6ce9f645d671373e7eb9eab94e73f7324867c8d6bb11a7bca2b9fdab4e6219f5d4fdef3e03dc07b3b039d34e73d3273ccd6e769845837a8983095a3127a929137000635f3225"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2018/05/21 21:42:17 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xb00, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:17 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/32) rt_sigprocmask(0x1, &(0x7f00000000c0), 0x0, 0x8) poll(&(0x7f0000001080), 0x0, 0xffff) readv(r1, &(0x7f00000023c0)=[{&(0x7f0000001040)=""/15, 0xf}], 0x1) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000007c0)='q', 0x1}], 0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000100)={0x100000001, 0x1, 0x2, 0x1, 0xffffffffffffffff}, 0xc) 2018/05/21 21:42:17 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000040)={{0xffff0000, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, 0x3}) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$urandom(&(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x20000) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000001c0)=0x26) 2018/05/21 21:42:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000200000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x0, 0x0, 0x0, {0x1c}}, 0x14}, 0x1}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x1, 0x20, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) connect$ipx(r2, &(0x7f0000000080)={0x4, 0x8, 0x5, "a12e77da634b", 0xffffffffffffffff}, 0x10) open_by_handle_at(r1, &(0x7f0000000280)={0xfffffffffffffd65, 0x2, "d304712dce3f2cd901ea84567346843306cfa5451918cdd463795589f96a9d885361108a9957185d497280c97147245da8d96b82fcc7ca00020542b68d92523b89481cfecb2b40fdb148c9f6c7f8c5ced887198ef970bf91537e406bde058bc81fbe86ae83988c44303a4348192680a154bbf1245482e38e585d1c4e00000000000000000000000000e6bfe7bc75eb0ccb4ec0441276c0fcb671538d112f65f375de76df3006a0cbe930c8c1c387fa889d1c37f8d3f3d5cb5dbcc30ee317d7f2ef2c27b8c947d2eb75b0217cde3d4bd731487064bc1dd6a73eb5022feaad211d548156a6f1921a745f9167d00de520aa077403c4690c9e"}, 0x7ffff) 2018/05/21 21:42:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/8) socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140), 0x0, 0x9) 2018/05/21 21:42:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x400000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:18 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xffffdd86, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "dbd495", 0x44, 0x11, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @empty, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x7, 0x8) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x8, 0x40008) syz_emit_ethernet(0x190, &(0x7f0000000440)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [{[], {0x8100, 0x7, 0x2, 0x1}}], {@ipv4={0x800, {{0x16, 0x4, 0x7, 0x4, 0x17e, 0x66, 0x8, 0x6, 0x36, 0x0, @multicast1=0xe0000001, @rand_addr=0x3, {[@noop={0x1}, @generic={0x0, 0x3, "e3"}, @ra={0x94, 0x6, 0x7fc0000000}, @ssrr={0x89, 0x1b, 0x7ff, [@broadcast=0xffffffff, @rand_addr=0x4, @loopback=0x7f000001, @rand_addr=0x8001, @empty, @multicast1=0xe0000001]}, @generic={0xcd, 0xb, "62e820f30b5d3ab236"}, @end, @generic={0x44, 0x10, "e00c989059d34a04d7a533b8563f"}]}}, @tcp={{0x4e22, 0x4e24, r2, r3, 0x8, 0x0, 0x16, 0x2, 0x3, 0x0, 0xd5, {[@generic={0x2, 0x5, "91aed7"}, @generic={0x5, 0x12, "6d9bb951e486ac168f407e687b0cf060"}, @md5sig={0x13, 0x12, "780c56cb298a8923c25096241d773759"}, @md5sig={0x13, 0x12, "493c2fab0519754d3ca6d41d3c7826c3"}, @window={0x3, 0x3, 0x6}, @window={0x3, 0x3, 0x7}]}}, {"85d8832153c4d8dcab5d5ec84d2613e2dd80ec1f71932847a1eead63b9ca4aa334f74c27879ade93b055fcb8f31b741753af9fc6434b91714537863dde8642ba810c67317d5bbe2074c7b9dfa7f37f5aed2ce8886fd8b7de6a9b28994756959bb75b9a875de930fe2973ace723ee62ff47bd4a318d8af44892fbb9257ecf348d8aef151b68c5ddfa690899168ce218ec80b387debe11659d85ba9fbaa9fe53de96e8eafff0c846d7d5061f17659d8449ac91f1dd6e3d1b2d66617b770aa3b3198cd1aa5df8e98ca8936a5d35c7b5"}}}}}}, &(0x7f0000000240)={0x0, 0x2, [0x9bb, 0xdd9, 0x9e8, 0xb56]}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000080), 0x0, r4, 0x4}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r6, @ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x4044800}, 0x4010) 2018/05/21 21:42:18 executing program 5: personality(0x35375d2df5f70313) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) accept$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000240)=0x60) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000002100240028bd7000ffdbdf250200205281000000070000000200000008000200ac1414bb08000b000100010008000200000000000800ff14d9030079616d3000000000000000000000000008000100000000000022715a22be54791ad233374bac3ea680ce7a70701ffafed92b38979362432c7de87860972119ee769a7cf188b1bde4261973ff692753"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x20000001, 0x81030, r0, 0x0) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') 2018/05/21 21:42:18 executing program 6: prctl$setmm(0x8, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000ffb000/0x2000)=nil}) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) fchown(r0, r1, r2) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/130) getpeername$netrom(r0, &(0x7f00000001c0)=@full, &(0x7f0000000240)=0x48) 2018/05/21 21:42:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000fffff000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:18 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10040000000000b}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000004c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @in=@loopback=0x7f000001, 0x4e24, 0x4221, 0x4e22, 0x2, 0xa, 0x0, 0x20, 0x87, r1, r2}, {0x7, 0x1, 0x7, 0xf0, 0x8, 0x1000, 0x7ca8, 0x1}, {0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x6, 0x6e6bbb, 0x2, 0x1, 0xc72b98a62aa23e8a, 0x3}, {{@in=@multicast2=0xe0000002, 0x4d4, 0x2b}, 0x2, @in6=@loopback={0x0, 0x1}, 0x0, 0x4, 0x1, 0x1, 0xa8ab, 0x7ff}}, 0xe8) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000140)=0xffffffffffffffa9) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x40800, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) syz_emit_ethernet(0xfffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffdf55f3d034ab86dd6076605100383a00fe8000000000000000000000000000ffff020000000000000000000000000001040090780000000060702b6c00000600ff01000000000000ea4111340000001cfe80000000000000000000000000000033cc6533eb08a2e9879d378513e2e5877870ae8ac3e230"], 0x0) 2018/05/21 21:42:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000007080)=[{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000001780), 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="10000000000000000100000000000000"], 0x10}], 0x1, 0x0) r1 = socket(0x4, 0x8080f, 0x2) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r2 = shmget$private(0x0, 0x3000, 0x1801, &(0x7f0000ffd000/0x3000)=nil) setsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000000)=0x8001, 0x4) shmctl$IPC_INFO(r2, 0x3, &(0x7f00000000c0)=""/100) 2018/05/21 21:42:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0xffffff7f}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:18 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x200000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:18 executing program 0: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x80000) getpeername$unix(r2, &(0x7f0000000300), &(0x7f0000000380)=0x6e) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="d88837b02f8d33bcffd7058fa4817ed87276adcca4952d7288a3614731ad655827ab45068cb5caaec29831e6b7cd463a6d689df6dedf77bb6110350c94c2bd80", 0x40}, {&(0x7f0000000100)="db2383b0e461f3c8d5e9b1463afd6631714c8f810ed7d0f240ee5dd476592c792875adfd2ac122b6b1c620ddd933935eeb7f4a17a8e5a1f1d89135a5dbd92c32ede6ad6ec4b8358efcac87f88bdaab55a5461dc53d1acbba7326", 0x5a}, {&(0x7f0000000180)="3dd86c8ecb08dbfee3c0119e636a95ddfdbfc2a00636d55d1a2389d80878e128c626be561abd257fe684587710a568594c342e022d2a46ba7c33e7d086b547e2307eff452adae4106c1e353781aaff55d32b30a88c353165be4ca0e4074dce8ede271a4b51a3464077b2a6344761e2aa66e45e641a7809a85076f65c7d8fbe9d81dc61467b1ffa73d45a4a8a8de59da5f3ea8b2e7bea4ca6ce97822512866fb037e3c3c0caad8077368f19ab83b5d60609e1ddeb3347a68078ae3822cd17a03fd98c39f0798d4a5bac4ed59f3b09e424cd3b27050155dfa2a33d39f1ef13e0e1b4bf4c22575b3edc6b27250ccfdd", 0xee}], 0x3, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x101400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x41fc, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, &(0x7f0000b18000)={{0xffffff94}, {0xfdfdffff}}) 2018/05/21 21:42:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x800, 0x80000000, 0xcfb, 0x6, 0xad}, 0x63) r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:18 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000040)={"16fefc25185f13d9da5156e9378d2b2bf0fcb42afc0b52c8a621a5bf2b421a05ae6698024782ecd22fe70297401a7a73e39a68f67d340720bce48116d4377bbfa693ed2185c4b3917e5cabbf134364143ef1451ae6f4c238ce5a9cfd300b476eec1789e83aef5e274fe3650b54ca9097492a6242abf2013d2eb8eaef1a27e9d895c51d87db9d09b019481f31711e9fba734040ff24fd2dde1df796c983a1f6716d025b112d02edc569295a2bb7e9b14a5c962e39d86f3be7665249bf5b1f570b0d75cc0450b71c7300742c5b86a6db309e6758afbb38c7e28dbdcc3318f285a6e1791a4c5e9ca1277b903f0c68376838c275ad83d93f88cf94aaef288ca981ecbfd1abb050261e26c7f5da71f8e57e13d4ad22199c50b8e32116b1a025673931446649f0d0d0298f40cce435900a27f1c25505583c9b5072aab209565c19f726d14263b51d9116e5a0a803f2aafd7e1cae53f6a7ecd068e889cb83335af2d715693aa939355a0b15e86d20e048c17d8da67254686f7da9df33b714e26712ea045f020a0a362b4cef6917405ac7d1065374bd5f64de7038c00bb4cf7c1aa21cc92e202763ee86fd759c6728235377e9886d2628d9e1629078b47e45c3f195e31b53f6adbb1bf05cbc9bee3108d0c0bddcc5ac307603a395b25bea741c23cd7eb136be7fbd4c408174747e9b3a70341fec085cf125ef11b62ef826ed38f5f5e0fca21fab7538781111bdfcb28cb608b8c170473a63b78492a3d6cba9c53ad154180a44149924d071698ec25800d2df832dedb76b20f6659de271829e0d31ccaae1f6d9928b8f26a94e4a43fe346eccccd870edfe95dfca4bb5f4e8165e4dfa81951baa780f0700aa433adfb4bac0861dc7111d65a6458722b1378d2d4c2262c72bf43e759cea5b4fd9c7364e55fde286ce9fc7f9873e3e4c09d3ea2e15924290ace762dfe4299202b71cb673e3c07fb65bbb733a0e58b0bfcccf3864582e9be6d6a0f70f63c83f89df5b1a89998d812c2d46b63959ad1d2d8a7486dd4b2fba9952a2e2340b140d54affb7b1be53bc387f1f177bda4bb7a1f9f6b0a471edc67a68cef636e1e28ddd61f575351a522a7403d93d15883e4745f786307bc0eac0d13c5373d4c8a1bd3f792170327306c1602f27f62f3d0d1ecb2fe275bf571f3588564a60804c9bd978d1973b18e07459a046c56a35c6bca17f63df93a6b8addf0b88caa1c9e4fbcfdf012aacf590e44cb0e55433dc41460c0e3cb59eb7fda22fab8622e5b0d35766e17637e1bc2bd564a548981f997b2383bcdf98bd18caa6ff4085710037c16195524ecb1d7dcd812105f3fffde0accb5927a8b82a0e9cdd697941f9665ac6f6963c6a73af019ad19ac288c48f55f7ee0721fbc9670fcf1ac78868b2f50c07084f90d97a2b5e0a51c350e0d100146127c4cce5f63cbf83687578db6"}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x1) 2018/05/21 21:42:18 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x40, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000280)={0x101, 0x80000001, 0x401}, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)="560d9aba0a9f4030d6c5f2b0bca36ebadf450761bd67047cd47bd550ac4e6283bd91c2034c0f91bfae70466643f688dbc19a306fc8a357c3e900", 0x3a) write$rdma_cm(r1, &(0x7f0000002c40)=ANY=[@ANYBLOB="140000008800e6f9", @ANYRES32=0xffffffff, @ANYBLOB="000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) getgroups(0x9, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x3, r3, r4, 0x8, 0x2004011) 2018/05/21 21:42:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000001000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) r2 = add_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="1bf3746f131fdad9e79672fbc4b0bd78998ac28ca9a242bc4a7cb5cc530b7ff3719c71e53549d5fb881dd8c0bd8c0293044be04071ba0dd3c5f332897b1e915ebd3c9f2edaf628053b5f5b7bc7734c3705374e48f3969a510584eb6d55460bec2b7ca3aa542d689cac0c5099af450fefffb9a6226847de59e030f068ebfbbee036df7288fccace2667e6dfd238481098daf33d87453b50e2d2e79ee2d5691a49146d27e1ee79825ee02c7aa7cd7f31cce94db12ceb41a2a4bd16dc541e49d7793a0c81cfad9ac236b2359d3838ee7cca87059e0a4343b1147b858db0990961f16034ad56fece8dbcd3a58f6eb487da4a539516ff6f39009e", 0xf8, 0xfffffffffffffffd) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000000c0)={0xffff, 0x3, 0x3, 0x38}, 0x10) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000000100)=0x1) keyctl$describe(0x6, r2, &(0x7f0000000380)=""/4096, 0x1000) 2018/05/21 21:42:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x1000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 5: fanotify_init(0x0, 0x40000) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x42040, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x20400, 0x0) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x8, 0x32, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0x6) fadvise64(r2, 0x0, 0x7fff, 0x3) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x3, 0x0, {0xa, 0x2, 0x3, @remote={0xfe, 0x80}, 0x4}}}, 0x32) r6 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000a1f000/0x1000)=nil) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000180)=""/101) shmctl$IPC_RMID(r6, 0x0) dup2(r5, r2) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/165) 2018/05/21 21:42:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x6000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:19 executing program 7: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x5, &(0x7f0000001300)=[{&(0x7f0000000100)="4f80b8558b9d9d16423a06c29334408c74734030fa67950f8cce69ead97267b4502eb186537d8b1f4afdebc739b0ff2040105360267dc29666a61344", 0x3c, 0x7}, {&(0x7f0000000140)="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", 0x1000, 0x7fffffff}, {&(0x7f0000001140)="4da9463634038981bfda72a1c5e18b13785df4bf60d8d9795a8babdec7ce642db1f7d15f13e884b43c4fba759d7c1fb3605699aa251698b6f597267158d258662392b127d86ff4211225ce08304c57b1177bbe34d7ffecda375e59576cd680e25f714f87d87a3083", 0x68, 0x6}, {&(0x7f00000011c0)="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", 0xfd, 0x5}, {&(0x7f00000012c0), 0x0, 0xff}], 0xa0a021, &(0x7f0000001380)={[{@errors_continue='errors=continue', 0x2c}, {@nointegrity='nointegrity', 0x2c}, {@umask={'umask', 0x3d, [0x33, 0x3f, 0x36, 0x32, 0x3f, 0x32, 0x3d, 0x32]}, 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@resize_size={'resize', 0x3d, [0x79, 0x37, 0x35, 0x37, 0x36, 0x38, 0x0, 0x0]}, 0x2c}]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2018/05/21 21:42:19 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x41, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9af1, 0x4200) acct(&(0x7f00000000c0)='./file0\x00') bind(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x2, 0x0, 0x4}}, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TCFLSH(r0, 0x80047456, 0x707000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 2018/05/21 21:42:19 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x48880) ioctl$TIOCEXCL(r1, 0x540c) socket$alg(0x26, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0x6, 0x80000000}, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a), 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x1, 0xe2f}, 0x2) 2018/05/21 21:42:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000292000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x87b) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000b42d87402e5286dd6006f52600583a00fe80000000000000000000000000740f7edb0000000000000000000000000001020090780000003f600a07fc0ae32900fe8000000000000000000000000000ffff000000000000000002ffffac140000a82f7ae1cd16d2e29ec370b17de075025dd0d40c29be4658699f255d7b12d93f6fe51653524ba53f"], &(0x7f00000016c0)) 2018/05/21 21:42:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x300, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000066d66ad7a6e1261c2228aaaaaaaaaa000806000108000604bb19649fda7e08f43cfd3936565391c6d16759696626b3783d1c3aaa3882ee8d780994129b8657f1b4e3def737ca931687d786c1a42f5340f3741922265cf7f0582ab22e3ca114dfd11aef954d2d76b9947bbf04e7b4582feca484e6dc40"], &(0x7f0000000100)) 2018/05/21 21:42:19 executing program 3: r0 = socket(0xa, 0x80000006, 0x140) getsockname$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x12}, 0x56, r1}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000040)=0x6000) poll(&(0x7f00000001c0)=[{r2, 0x1}], 0x2276, 0x9) 2018/05/21 21:42:19 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b8d208c17b92bdda7e804a0e096"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x404401) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000004d80)={@dev, @remote, 0x0}, &(0x7f0000004dc0)=0xc) bind$bt_hci(r3, &(0x7f0000004e00)={0x1f, r4}, 0xc) 2018/05/21 21:42:19 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r3 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) setresuid(r2, r3, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000480)=""/19, 0x13}, {&(0x7f0000000600)=""/188, 0xbc}], 0x4, 0x0, 0x0, 0x2}, 0x8}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000740)=""/166, 0xa6}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000000880)=""/112, 0x70}, {&(0x7f0000000900)=""/240, 0xf0}, {&(0x7f0000000a00)=""/215, 0xd7}], 0x6, &(0x7f0000000b80)=""/196, 0xc4, 0x3f}, 0x6}], 0x2, 0x20, &(0x7f0000000d00)={0x77359400}) bind$bt_rfcomm(r6, &(0x7f0000000d40)={0x1f, {0x3, 0x3, 0xffff, 0x1, 0x6, 0x4ce}, 0x8}, 0xa) sendmsg$nl_route(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000014000100000000000000000002000000", @ANYRES32=r1, @ANYBLOB="08000200ac1414aa0800080085af9029"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004000) 2018/05/21 21:42:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000001e00)='/dev/vcsa#\x00', 0x5, 0x400102) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000001e40)) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a98f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c7ff03ff0000000000710e13"], 0x79) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000002000)) 2018/05/21 21:42:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000002000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x4788, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:19 executing program 3: r0 = socket(0xa, 0x1, 0x800) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0xdd, 0x2, 0x100000001, 0x40, "7fa9507d9108323ecec297c888ec196e1b46bfc0df0f79ab37f09b3fb33f088fdd32923a0aa13bad69d91e83", 0x9}, 0x7, [0x6, 0x100000001, 0x133e54b7, 0x9, 0x1, 0x8, 0x28, 0x7, 0x7, 0x0, 0x400, 0x5, 0x5, 0x4, 0xfffffffffffffffd, 0x9, 0x4, 0x7fffffff, 0xff, 0x0, 0x8000, 0x200, 0x3, 0x4, 0x80000001, 0xd2a3, 0x9, 0x101, 0x8000, 0x0, 0xffffffff, 0x6, 0x3720, 0x1, 0x3ff, 0x7, 0x100, 0xa, 0x18fbdddd, 0x5, 0x10001, 0x1ff, 0x8, 0xfffffffffffffffc, 0x7, 0x8, 0x1, 0x5, 0x42, 0x0, 0x800, 0xa6, 0x67, 0x7f, 0x7, 0x3f, 0x8, 0x9, 0x100000001, 0x2155, 0x5, 0xfffffffffffffffb, 0x1, 0xe8c, 0x200, 0xe61, 0x0, 0x2, 0x6000000, 0x3ff, 0x7, 0x8, 0xd765, 0x1000, 0x20, 0x100, 0x9, 0x40, 0x101, 0x9f28, 0x1f, 0x944, 0x1, 0x2, 0x1, 0x1, 0x6, 0x9, 0x3, 0x3, 0x2, 0x2, 0x7fff, 0x100000000000000, 0x10001, 0x400, 0x8000, 0x5, 0x2, 0x980, 0xffffffffffff7fff, 0x800, 0x7, 0x1, 0x5, 0x7, 0x0, 0x200, 0x2, 0x9, 0x42, 0x7f, 0xfffffffffffffffd, 0x5, 0x1000, 0x0, 0x4, 0x5fd, 0x7, 0x3f, 0x48, 0x6, 0x0, 0x5, 0x9, 0x1, 0xffffffffffff8654, 0x1]}) r2 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) 2018/05/21 21:42:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x40030000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 0: mmap(&(0x7f0000ad5000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x0, 0x5, 0x100000000, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="f54fff03000083ad4120fdcbafcda7c15f0400000000000000000000000000000000"], &(0x7f0000000080)=0x23c) 2018/05/21 21:42:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000ffffff9e000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x200000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x800e0000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) sendmsg$rds(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e24}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/130, 0x82}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000001280)=""/236, 0xec}, {&(0x7f0000000180)=""/32, 0x20}], 0x5, &(0x7f0000001440)=ANY=[@ANYBLOB="ac528844000000001401000017000000", @ANYPTR=&(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='f\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001400)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="0200000000000000"], 0x30, 0x4000}, 0x20000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001580)='/dev/rfkill\x00', 0x8100, 0x0) mkdirat(r1, &(0x7f00000015c0)='./file0\x00', 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000014c0)={0x9, {{0xa, 0x4e20, 0x800, @loopback={0x0, 0x1}, 0x7ff}}}, 0x88) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) 2018/05/21 21:42:19 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000480)={r0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000a00)=0xffffffffffffffd6) sendmsg$nl_generic(r1, &(0x7f0000000980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[@ANYBLOB="c00100003a0000042dbd7000fbdbdf250100000040a30177051801720008001a00", @ANYRES32=r2, @ANYBLOB="04006a00080000", @ANYRES32=r3, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x4c0d1}, 0x4010) r4 = syz_open_dev$amidi(&(0x7f0000000500)='/dev/amidi#\x00', 0x100001006, 0x200000) getsockname$inet6(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x8) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="70955163b38cee3bbd4479df45fa674888a79ef9eef6f4332348be1fc1546e06"}, {&(0x7f0000000200)="6aa1e61315ec92ccd74545175e587a300c0adff943b3040907f19fc8cf78b8fedbb1392d92ccdbd1315e32da97f50b1e35635357a7adeacf03bbecac537e943a3ad4d9017333a930254a3bb72207ffee221ecf583a49e5152f45de1821d3e609448f2767aa4c7cce046ba1a371b79d5f9e2f3537394282363995a3b0081d00908222663b0c3ece8c5ccadfe36a7b7d0b1728410fdbb987b262c739cd172c88243efa2927a1318a6982106c227792d16b6631c70d1726d9a932a995bcd577ae59604f4f35e7e8119054d0a6446e1815bd4b25469501134e353c51c1f9ae678e7c"}], 0x1c2) r5 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f00000003c0)=""/157) write(r4, &(0x7f0000000340)="73a8694bde5d0478c5fa5f413cc5992d0121d7ab63b31bbbb0ddcacb9466dfb6dea9465005d52ba936fa48fcfe196260197b23ce1f62ca7028fe238a1c2829d75369eebf73849858bbd2052696", 0x4d) r6 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x800, 0x400000) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f00000001c0)=0x5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 2018/05/21 21:42:19 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={"7465616d300000163694d900", 0x0}) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x30, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x4, 0x2b, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @fd}]}]}]}, 0x30}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 6: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018ff010000000000001e713ad57e9d3f00000000004d970d3780246c606345d35a0000000000000000000000000000"], 0x1c}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x88640000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000010001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x900}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) r3 = fcntl$getown(r0, 0x9) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000200)=0x8, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101000, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000001c0)={r4, r1, 0x200}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x2) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x200, 0x9, 0x80000000, 0x20000000000000, 0xff, 0x9e4, 0x5, 0x3, 0x6194, 0x3, 0x1}, 0xb) 2018/05/21 21:42:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8010001}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=@gettaction={0x1d0, 0x32, 0x829, 0x70bd2a, 0x25dfdbfe, {0x0, 0x3, 0xf2}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x5, 0x1}}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x9, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x74}}, {0x14, 0x1, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x14, 0x10, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4}, @action_gd=@TCA_ACT_TAB={0xac, 0x1, [{0x10, 0x1d, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffffd}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x18, 0x1c, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xe, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x18, 0x1f, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}, {0x14, 0x12, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x14, 0x2, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x5, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1a, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x16, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2}]}, 0x1d0}, 0x1}, 0x4) 2018/05/21 21:42:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd332, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) syz_fuseblk_mount(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./0-/e0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/21 21:42:19 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, r1}, 0x14) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000880)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000006c0)}, &(0x7f0000000740)="7f0000800000002000001793c6b63f1c3f1854023d858a2e8c56907eb1c1344399", &(0x7f0000000500)=""/239, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) 2018/05/21 21:42:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x88a8ffff, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:19 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x84) mount(&(0x7f0000000180)='/\x00', &(0x7f00000001c0)='/', &(0x7f00000004c0)="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", 0x1004, 0x0) 2018/05/21 21:42:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000020001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 327.143065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 2018/05/21 21:42:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000f0ffff000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xb, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 327.215097] sd 0:0:1:0: [sg0] tag#918 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 327.223822] sd 0:0:1:0: [sg0] tag#918 CDB: Variable length, sa=0x0 [ 327.230209] sd 0:0:1:0: [sg0] tag#918 CDB[00]: 7f 00 00 80 00 00 00 20 00 00 17 93 c6 b6 3f 1c [ 327.239027] sd 0:0:1:0: [sg0] tag#918 CDB[10]: 3f 18 54 02 3d 85 8a 2e 8c 56 90 7e b1 c1 34 43 [ 327.248362] sd 0:0:1:0: [sg0] tag#918 CDB[20]: 99 2018/05/21 21:42:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000000)=@hopopts={0x1, 0x8, [], [@calipso={0x7, 0x18, {0x15, 0x4, 0x1ff, 0xa0, [0x1, 0xd547]}}, @jumbo={0xc2, 0x4, 0x420d}, @ra={0x5, 0x2, 0x5}, @pad1={0x0, 0x1}, @ra={0x5, 0x2, 0x200}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x16}}}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}]}, 0x50) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6c, 0x10000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000000c0)={0x1, 0xfff, 0x5, 0xee, 0x5, 0x4}) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000ebff000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="2b97266124082856"], 0x0, 0x0, &(0x7f0000000300)}) 2018/05/21 21:42:19 executing program 5: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x80) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="6596ffe11be56f2600000200020000100300"], &(0x7f00000001c0)=0x12) openat$cgroup_ro(r1, &(0x7f00000000c0)="4070752e73744eb06a", 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480)=0x0) setresgid(r3, r4, r5) 2018/05/21 21:42:20 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') close(r0) [ 327.426604] binder: 20685:20686 BC_ACQUIRE_DONE u0000000000000000 no match [ 327.470488] binder: 20685:20696 BC_ACQUIRE_DONE u0000000000000000 no match 2018/05/21 21:42:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffff7f00000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:20 executing program 3: mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:20 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x100000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:20 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x4000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r1, 0x7, 0x80000001}, &(0x7f0000000400)=0xc) timer_create(0x7, &(0x7f0000000640)={0x0, 0x24, 0x7, @thr={&(0x7f0000000440)="58f297dfc6574aa1659b38628464ea9ddf851e189a6e765ecc1aa4e59d206eb28a9df7020a4cdc5bb5ee893fc1fa733aa15ed652adc8e0791b239a07358a8d4dff5673c1ebc15cb810c9c10469f49d502882561a7d6a3d2ce92075710cbdc124f25625a28a61df8b8787199e37774eda8505bebddaa9c6ebfd5d24cff5061862d488bfeb61e5f34e32f00e42816baeaf1db35d582e5bbc2115da02d2d36664f32b1f515892a18e320d7d5b4fabf5fab0307d41820c6d84d2146a64b31128b0d5c5d715348ff8a599c83fffccc1", &(0x7f0000000600)="0d7afb9420ea"}}, &(0x7f0000000680)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'mcryptd(crc32-generic)\x00'}, 0x58) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xc000, 0x0) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000002c0)=""/241) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) sendmmsg$alg(r4, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="3280", 0x2}, {&(0x7f0000000540)="817226d0c77d89f7d8f9c7b615021292d52063f35f45d9cf378eed90b0cd4eed89970baf1c5bb5e541aad3ec1d3050027e77bac6a5a79168f1d9f1baee839baa860e9bed2265089f700fe6ca5ee090b8511f8866be31a4429ce0682de548d61d8d36296bb3ee0d886294efba18aa85c960623bdfbbb0e6700329c4b713ec2be380b6e55a593e2a9749cd6448010a461108b4c16f306f42a9abb0b936c9d0d7691d805b7ccc9c6105f259fe389dc88af2ddc5397a4f", 0xb5}], 0x2, &(0x7f00000006c0)}, {0x0, 0x0, &(0x7f0000001bc0), 0x0, 0x0, 0x0, 0x400c0}], 0x2, 0x0) 2018/05/21 21:42:20 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000007ca381a08051080045000024007b000000009078ffffffffdfffe9010000000004019078000e318400d1fb38"], &(0x7f0000000000)) 2018/05/21 21:42:20 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x20, 0x180) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x9, 0x10, 0x3, 0xfffffffffffffffc}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) getsockopt$bt_hci(r0, 0x0, 0x62, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x125) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000180)=0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x5, 0x6, 0xea, 0x5, r2}, 0x10) 2018/05/21 21:42:20 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x1ff}, 0xffffffffffffff97) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x400000002}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000000)=0x68) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000003740)}}], 0x2, 0x0) 2018/05/21 21:42:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000fffffff0000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:20 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x2000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x4000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:20 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'syz_tun\x00', 0x42}) r2 = getpid() sched_getparam(r2, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000f0000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000000000000000f0000000000000000000000000000000000000000000040008df6455f0feedf628c798e7635394a36d4be1b6980146cd1014b6f5cac7bde84988c678fcf89698d5a84dd1e25d4232ffccc3decce8ee434c512fb5bbb200e0e05a7bd4413bf08c344916990ffd4eeb5d11e42effa04ce3f2976456b422327292f59da80d6fd0118165abde3dcea5e5ea03f524a90ae024cf5ffde8505b13321bcfae82281b98797931e1bf377f60dd8fad56980be0f5dd39227b143f8ffa6c8d9bef1e8091571be2959c14b8f40a73cdd33c4a97a048af0070de699afa4ee"]}) 2018/05/21 21:42:20 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000080)={0x3, 0x6}) 2018/05/21 21:42:20 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x80, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000015c0)={&(0x7f0000000200)=@in={0x2, 0x4e21, @rand_addr=0x8}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000240)="ff9f00ea9900a50dc274d451b38cd630b113023db2ef5d080f6323e802514eb9d9410c0a83fd5c", 0x27}, {&(0x7f00000002c0)="5a42502c037b967257304f13778594da185302c19ce934e3cba3c88adb876652761ea4b393321922c5d98eaf9e90311703ab619183cdcc046d6bbacf44d5b188e79e129165c9f0743e0e4448e64b2efeb30ddb511e55aa2d5be9", 0x5a}, {&(0x7f0000000340)="6c56cd30e91d53", 0x7}, {&(0x7f0000000380)="696a9e58cc20932eaa775cc76b596dd2ff13b0b02e4e9d912226ed1561cab259e770181408812e8c796f2eb60f9e5008c623b9c405569a36c74c6068de5f0e81", 0x40}, {&(0x7f00000004c0)="8d53ac765a42d9be0dd21a7804b59713686b837b60d9509c09277bfd1e9c963867d14174e0bd9d2b74799c99a192f91a63a5808d9103243df83a72112c7839acd1eb7fb38d96b92aa7e5cbb5dd2ecdc755b17a05b0d6880f91d1b294602e684a43e7a1472b2d82bba280f56afbb713187dc5d2b20d825cd7fa52361ebf3da23d18db2724cd482a73bb8707be407200e4deed85e08216c369c33ae3a8cef5b4dcc2f541401e09e5156f7970dbbd5cfa7ff0a2a341cf8eb456b72e16c978272add6e1aaf40442159d54e157adb06e582e64ad2a2ed00ab35db3d2445fb3a9ec3a8c3f5ab0f78a88ce0ce390e01bcfd2278d8c02d2d937b1ad28cc7303f36371f2d6fe141fd710e5b0f229f38db19572785f82e95048028f71025020465bf1698c48fc7064709be121d9bc9de6e848e5a5e1c5adb754fdc54a496d6bbb1c315bb9355c72be378ba9a4f0f13ddae241e0d338935da7fb0e58813c2b668c9df459c8bdb79890e71d9537ca7ddd40ce90ccb27fe826d007baaf814fc60a37a54288a94a8a4b85ec46e0ea95c4a15a25f8c64a2dd18c5c0257355ede88fd9bb4a17a2b1f7e12b38d0e01fd3cde622e6fa1cae8e1ece00c43d7b993f70b1ca9cde38f36dd720f1b6b955238f6f0b31d866615b0ea811e23a1ccc88ac4c6cb92e6e38ffa5ab2360518b90dd4ddee986d67f086bc8162fb07b534e5a14c86c4ba06686ed96b6e7047514dfa9188599a3825d8be14c8859894869c8db8bf83ff2f11b83c1c5ddc44f28322ba053d8915b7237bf2a4874bd16a4d92ce40033fc9390c86cff737224dc0901c94b825aa5740cba8a3875585a1dc5194006fab7ed73ec2f1fbe9b8635ac35c189a495e5dd2f6c7e765804f65ef5eae8c2765da423dbf3a8804433f83ff74dbd18d56d8e99f9450d4d42ee3a28314a62e8ac07e4ce5c411b9938368d5ccb5357df9dfdd2b445b6ea18def76271e7dc0f58f0b0a5807b83146266f276bf162bf2c0373cc0651bc554f1517133a9d3fe39162c1de2a529f016099f74e9d036af82473f4333532afaa06e1cde923104e3684ffaa187c19254cb34e52dbd576fcf843864c98e394709fd6105de385a29d404c83661479c631ca988695066389ace6ac39d29a1731bf8d79d690b9880b24fd46806de781d8d9611fa67ed3e20cc8e4d650db23a42fe508deae4d733a05170851b9bd84a8be5aa43d9b7a8579a578fd3744f2899f0c98c4357a5b6c91b392d5db99aca97ea42ee82173be7cbfda5ffa8fbe011268291608203de618dd4b4462a12bc6b43494bbc5bc9e198b5650caa04fc37bb1ac17d805f28ccc26c68dc7b39dff260b43a7d24fb86a4b971ec8059b663d5978e7a8c648fe08a6475e3c091d5ebd5349c63e070eedf86f915eb08976d47bf8967f747897d7bab7c8caf915c22d83427d30d0f7511432013bfbe69d4c38823c788aaa88c707ac203fcbd1cad4a1e77d47b58d62542f0cedcfe2910e22a2758a56c7874ca7e059712624872b69bf26fea965aa18a30d642142ef8d13de0b1b5e5c7fef40c9e7dc27d1def9c20dda87ad61e86e265d77b809bbf3815654f2e342071ed0e423625264001e1e3c057af0048688ce1e410041c837a19446c58fd0c725bf35d79aead60b0a5e2a27e2b8dfb130eba1359cc817651856addb51076941711b8560547933e3af2d32a26ea0af7efa98dadada01dc453f7199d9d04dd74d83de3a7fb9b548a9b1767d6691b2cc079ba6a6d35e4d41383a46c317ea9ab5863cd95a9edbe31cdc02247356a80194ea358c4386322b6b139d95803e93bc0d606db19c3f98ef03b8285a69b782db338c847032dbceed76d38c312e90f6d815a383a971e2b1793620186d2284af957443a4a96698ad31d7a81e298f8f5fdda35a33ec05542f84db4d54533dc3a8dda533da75953c04183ab80d58cbe20584172090f6690e0c6dd59b8f5e80d1a2e868f7bbcd409b8cb9f758d789cb04d84f5d9a1bb8385b882790fb4032c6919d45fdc8590e98a6e74169a9ed17270f0e4393f36550c0ba043b159aaf1d7da62d1ab4edfa2f66299defe3c95d44962fe9a3a3391df721af00446d48e6f3146fa579fa80cc37fd22a13d73b5699bd667f64fc3de7fc4bcaef38c335a15758b35b9066179cad185204b6a0c982252ef23a67b8d46965d544978cee781ea1b5d43cc82d208a41583dbf8032a9ad6f06ff51db024ac743d468bc9c783ce21c83a3befa42b5f69c1b070c0a9d8d78ed8e6a9591b8e0ac32921fe6067f9a063074f41bce320209b04d36678519617494af089fc2b0a2dbe74fe5c33a0487a73ef23a093fd016ed61e68cd2d195b958e206ca3741862bfcf3319e87be62b1d7d6eb524b3ff4df70fc5c0db68fc58e3eadd56a49ca8a44a38384f629eb3793b78e6d924e985f0f5ebd3871e21cc34c18e2073c2a9105ccc0ccb13999be053e3d76b70ab9ae9b829b1ec1572bf521c94ea7b39d9ef86411040020f980d77387e1383b3c920c600f4ca10fa49771ae14ba0c350ec3d2257d2954031e9998f5dabb564f54dd455fa77ef71383e5b550416f373e53d91a3d065e6ee854d9130bcec114456f1b7e9c7c0431b0094c91b0fbe04f4d024d6a52a6838c4508c63ed75eafbf23f8eaaee05c39716af5419cb7b8745f335d2fdca439de227447c457c19ce61b30283552fa79e9df140bd49ba73d4aba2801a88a990851847f11a4663396402a0a50c38e86c175925cbc72a538e39470cee0502575971d30519f0603449bd472890ff8241ec7ebfcd74537ad96b869444c8eeb900a681ec54d1938bf757c4200ef216bb021808895d66904383492b6d926048eaf873d3d1ea379d9a405d6cc7b10cc72fed5e9a2ed8b8e6e9672125853a92c21cb4c966558acb0e748ca580691e697df6f2004201fb79dfd98d48aae05b84eef1778f187f11204872b89deb0a17d39aa78c24ac9dd401268b04e62677e7bc5d317bc83794ffca0410fc652533803a993b381ef549cdf4abf66075a83deb25d60a3834ac20fb502812f14d659293370265dfd2f7a376033c7f6016e0bed1a8204389dc2bcbd47d1a84dd78a59ce5de6fbeb4090a46d8c8c1b41f3ab84ce949fe27c6f33f408b143c2f13f3f140864eaae83287e486b66b9251f64b830837a29d1a9c6f9ae3ae29a7f3b343ef75c7f55cdbba6f8ca055120eacd79cd5e48cb2762f2db1d74ba345d2867ea0c68a12c7144838ef8399a2c5a099f334483a2e65a97fc42786d27e4b47aa52a2aa0c6e5f8c480daab539eca8fccab94e23a0dce1129e53be1d1d159505c02d61201661072fc8b99130f48483df9a8f4d886643f1c320e8ac74ae9d7c1eadb372f9aa3bb0dd23327082589f49311ef24815e8847c67bb831aa4457ba79e2b440c3b0d3328fa2bf4a0141d5929bb8d271840d987d0c8a63645b9d638b3946d2c4c283515c3600a0b5a1f36dc793625949b7d9a7d0ab514e91c41dea7552caf29fa26ba7c77f4ec3d9a8a45ffdf2df7aaab39e486694c753bc06a1bcb22a10e6bb4bd460acb07bcc22b0d9c346b63627787ff81f5d27e067c4f87d4916f5861e64b9f769998fb6e9b451afd076a603604b7e7c37827d97ba1aac288b39335e4e3a07b60db1de7fb5c42d75446c1b62115e946eed54d088cfe9f970a1b7034f4227d7e32a2e3ac24b66c376a73b5e8991948dec286a9f2284c8d632b3c222e2fe7ec1549731b21a07f82cb5d67845585cee908344cfdcd81eca8d61d239dcdcdc472a12452027359cbd51cafbf5b711b73feec8692122a61bb1d2f253d919c641b022268bd228854dad2d39de76f3ea95342c41fe16304dbc242ef1f00e08a329ab9cf0dc50645ed33de560fd3435b9d14c23811d052722d10d9cb75a617f22f45004ddd2b88cf2c482363d01f07a211255c638eee2b0e9198edf6e2095ee030db1d24d5606591321f8696509d6313779cae9888c097c0b251ca85960143898429f5f87e1213100bf3963178f445e52c2066b8b3137828745af726857dfec57974f55f0ee43228c2fc7b3fec1c1a2d1c90f861fae52912c9e68da7eaa0563c5739dfd2f1999af22b07c01705e0ecbc2154302643af1c8ae5d806554998bf3eb83868e56683c945cb3c91e2b2b61068771be8237e156490c717d8f23234c51b9e8c94054d8dc1dad402ec01a3b91d3c2bb1a368665a805370f15f817109f60cf22c5cfcffc0be86475c549b7e68420f7c8aa0a2438a3cc1d8f7e823d1b7617e9f995fdf6b3ada8e76dd24e714af51a5193785d9c5ade43ef561f1f99c83b374de6d4d8189524e3519eba824c35b4f8484cc58b791e0157a7a5e61554db5ca024d71c35904f0b573fe5cec1075753f3b242f63ea8ed76e984bcc5da20caba55450e0edbcb37e1b34faaf68836ae0e1514cf1648744d16248a502744fc14b747c0358307efb93d087be0ef18abf45108c310f11934b19631693c5da58daa926c19fd1dfa101519717e728bf5aac0b4ed044917f57cab38c56345ac39bfe32fb148af48a2ad661b18957234f4365e81d5e34e76b568bf77fea176166174dc5e73d2407d6eceb717c20d2f3ccace9056f7bcbdb248149fd9e4072e02261bf1c260fc3ff2bd4f445fd968dae0487d33d288ce29e85d6617d653c3983fc5a24b63bc5b02b59ee96f8263919d8459fd0fbc25cd821216d72ec6729f75cdac725a3d5721f3e8b668ca835f2ae58b47138810167271fa9d5396762d284c81861b69d775e70246d310617968ad07f303dc1045dc679ad547c9ade7cbccdd8964a9cb9d1123c6a2649e7aa7294682ba8d4ed246eec18a1f0b93f835492d97894979bf2ce94b637079fb56e397f1a2a07534d209e42f2068a82b4798a1b72ee5f34d89ad0c84549f07e3bfcec4f42bf8aafb8085007a58356750fff848b7fe4db29e3cc14748804ba5cf026f99ae1d7887c082a820891543e1a8c080c6208d9590635983417b434c09b151333597d04d2e517cf849d1bbc22a9ea68e6c4ae669046cca858c7198693d3642348493f2595901331e257876383b049174ba73a6959c699d708c489251e213e3172ae864be8492f77a351fcbfe0dee0b96a0efa867c96289a0fa0f076ef051003e5e9afb9af3d0118328086060e32defa469bfcd268dcc174792c23c73edddee9138698660d69a5dc3e55ee8511b82a0d24ece2c980e68ab736bc5dec0b05a9f50742ffc5990a1ccb2df2b41a21866713f6754b77dc03fef274ef33dfb33e00dfae74cadb71ba25b9fc1dc9b9c1354fae359151c6ff5bfb3c74636fd5f25218e077329a616f8a7ef4585573a9a7f576534d9d60cc2053252eec21da70f53f7c231ff39ab833f511847878b9238c8b5ea16977b430a0c11812d40f8195d6f90b9bf23df7fdaa062ee9f68dbe74ed2fdae40d6faaa53cd3660a7f066f6e407f31b5481e9af70642cbf952d4afbdb6681ecc71e59eb8ad9765457777412884d514de5ff7ad0f1e5fc35126e23f865d508285402f6dac13d3e34cedf2abdfe4a52b05336064426249d883d1414d5524b1ba36130ae3633d231d7b5e5d9469ebae50500fc345973ab9679c1e6dcc07b1346d1cd78c1b08274f978419ae27114b279e0daec6e47ba59d084cb8fe9c885c5e1c7d8c6c4d51260e73f6dc2877eff3b8efb232adccfa9bec806a289d15508f31e57d7350bb2f090b7d4d890e9c7b495d53afd257c7681f7d73b371de3864f3a9b8f64e82d1f9fd0c9ff24ccdb2a991c8883af0ac274ee068c9681a8982e81ad6f", 0x1000}, {&(0x7f00000003c0)='v', 0x1}, {&(0x7f0000000400)="3279dc2436e8e8268c1dd56d48eff472321450de813105a9d88dc773e2740f7f40d4beaf01107096048db7b5", 0x2c}, {&(0x7f00000014c0)="eea619dc566e9e2932363c27f3e0ba2fe6e4d45eaf81c284078d369c173dace8f45033c2715d5a475563f902dbc76ac6dc9ce090c20d1585a766b7662e32ce4a956cbbc5caac0dd4b1d7538cc57ca6efa59c22d5353674d0ed4bb1cd1485", 0x5e}], 0x8, &(0x7f0000000440)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}], 0x18}, 0x40800) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004dffffffffffffff000000000000"], 0x2e) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/33, 0xffffffffffffffaf}], 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x100, 0x0) sendto$inet(r2, &(0x7f0000000100)="90e131f1a8af45fbe0290bfabea74cf99ff24ac89068a71925124d8d581c987a2f97e616664c287df81b742447d53ed0fcba48a58a57a042580acdb43767f5324a4711e32c7c5f9bc48e5d39ccfebfb6f28670bec7e3f30933dbfc96066a6141142973299a3a638563eb28962ad21aa23c12f194f9dc64effffc58f159", 0x7d, 0x800, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) 2018/05/21 21:42:20 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x43050000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:20 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$random(&(0x7f00000001c0)='/dev/random\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)=ANY=[@ANYBLOB="03ceece958520cf660db000020"]) 2018/05/21 21:42:20 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) socket$pptp(0x18, 0x1, 0x2) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000fffffffffffff0000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:20 executing program 6: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x1001, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200002, 0x0) fstatfs(r0, &(0x7f0000000240)=""/147) r1 = socket(0x40000000000a, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2018/05/21 21:42:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x900000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x2000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x353) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=r1, &(0x7f0000000400)=0x4) r5 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1c, 0x2000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x28, &(0x7f0000000440)}, 0x10) ptrace$getenv(0x4201, r4, 0xffffffff, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000200)={'veth1\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x101000) 2018/05/21 21:42:21 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xffffffc0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:21 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg(r0, &(0x7f0000006b40)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x80, &(0x7f0000001240), 0x0, &(0x7f0000001280)}}], 0x1, 0x0) r1 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="7b6d643573756d9127642f00", 0xfffffffffffffffa) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000180)) keyctl$get_security(0x11, r1, &(0x7f0000000180), 0x0) unlink(&(0x7f0000000000)='./file0\x00') 2018/05/21 21:42:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x88000, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)={0x303, 0x33}, 0x4) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast1=0xe0000001, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/dsp\x00', 0x100, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000001e40)={0x0, 0xffffffff}, &(0x7f0000001e80)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000001ec0)={r3, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8800, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r4, 0x89e3, &(0x7f0000000040)=0x80000001) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x2, [{{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x0, @broadcast=0xffffffff}}]}, 0x190) 2018/05/21 21:42:21 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101600, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) 2018/05/21 21:42:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000f0ffffff000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:21 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2e) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) 2018/05/21 21:42:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x9000000}, 0x10}, 0x1}, 0x0) [ 328.790589] sctp: [Deprecated]: syz-executor0 (pid 20798) Use of int in maxseg socket option. [ 328.790589] Use struct sctp_assoc_value instead 2018/05/21 21:42:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000002920001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:21 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c626262c85") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x821f0bea8cdf81f0) write$cgroup_int(r2, &(0x7f00000000c0)={[0x2f, 0x37, 0x38, 0x2b, 0x36, 0x30]}, 0x6) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c0d}) 2018/05/21 21:42:21 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xfffffffffffff000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:21 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x220000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x3, 0x2, {0x2, 0x1, 0x81, 0x3, 0xff}}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) 2018/05/21 21:42:21 executing program 7: r0 = socket(0x10, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000280)='net/arp\x00') ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ppoll(&(0x7f00000000c0)=[{r0, 0x8000}, {r0, 0x4100}, {r0, 0x505}], 0x3, &(0x7f0000000100), &(0x7f0000000140)={0x2}, 0x8) sendfile(r0, r2, &(0x7f0000000000), 0x80000004) [ 328.888002] sctp: [Deprecated]: syz-executor0 (pid 20809) Use of int in maxseg socket option. [ 328.888002] Use struct sctp_assoc_value instead 2018/05/21 21:42:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffff7f}, 0x10}, 0x1}, 0x0) [ 328.976091] binder: 20814:20818 got transaction with unaligned buffers size, 133 [ 329.034674] binder: 20814:20818 transaction failed 29201/-22, size 0-0 line 3016 [ 329.081439] binder: BINDER_SET_CONTEXT_MGR already set [ 329.104955] device bridge_slave_1 left promiscuous mode [ 329.110543] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.123893] binder_alloc: 20814: binder_alloc_buf, no vma [ 329.129576] binder: 20814:20830 transaction failed 29189/-3, size 0-0 line 2971 2018/05/21 21:42:21 executing program 6: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0xfffffffffffffffb, 0x40000000}, 0xffffffffffffffc7) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x1e3, 0x193) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x6, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/113, &(0x7f00000000c0)=0x71) 2018/05/21 21:42:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000fffffff00001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:21 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x543, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:21 executing program 7: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) syz_read_part_table(0x0, 0x0, &(0x7f0000001300)) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x20, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 2018/05/21 21:42:21 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x800, 0x400) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="1c000000150adf5e00000000000000000000004008000100"], 0x1c}, 0x1}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x40000) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffffffffffffffd, 0xb8, 0x80000000, 0x8}, 0x8) syz_mount_image$bfs(&(0x7f0000000280)='bfs\x00', &(0x7f00000002c0)='./file0\x00', 0x1ff, 0x4, &(0x7f0000000580)=[{&(0x7f0000000300)="8f60e8439cd63ae768fb87c57dc9316659bdb61ef76fb963a904924466270208aa13fd12f600b46398d5469f402649997af52eebff9969a2518d4dd0815c4d4a", 0x40}, {&(0x7f0000000340)="2e85b36499afa54d35a1fea4df5ba073a301198565bd489472fc61f4d13d54ec4296ca477d0c5ea60f969c269534df9afda7d0d60d225c3497e346284653d5afdf5c484eedd09c41ba1c389b74733fa7cd899b78516cac1ee1a2dab6102ecfbbdf9dac6dbc88e61c2a24e077448cb7d3767b4c8e6b637b5365632d6006160d1f62eaea78e7e8b1608622723f65e5baeb0644eafcb37b9110b231561d6e1f1778ca77a4aa0c6d1bf3984c9b74bb576acf", 0xb0, 0x80000001}, {&(0x7f0000000400)="dbead836aeb3da00d834b387f0c39fcbe3f2893522a60fb894e7a4bfe3036b4cfcb4201312cd179ca579328848de7acdc9808e3c090bd514fb04b25a9604208f77d348515e581764238db49a55b849208611fb88227c70c238a4ef5f47f46bacdad8b438fd2ea65192099c5be140", 0x6e, 0x80000001}, {&(0x7f0000000480)="7e7de4b90617dadb757e05e12b81f0a41034ec3481e06ba713eecbd82c623702e40b3ac19fde76d0c711573e86222e2a551ccffdc9b63684ff1ef74e5a79d386228b00225cfbf1b9d290bcf3954561d970fccfc3c98389bb0710679d9a3eb54a47ba4bfd7a62e6cde6ab83479414aba64f505c5f44fe1630ce01ddebe63541340504f3baf3aa83ba126dbfa42c741b661c10564f5a8949cfb3aed3fcf021816a0fb77055867a4e6c0aee4d770ae63e3fc06b4a3d8e29e5182ce5bcf5e206de84101bb3b8a66d22a3ee92eb9fbddacb199c6689c80aac", 0xd6, 0x7}], 0x8, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x100000000, 0x4) 2018/05/21 21:42:21 executing program 3: r0 = socket(0x1000000000000a, 0x1, 0x3) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x1000) 2018/05/21 21:42:21 executing program 0: r0 = socket$inet(0x2, 0x9, 0xa2) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000003a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x80, &(0x7f0000003e40), 0x0, &(0x7f0000003ec0)}}, {{&(0x7f0000004180)=@nl=@kern={0x10}, 0x80, &(0x7f0000004540), 0x0, &(0x7f00000045c0)=ANY=[@ANYBLOB="d0450020000000000000000000000000"], 0x10}}], 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) connect$netrom(r1, &(0x7f00000000c0)=@full={{0x3, {"797a1ba520e9c6"}, 0x2}, [{"238dc4b8589cf3"}, {"9f6859659e9988"}, {"52952b0a04ee17"}, {"aa7549e9330121"}, {"b5adb1421e57f2"}, {"962e91f896585f"}, {"ce531a60f2058c"}, {"410907fc807f19"}]}, 0x48) [ 329.150206] binder: 20814:20818 ioctl 40046207 0 returned -16 [ 329.158080] device bridge_slave_0 left promiscuous mode [ 329.163646] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 21:42:21 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:21 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1}, &(0x7f00000001c0)=0x8) 2018/05/21 21:42:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000f00000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:22 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x400300}, 0x10}, 0x1}, 0x0) [ 329.325916] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=43e8608f) [ 329.378651] team0 (unregistering): Port device team_slave_1 removed [ 329.380326] sctp: [Deprecated]: syz-executor7 (pid 20877) Use of int in maxseg socket option. [ 329.380326] Use struct sctp_assoc_value instead [ 329.435192] sctp: [Deprecated]: syz-executor7 (pid 20877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.435192] Use struct sctp_sack_info instead [ 329.486115] team0 (unregistering): Port device team_slave_0 removed [ 329.523065] sctp: [Deprecated]: syz-executor7 (pid 20888) Use of int in maxseg socket option. [ 329.523065] Use struct sctp_assoc_value instead [ 329.559732] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 329.580204] IPVS: ftp: loaded support on port[0] = 21 [ 329.607626] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 329.651976] bond0 (unregistering): Released all slaves [ 330.192686] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.199123] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.207999] device bridge_slave_0 entered promiscuous mode [ 330.243836] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.250262] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.257590] device bridge_slave_1 entered promiscuous mode [ 330.293418] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 330.328445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 330.434417] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 330.472416] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 330.639040] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 330.646462] team0: Port device team_slave_0 added [ 330.683379] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 330.690551] team0: Port device team_slave_1 added [ 330.725254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.762454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.800329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.838366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.085814] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.092189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.098822] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.105445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.113068] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 331.882208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.940258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.966959] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 332.041854] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 332.048030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.055550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.125327] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/21 21:42:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000000c0)={0x2, 0x3}) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) r2 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) 2018/05/21 21:42:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000002920000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:25 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x94000, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x402000, 0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x3ff, r0, &(0x7f00000001c0)="c79166b35039fabbc09d078e326dc0f4060bab406891c8e080bcc1cf36769d31b105f3be2e8950b1479a9812fac84cc0207d6a6324ba91a8ef1b5594ab62e026e356516d325d27e3d1a6ef3918fe538e7e2fe1504e2d23450efdd35af235eb5fd6275a43e8c6bac6379ab73188dc76daa70f0cebc8e0807e1394eec16b4bc24dee78466c95cbe399dcb3fcb51497dea75e041fb6c506a9320f6dfe1f4a5d3e86ee0143f34c8fb611d58adb4b6c9e468729c9c33c88c7c0408374b16c0e4a122dfd34745aa4e125ebb7960285017d1ab950f167111079", 0xd6, 0x400, 0x0, 0x1, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000340)="42df805d90765807854c2e0e076bc58e806329c88861e533167d2f90b2b5433c976c2e101ccd7a559d2dfdc5e279e7d02743741514bbded78231552ae246212406f439c7e41dab32078c090dbbb511238a323a4c15dc65a128c50d", 0x5b, 0x6, 0x0, 0x0, r3}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x2, 0x8}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x0, 0xa, 0x0, 0x2b}}) 2018/05/21 21:42:25 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8847, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:25 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f000000affc)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x4, 0x39, [], 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=""/57}, &(0x7f0000000180)=0x78) r3 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f0000000000)=[{r2}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f000016a000), 0x8) read(r3, &(0x7f000057efb8)=""/72, 0x48) 2018/05/21 21:42:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:25 executing program 6: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8910, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x4000c, 0x80000, 0xfffffffffffffffc) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 2018/05/21 21:42:25 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x341}, 0xb) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) clock_gettime(0x0, &(0x7f00000020c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000980)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/81, 0x51}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f00), 0x0, &(0x7f0000001f40)=""/96, 0x60}}], 0x2, 0x40, &(0x7f0000002100)={0x0, r2+10000000}) [ 332.608916] QAT: Invalid ioctl 2018/05/21 21:42:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000092020000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:25 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x1400000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x100000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:25 executing program 5: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000004c0)="0c3e803aaa397b30784822c90c548525ff29ab8faf9a5d04eb3f202fd6022a435c5c54fc1e8b9775116d6a7d96d68bb38a65f206fb19ae9a7cec2e63", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r0}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3f, 0x2000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)={0x8ec0, 0xc, [0x1, 0x0, 0xfffffffffffffff9]}) [ 332.644700] QAT: Invalid ioctl 2018/05/21 21:42:25 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000fee)='/dev/snd/pcmC#D#p\x00', 0x6, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r1, 0x4) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x50, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r2, 0x4) writev(r0, &(0x7f0000004000)=[{&(0x7f0000002fc1)="a5", 0x1}], 0x1) 2018/05/21 21:42:25 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x200000) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@fmask={'fmask', 0x3d, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c}, {@uid={'uid', 0x3d}, 0x2c}, {@debug='debug', 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@flush='flush', 0x2c}, {@showexec='showexec', 0x2c}, {@discard='discard', 0x2c}, {@nocase='nocase', 0x2c}]}) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x10a010, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x1c812, r2, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) getsockopt$sock_cred(r3, 0x1, 0x19, &(0x7f0000000000), &(0x7f0000003000)=0xc) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0xffffffff, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) 2018/05/21 21:42:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000f0ffffffffffff0001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x88001, 0x62) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x9, 0x8, [0x8001, 0x20, 0x4, 0x1, 0x6, 0x8, 0x100000000, 0x5]}, 0x18) r3 = socket(0xa, 0x0, 0x3f) ioctl(r3, 0x8912, &(0x7f0000000040)="6f0000000000000000000059192b7a41d36da39f99d7a6e5ef9ef4adc6e0918bf92716944c6732830fa0c73f00000000000000f7d89528b03369d73d92a01b7100d339928ba2dec6ecc4221911005cf6388e8a72a15acd6d62ffcc9010c0b770cbf82bc7af353a42a47729de16121251263d9787de87147914e9d9ff6ae4257e9fb6bb0d16b88c6d2f1610b14b4b8d942262b05effea5f837a9011bb503248a7396e9144d8e7c3560d1a1531658c70b47a1c35d23893d72551d7aa") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x1, 0x210, [0x0, 0x20000280, 0x200002b0, 0x20000460], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'ip6tnl0\x00', 'ip6tnl0\x00', 'ipddp0\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0x150, 0x180, [@time={'time\x00', 0x18}]}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}, @common=@log={'log\x00', 0x28, {{0x0, "79b5f59092febe7d0f4a4e46e162a6d840a093245c86ac867c91d18ea24e"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x288) 2018/05/21 21:42:25 executing program 0: move_pages(0x0, 0x200001e1, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=[0x0, 0x0], 0x0) arch_prctl(0x2005, &(0x7f0000000040)="98491acb4e1d811d") 2018/05/21 21:42:25 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x88a8ffff00000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 332.822957] FAT-fs (loop6): Unrecognized mount option "fmask=" or missing value 2018/05/21 21:42:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x400000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:27 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x4c000000, 0xffffff9f, 0xc01}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x200, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="849f6a261b9bbee973866bac3ac70888fc55c45105ef23849b0706ee1fab06fb681e88cbc0a38a3f7a6c18577874f68cef21cef5596ae1290d39ffecf951c4a0ff6515605ce9621567051886df4e70fcdc7f4a5a789a7dacb9f2c8887b9d22dcd3c65d8678c3c8461a9748234245b3be85506d9d5b965c68f05c73da7b363c2d2063fd306c662490b534546f41af956ff5d69e6f371fabf38179ab4654a8afca65eb2c07251e0676b756d71a39c33787abc135b49d33b5806095cc8376997d7af680b0977fc8e0e4ed2ab373273f9361e765d643497971", 0xd7, 0x2}, {&(0x7f00000001c0)="795050694e49686cf49666a7ade091518436205e667719c9069f9c4f83b7", 0x1e, 0xfd41}, {&(0x7f0000000200)="85bd90a88ac4b577b5bb4de9951975d5aeba884f006fb120b9c516f285976675d678b53683c6dde9aa05837b1498bd045e88a8202bc85b37f8d18702472854428879e994d3c7805022194d02e5982cde8c7a15cbab42b0f20d5e8cca56d5e887755f5f26a1c2f0cbf0b23798b19ee0b8ceeeaa8d3bbc4e187b0c97dc3182742964a3181d027ffd0db5825209860525f57940f73b7c1f9cd3934bac28876db931220967", 0xa3, 0x31}], 0x30000, &(0x7f0000000340)={[{@gid={'gid', 0x3d, [0x3f, 0x37, 0x78, 0x37]}, 0x2c}, {@hide='hide', 0x2c}, {@session={'session', 0x3d, [0x33, 0x38, 0x37, 0x7d]}, 0x2c}, {@mode={'mode', 0x3d, [0x32, 0x0, 0x39, 0x34, 0x30, 0x3d, 0x3d]}, 0x2c}, {@cruft='cruft', 0x2c}, {@check_relaxed='check=relaxed', 0x2c}]}) 2018/05/21 21:42:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) name_to_handle_at(r2, &(0x7f0000000700)='./file0\x00', &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000001780), 0x400) r4 = add_key(&(0x7f0000000740)='pkcs7_test\x00', &(0x7f0000000780)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000600)="a15840f73d907830bf59184d6f4163b22815637b3c57709e88fcc4f622cfe27e472c8490ea99218c4296dbbe3433e8617371190976a09ae3ce58e94275914dd484d6191cf6f44cf5eefa3123b95671a4455a2004b7557f3c4abdf8f3eb1074e3b0187a04bf519b409eb974b8492e2af0eb2c389320e9e8a2d1ec16cee34542ef497c0d535c61e26de826d68c8e8594f56a77ed8df38e9de0", 0xffffffffffffff0f, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r4) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) sendmsg$rds(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000040)=""/234, 0xea}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000280)=""/216, 0xd8}], 0x5, 0x0, 0x0, 0x10}, 0x4000810) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0xb1, "39e1662f4ce5d3b28715d45bfa1f907154da6959d26e403f307812c76462508ff84ff3658ed771732a58cfa61fd0ce0d6adcd86b0ce20efa11aa35d88dbd27ad1c9a79bea3dcebb63a52932dc0edff4bd9f10df79cad3c6435fb7384b885728f9373bdec5c4b8ad0551327714c41c4c8aa0e8ab0c3be2a5622ce7e3debff0c0faceefbdbeea92d7966e01f85dfacc3b3d00d7063919babb84b29833c3308286dae48d67584671dcf5daa1ef0e457d308f9"}, &(0x7f0000000500)=0xb9) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={r5, 0x1}, 0x8) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000580)) 2018/05/21 21:42:27 executing program 6: r0 = socket(0x800000000000000a, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) 2018/05/21 21:42:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000007fffffff0001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:27 executing program 7: sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0xa, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}]}, 0x38}, 0x1}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x181000) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000080)={0x2, 0x36, 0x8, 0x0, 0x5, 0x7}) 2018/05/21 21:42:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x4000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:27 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x4, 0x32, r0, 0x2) r1 = userfaultfd(0x80082) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40400, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f00000000c0)=""/208) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) fdatasync(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x13, 0x0, 0x0, 0x0, 0x0, "f055b4"}}) close(r3) close(r1) 2018/05/21 21:42:27 executing program 6: r0 = socket(0x1000000000a, 0x1, 0x40) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = semget$private(0x0, 0x8, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, &(0x7f00000000c0)="0009866422a1ba0ddf228cc1ec375d06d88a208bfcf1dbed57a6f4b5fdf4cab447416f625f75725d4e8348c3e1702afa6b9fe69bc083907f35e255c8446816dd0c79074a2e948ba8f3a0d3dc5b583147b1c1244b5b7fe3ba499610a8d68619f9eba0f902f5918081becb9a2841d656e902bb15f1a6d24913c1725692a3c2a87a58422958118431200339df6896fa9ab1ad7b4f22d3c8cadec3adbcb27da454ae802abbe9", 0xa4) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semtimedop(r1, &(0x7f0000000040)=[{0x6}], 0x2aaaaaaaaaaaab5a, &(0x7f0000000000)) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x4832, 0x40880) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000001c0)={0x2, 0x3, 0x3}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000340)) 2018/05/21 21:42:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xf0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:27 executing program 7: unshare(0x2000400) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xc89b, 0x40001) sendfile(r0, r0, &(0x7f00000001c0)=0xfffffffffffffffd, 0x3) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) open_by_handle_at(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000001380)={{0x837b, 0x401, 0x7, 0x9, 0x0, 0x1}, 0x4, 0x3}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000180)={0x5, 0x3a5, &(0x7f00000000c0)="2a224e28e2a54c345fe68db7b4d93c0b9e049575e63e59fbe001109996520745b28e72f2e0a59bf7205c3b86a8452281992a487f66b3ccea3a95b994d0f132b45bddad0caeeb72fa14ad08dd0dc8dcad41b29455d7187c1d802ec2967dae4fa09d5c85252850985fb4e1a03bbf63889111d212b63bc5e63d26d8101191ff3fc1df2c48c5c43d1556e32926c6"}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000300)={0x5, 0x4, 0x1}) pwrite64(r1, &(0x7f00000001c0), 0x0, 0x0) read(r1, &(0x7f0000000200)=""/238, 0xee) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000c, 0x10010, r1, 0x0) 2018/05/21 21:42:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000007fffffff000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x2000000000000314, 0x9) 2018/05/21 21:42:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000800)={0x10, 0x2e, 0x1}, 0x10}], 0x1}, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='system.advise\x00', &(0x7f0000000100)='/dev/amidi#\x00', 0xc, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x7890c0) getsockname$ax25(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) 2018/05/21 21:42:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x40030000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:27 executing program 6: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) ptrace$poke(0x5, r1, &(0x7f0000000040), 0x7fff) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0306201, 0x404f00) 2018/05/21 21:42:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e2e6530f0", 0x40003ffd, 0x0) fdatasync(r0) mknod(&(0x7f0000000080)="2e2f66696c65302f662e2e6530f000", 0xa, 0x0) 2018/05/21 21:42:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xe80, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)='\n\au', 0xfffffffffffffe79) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000001200)=""/4096, 0x4}) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 2018/05/21 21:42:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400080, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000000)={{0x1f, 0x3, 0x9, 0x7, 0x8, 0x78d}, 0xe0, 0x49, 0x18000000}) 2018/05/21 21:42:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000002000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 334.761999] binder: 21294:21300 ioctl c0306201 404f00 returned -14 2018/05/21 21:42:27 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000180)='./control/file1\x00', 0x0) write$sndseq(r1, &(0x7f0000000000), 0x378988c7) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000000)="b1bad31c0cfefc43a591f0959a5bcb") 2018/05/21 21:42:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:27 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) listen(r0, 0x1008005) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000240)={0x100000000, 0x2, 0x7, 0x0, 0x6, [{0x3ff, 0x8, 0x5b4, 0x0, 0x0, 0x603}, {0x9, 0x200, 0x1ff, 0x0, 0x0, 0x2080}, {0x8, 0xfffffffffffffffd, 0x24000, 0x0, 0x0, 0x1480}, {0x8d, 0x5, 0xff, 0x0, 0x0, 0x2}, {0x4, 0x400, 0x3391, 0x0, 0x0, 0xa00}, {0x100000001, 0x100000000, 0x8, 0x0, 0x0, 0x500}]}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr=0x1, @dev={0xac, 0x14, 0x14, 0xd}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) connect$inet(r1, &(0x7f0000772000)={0x2, 0x3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000680)=@sco={0x1f}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000000000000000000000884ac97566f1600d38562fec2119f569"], 0x20}}], 0x2, 0x0) 2018/05/21 21:42:27 executing program 6: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x8020000000031, 0xffffffffffffffff, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r0, &(0x7f0000000000)="b0e6e36f00617419c507762fbb1b61c3c61a4c8ebae002b74438fec538074a9ca1c892c0a6effda72f72330fa9ad775f21dee341f22dae62a25cc05326a82ececce759e4be79532686fbfd64", 0x4c, 0x40, &(0x7f0000000080)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000772000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/05/21 21:42:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000009effffff000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x2, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x34000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1e7, 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000001c0)={0x4, 0x7ff, 0x3}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000f8b8cd4d7192c9387d8cd09d32a75f69bc82ef374ae9720cbaad5c4e6538237fff8a9e14c1221cbf6bf4ad6476109d91bf373650442a3df7477cfb0219e1d1e1618a5a346f6d758e66fe129d62b16fdbd53f29dacdbc60bd8d7b9c82ff12f6f65f631cbcc5858be0c3845f1c2a251d9c60312f2391838b88e59d9771b64aeca3c0c1de5e2d8f19435cc00c24553ce638f43f0bfeab610758ec"], 0x1}, 0x1}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xbde2, 0xb0, 0x400, 0x2, 0x2, 0x6, 0x4, 0xfd, 0x38, 0x172, 0x8, 0xc4, 0x20, 0x1, 0x7fffffff, 0x4, 0x8}, [{0x6, 0x7, 0x5, 0x6, 0x4, 0x3, 0x8, 0x3}], "c0ebcbe03a568253c72e0da408f6081f1af2e071340067179b2ddaa03c4ad85a65ddc4c76cd222372707c80c4e09f92421cd783f92e638218b98897a72851e930592f192b7cb8739ea29b0d68f35cc4e8829160a8a171bbca49e479f1ccde9af9683147ce6b7f4cdb1102f0e32c3bb99211e6a984bf2d644b8fecf40374ea9381129764dedeafc1151e13178187811581a479a3f56ddac75dd121562f3abc3d8c76380368b718247e4575445497295002325c616e9673ad6b9c114767e326caf735af3240d233a0d", [[], [], [], [], [], [], [], []]}, 0x920) 2018/05/21 21:42:27 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x8, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, [0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40000000000]}, &(0x7f0000000300)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0xc3, "7a66dcc21b0167c2dd4c93661220ff1ab777e6a84319cd64ebbc3819fd3f5f518f3b1800de2e012b9ff2cd24aecc1d509fb7b53eec77be2c4e5e81bc80941568c6546348a84b2abc17084b395cfe6de5df551a6f69b98b64ea1409763b37f30b68b5aed15e0b02d0448dbf2d683595e9b90009512fe760ea42532fb1cfadb63a3670eebd9bea761f22d2c76ff036b68fc32001a5f29a657540d654d285433b1f10043126999bc60e40e4c647e5c716a8a04987d9984e257c1a1a7d40ce5bd836dce260"}, &(0x7f0000000100)=0xcb) 2018/05/21 21:42:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000080)) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/10, 0xa}, {&(0x7f0000001280)=""/27, 0x1b}, {&(0x7f00000012c0)=""/199, 0xc7}], 0x5) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) clock_gettime(0x4, &(0x7f0000001440)) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) accept4$bt_l2cap(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/05/21 21:42:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000ffffff9e0001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:27 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@nls={'nls', 0x3d, 'iso8859-9'}, 0x2c}]}) r1 = dup(r0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0xfffffffffffffffc) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3719d62) 2018/05/21 21:42:27 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ppoll(&(0x7f0000000040), 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f0000000140)={0x3ff}, 0xffffff53) ioctl$TCSETSF(r0, 0x5111, &(0x7f0000000000)) 2018/05/21 21:42:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xd00000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000009effffff0000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:27 executing program 5: r0 = memfd_create(&(0x7f0000000040)='#em1#+\x00', 0xfffffffffffffffe) write(r0, &(0x7f0000000140)="24ac068c1e", 0x4865e138a5787214) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/56) socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x1, {0x1, 0x3, 0x1, 0x0, 0x7ff}}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x20, 0x400) clock_settime(0x5, &(0x7f0000000000)={r1, r2+10000000}) 2018/05/21 21:42:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x400, 0x4) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x8, 0x4) 2018/05/21 21:42:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x200000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:27 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000005780)=[{{&(0x7f00000004c0)=@vsock, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000000740)=""/201, 0xc9}], 0x2, &(0x7f00000008c0)=""/248, 0xf8}}], 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x3d0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000280)={"6970365f767469300000000000000100", @ifru_mtu=0x707000}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000080)={0x0, 0x1, 0xc1e, 0x9, 0xd928, 0x400000}) socket(0x0, 0x0, 0x80) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x400) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x101}, 0x8) [ 335.290713] hfsplus: unable to find HFS+ superblock 2018/05/21 21:42:27 executing program 7: r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x800) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000500)=0xe3d5, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000300)="03697a9c2aed25d0f6187ce3ffd899b8346eebee8e69d471b957bc220bad883c194eeb17daf4fa9a964c16d0c6d16e103a95e3e72d437a9845ea10ed953269bbfecd16239f1583d53f49849cc669fd16090af87220a974bb2cd67d870c2b3996794c97803f083e70e30db83ee9b8b1b595c13e06799db4e2cb57e258a83e3d21035d02492f4c", 0xfffffff2) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/8, 0xfceb}, {&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000400)=""/234, 0x77}], 0x3) 2018/05/21 21:42:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000f0ffffffffffff01fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 335.340744] hfsplus: unable to find HFS+ superblock 2018/05/21 21:42:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:28 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x40000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) dup2(r1, r0) 2018/05/21 21:42:28 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x400000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3e, &(0x7f0000000000)=""/103, &(0x7f0000000080)=0xfffffe50) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x400000) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0xa, 0x16, 0x2000000001, "adb14af1b35cbab6afff990cf2b184fe61932c5cac844fecf8831c1fd1ffb1544c849c3d9b88dd99cdd7d368274446cc72164bcc8225b68a68ece56a3673376d", "f51ac14229de56c51ccfea6304ecdd7933c242376a03871b0c12ed229294dc534ef6e835809dca60e76e0b6437a2a0299066d12384a2c6823b8fd61f574f1675", "2eaca2066ad5030739c90000000000000401e502c3fb729f9feccc02e6695bde", [0x0, 0x7fffffff]}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) 2018/05/21 21:42:28 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x7, 0x40) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0x1, 0x5, 0x2, 0x0, 0x6}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x5b) r3 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) getpriority(0x2, r4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000180)) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000400)={0x303, 0x33}, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x7b, 0x9, 0x40, 0x100, 0x0, 0x0, 0x1001, 0xe, 0x9, 0x2, 0x800, 0x9, 0x1, 0x1, 0xaf9, 0x2, 0x4, 0x8b, 0x0, 0x6, 0x80000000, 0x9, 0x6, 0x385, 0x9, 0x20, 0x2, 0x758, 0x1ff, 0x100000001, 0xffffffffffffff80, 0x1, 0x1, 0x61, 0x8, 0x6, 0x0, 0x140, 0x2, @perf_config_ext={0x6, 0x34b}, 0x1, 0x81, 0x6, 0x0, 0x4a45, 0x100000000, 0x200}, r4, 0x6, r1, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x4000) readlinkat(r2, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/51, 0x33) 2018/05/21 21:42:28 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x80d, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000140)={0x8000, 0xfff, &(0x7f0000000040)="0fe4f1b07690ee488e82ddf665949e52c12b731e5d6eed01f6effcb12ae0c78b24a620753069cf177dd99aa1ff58375f0783e23c327287c5486147871301ff1b21d7065cacc5b72bbfcbadb4ea5dd2f4d9ce99abc879d50b70fcbfa92ca7c13e00f27f9bcfdf8bf7de29b8a5ccddf21aff5d38aaeabd", &(0x7f0000000100)="1ee549e8cb5c7e5dc8718e7624b915199228967a43b6354619cfbaa1d1", 0x76, 0x1d}) r1 = socket$inet(0x10, 0x3, 0xc) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x1, r2}) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000090affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/05/21 21:42:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000000000ffffff9e01fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:28 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x650000, 0x100) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) read(r0, &(0x7f0000000140)=""/11, 0xb) r2 = syz_open_pts(r0, 0x0) r3 = dup2(r2, r1) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='binfmt_misc\x00', 0x1002, &(0x7f00000004c0)) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1002, &(0x7f0000000380)) umount2(&(0x7f0000000380)='./file0\x00', 0x2) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000200)=0x2) ioctl$TIOCSETD(r3, 0x5437, &(0x7f00000001c0)) 2018/05/21 21:42:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000}, 0x10}, 0x1}, 0x0) [ 336.370309] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/21 21:42:29 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xd00, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000fffffffffffff00001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:29 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002140)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002180)={0x0, @loopback, @rand_addr}, &(0x7f00000021c0)=0xc) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$rds(r1, &(0x7f0000002080)={&(0x7f0000000000)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000000180)=""/64, 0x40}], 0x3, &(0x7f0000001e40)=ANY=[@ANYBLOB="5800000000000000140100000700000000f0ffff01040000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="0600000000000000"], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="010000000000000006000000000000000500000000000000400000000000000029000000000000000106000000000000480000000000000014010000010000000500000004000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ec00000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Z\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="e900000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f03000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="d100000000000000"], @ANYBLOB="0400000000000000080000000000000009000000000000001800000000000000140100000c0000008000000000000000580000000000000014010000080000000100000000010000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="d30f000000000000"], @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="0600000000000000"], @ANYBLOB="76070000000000001f00000000000000070000000000000008000000000000002000000000000000c2f700000000000018000000000000001401000002000000030000000900000048000000000000001401000001000000000000003f000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="c300000000000000", @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='N\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="8a00000000000000", @ANYPTR=&(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="b700000000000000", @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='u\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="040000000000000028000000000000000008000000000000580000000000000014010000080000000300000000000000", @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYBLOB="0100000000000000"], @ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="0600000000000000"], @ANYBLOB="080000000000000004000000000000000700000000000000200000000000000040000000000000000008000000000000480000000000000014010000010000000200000004000000", @ANYPTR=&(0x7f0000000b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="e600000000000000", @ANYPTR=&(0x7f0000001e00)=ANY=[@ANYPTR=&(0x7f0000000c80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="f800000000000000", @ANYPTR=&(0x7f0000000d80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0010000000000000", @ANYPTR=&(0x7f0000001d80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='u\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="030000000000000010000000000000007b0c000000000000"], 0x210, 0x4000}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f00000020c0)="a099334854e34f1c5a1468634e8305d0c267228cd96b812c1913a685b4b59c5bbe5cce73d2b23d50cea0eab138e22ef254556449920c55db7c6cb688427da35dbdfaa2c5c6", 0x45) 2018/05/21 21:42:29 executing program 0: r0 = socket(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x3) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140), &(0x7f00000000c0)=0x4) close(r3) 2018/05/21 21:42:29 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x40000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) dup2(r1, r0) 2018/05/21 21:42:29 executing program 5: readlink(&(0x7f0000000500)='\x00', &(0x7f0000000480)=""/71, 0x47) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x8200) r1 = semget$private(0x0, 0x3, 0x101) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000000140)=""/71) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), 0x4) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x50) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000000000000010000c000000000070000000000000004000000000000001f0000c0f9ffffff2100000000000000050000000000000006000000030000000300000004000000cc000000000000000b000080b7050000060000000600000002000000000000000d0000c079450000faffffff020000000300000000000000010000c0d37a0000040000000100000080000000000000000b0000000200000007000000010000808e06765f000000007595a70af2ac2acc8332b37bbcb692a511be1cde4ee977a932b7d14ba19c3107af7871cc28cf777a3ff484fd984548f81033ded7b40b86e9614f7c59831a2cc562f5242f"]) creat(&(0x7f0000000100)='./file0\x00', 0x1d7) 2018/05/21 21:42:29 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8100, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:29 executing program 3: socket(0xa, 0x1, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x881, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0x9) ioctl(r0, 0x8912, &(0x7f0000000000)="000155b5d5bae563d192ba") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000f0ffff0000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:30 executing program 6: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0xc0000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="bc59f4b78718493218f5f884c9a6bbe717488bf52c9546f1fa273c447ea06ee78f963d718336a63d7f12fce11dbbd00f26ca93ae9ded03358fa00c1f1725121b74805231077b4f250afa267cd3fd7342e42e50c38d882a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x2c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x1}, 0x8) r2 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x4, 0x10000) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60b409000030670000000000000000000000ffffe0000002ff020000000000000000000000000001210090780000000060b680fa0000000000000000000000000000ffffffffffff00000d00000000000000ffffac14ffbb"], 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000100)) modify_ldt$write2(0x11, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x1f, 0x1, 0x200, 0x400, 0x4, 0x800, 0x9b}, 0x10) 2018/05/21 21:42:30 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x40000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) dup2(r1, r0) 2018/05/21 21:42:30 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x181000, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x3, 0x100) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045430, 0x707000) 2018/05/21 21:42:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8848000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000f000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) r2 = memfd_create(&(0x7f00000000c0)='\\&\x00', 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0xda, 0xc2, &(0x7f0000000280)="bc1941cef1aeecb0845867485658e1dfbe6c5f4ab751f90adea9aaae65d6952fe4be108a16396735cf672b08d9136393a231ffc3f1b8efbe19970f5bd7f437b54882405c4e062a51a62db7ce393c4a05d1b4dcb2b195825aad3cf472ced85e747dfbb154c5de50a78fc18406caeb5fb1eff3b6d1905ff2b7521845f688af39686dcf69b4a13844c7853989c70ac10fa263c43f433044ef5cdc11e238ea55bf3ff070c0d9f973f45787b55d905d172727e2d52d183179e8ff9d8a1c64bd2145adda96b1fa7c4f8d7f213a2dc8237942051660f1bf9367807575f5", &(0x7f0000000380)=""/194, 0x3}, 0x28) signalfd(r1, &(0x7f0000000080)={0x1}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/21 21:42:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x900}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:30 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000080)=""/163, &(0x7f0000000180)=0xa3) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000280)) 2018/05/21 21:42:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8100000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000920200000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:30 executing program 7: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)="d8efaffe5ff0830fcc6063927f1a0c925e9fea7fe33f2078d99b6de7dfd345503fa67aa34d55b222e7581e21de86e0aa1064ebee43f3418d5b480cbff836cefdc552650036c6da7762f002441fa5c2aa75d36dfdfc4e13a147e307cf1925504d0727aa6f831341cffb0b899ab87d7e7655728b0e24a624414bd0c7abeb410c6f82b6475b6d67de78ebd69e169bbcec878636d72d3e406458bfa0a8994c", 0x9d, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)='%vmnet0vmnet1\'[ppp0nodev\x00', 0xfffffffffffffffb) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x5, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e24, 0x81, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, {0xa, 0x4e21, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x100000000}, 0x2, [0x6feb627d, 0x100000001, 0x1, 0x7c4, 0x1, 0x3f, 0x4, 0x8]}, 0x5c) keyctl$dh_compute(0x14, &(0x7f0000000440)={r0}, &(0x7f0000000200)=""/96, 0x60, 0x0) 2018/05/21 21:42:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000070]}) 2018/05/21 21:42:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:30 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:30 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000440)=0x80, 0x0) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$inet(r2, &(0x7f0000000000)={0x0, 0x0, @multicast2}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)=""/166, &(0x7f00000002c0)=0xa6) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xfffffffffffff7e9, 0x3, [0x6, 0x7, 0xefe4]}, &(0x7f00000000c0)=0xe) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e24, 0xbf2, @empty, 0x1}}, 0xa31, 0x80000001}, 0x90) 2018/05/21 21:42:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:31 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8906000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000007fffffff0000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:31 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6tnl0\x00', 0x10) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000006000000000000000000009723f008269cd6c0c9905359c443f4ae19e16deffa108d90b06b0fb75ab5a0c410e21341f9fd28127f0500000000000000827cd8b83ae92aebbda9982d3e"], 0x8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="faba610046f28551d951866aaf0804facfda3968d74771b9528799b43e5eddf894b8dfebebc0c47d3a039acdb394a65b7dabbb13d622bde46ff14db3bbc70aa17abf73dd9c035006094ab0997326c020bf9eaa4297b72c2fd799165be4b3b52bd2abe9e7f6833157d9a70aff9c3b0f417845584fac994b0ae2b1807c2cfcf61bfa97d7ce1bdd84f1dc22f58295db5dc13ee6c5ce09f1ba35", 0x98}, {&(0x7f00000000c0)="a5821941326ab675c23f3111ad76d4fc79c84a537a3833f1ae159c969891c80fcbb43f4a9f94e4ba96974b684e0e", 0x2e}, {&(0x7f0000000240)="6e594b29621db997baa3e003e7d08cad7918177202b5cce748d558f34b533111477602e9f27e9428108da8279dcc562d148c0c9f8334936d5283074fb4cc59fa0303027d92a94b75771793ec04446eb8a070e2583bbbcb1a7bd599dff6e92b1faf682bb89ed27c92502433e4d1f75b11b7a6549df6f5d7d62ed6409c85b2099e708da41c22dde4cca75f86c710d2ba92180f", 0x92}, {&(0x7f0000000300)="e66421730d7a85de5cbb010f5a97f57241fc6f839248e05b7245df6d711c48ec1335d19df41d0a877865ce0e87e9fc60330fdc227f03e72ac2fd333e14bac4bd8bc44eaf106443c374c5b647ab1862cb5bc408c7e690219c458804e9433055f61e20b0ba73e1d7d096012ba2fef527386e0f6b0de4ec11e8e4752e7fb2c430468244eb335b58bd630716ddcab69f111c770e2c0ceb591bc8784978b437e34cc3b283d1edec548256417e39452725199d4fed434bc70724cb6096e09bf4002b15fd65b7546e45b0e23287", 0xca}], 0x4) 2018/05/21 21:42:31 executing program 6: inotify_init1(0x80800) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x40, 0x103000) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x0, "1059493481b639195a8a2dd9ee3ff7e9c50e58fe75430138d7f00cfe322bea8af5c4de2e32bb0a6e99f963f4"}) 2018/05/21 21:42:31 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:31 executing program 3: r0 = socket(0x6, 0x800000000000800, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000000)={0xfffffffffffffbff, {{0xa, 0x4e23, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x4d}}, {{0xa, 0x4e22, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x2}}}, 0x108) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x605c, 0x8, 0x0, 0x9}, 0x8) 2018/05/21 21:42:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000002920000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:31 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x88470000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "a28c9a4e0c1a42aec96bccf8b378624b28bfa65c01d8496c0d1e065fea2446e8", "06a1bcacf0afe1560bc4d010efcefaa4f90fdf4bc08c4bc17107377789d79131", "e10cbf675ec81eab8c9d76fd9ea1ef77f5cee8e96be096d47e7d82c31c8cca9f", "520ef4bdccb55d43428e853ce6f291327cc2434a846c15bef166bc95b539ee5e", "870545decb35c94c3539d09f120478be1b959e8df60125436b596d3fe9cf6a43", "fbf82219f884f6443adbc0ad"}}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) 2018/05/21 21:42:31 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:31 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x10) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() getresgid(&(0x7f0000000180), &(0x7f00000007c0)=0x0, &(0x7f0000000800)) r5 = getgid() getgroups(0x6, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/mixer\x00', 0x80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000a40)={0x3, 0x9, 0x0, 0x0, 0x4, 0x6d, 0xd5, 0xfffffffffffffff9, 0x3, 0x3, 0x3, 0x9, 0x0, 0x1, 0xb50, 0xcc6, 0x3, 0xfffffffffffffffb, 0x23}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000009c0)=[r1, r2, r3, r4, r5, r6, r8, r9]) sendto(r0, &(0x7f0000000200)="0fd8a4c52f36de81bfe8a06c28d2c896e971c27d31300d4bf3c1618c5cb71d5b5a6c480751fa1d38d0daa46ad6953c8c60bae8877989d5f6dbf28a9e8d30a1d69f61db9f47b5c30b9293d8ff87fff6f964181d795a4540620473cd224add7a27a21c1bb090ef8bf5a930a8bc33c4b2efc5edb17f9969ccf0d12a9cc7306bcf045e00feb93f74cd79f1f471d9a3fa61803b9602a6c13dd2c3052d8aab2c2d1e03a30ee451887451b2de6cee65928d9ac02f997b1188e190bf1148799178a4f803f3ded6fe00cb5cebea081c5031eb4a016eedf6a29a7d4c95bb462ce97603ebddfa1dfb6991ed3b23f90304c514cd076c06e94ada72f05678c1d4651c66f4a5e5eaac3a9f1f6dc7397162335a99324323aa4acda101d59870b4ea47699975b538372fd65c257bbf7e7bf3d36adc1b8baad4e06cf1173dd9acfb53e31633125aac7e3aebecdb21bf0f5320ff72119d73647165310352c33688ae65e30478550774ee23fb137357934aacd5b5781d34c3a0bbaaf1bd136871a393d9d142f28ab7fc1ded7f635782b08d0b433a0040218165345d5c05732755afb2f1ec7984d7d4f4120c1cb243cbd0cd3e638d7bfb5e51e24e27767e61235e913e2ca608b63d8b9f5706683163b277aa93015e7fa7a8cbb25a4997e42f6a20e4c480424edaab7557ecc01191374064674881d0446f584b0726fb5d80683881fb9ebb2282523f56f849dd9ea818bce7cb7d600c2199530d84305492def6651672d497c613f0282237ec17d6a7d36ecd1c33a188a8b0944a15ef85d081d0a21c6368c731193195c5d49dbefbd527f9a2b658f771fad3718508497f62e3195d271477e8b2d737165b833c162b60393045f5704fd20cd741ecf1e6b1a12c4381a3860c0d62112f3b901e0d03b143b730a0417e3843a8d72f1617b70674f8ed2c788c8095e2c830e2f720c610fda3ba3732e8428af074787ad1380d2f8676f7842ed5400c86d8597586f4fe69d7066eec1807c1e7e8dacc682d508c0986029b30a249d530c98feb77ad2ab25902d758fce312d83659e5483b2cb0edee66d3ce09036a94d32dfc718e5bef160b4de5f5baea5f688d21b510ec008591c5ee2789a97bf914f7f284c592570162065292a95351007af0e8f8ff3a2a9025e3ba70251f0488625f8affab9c714532eaee626e0cc616666c8d46e73901cbbde7986dc57e72638abe13d8ee795770b5841e8251e1979977ab424b097b3906cd09b72c35d2a1f9e0b8b86b828c792321bc0dc7a703001e7adf773f2dbbe565fe79f4c98090dc9c95614f77bb31dc9552a3f24f1aad3ccbac7f08f365a4466985f8134f67f0bfe04e268f69c980efbf5c0843face8bcedaaaf585a40c1c16419ef026eb6fdf90ace19329db6483654a3d0b6dde844bbdad8d10300ab06cdde1870e5f76feaeab9603c4afdebd1d303ebd0aa1a99f9fd642ce224f285ac370a9168c89af08534c298b0f95d7f29b8b578cfaf752d901530ffb7276992c9144b24af9eb81fdca371580bd3ec2a3749116503774f2b18a874d0a33a4fa57f7a398408f6b579af00865d189efdf853d314ba85b8fb12aad4aefc496dfad2cfcfd87c4476215e767536b313ebf33742bb2261da4b18b9a03eed49b68616900cda269a8f13dde69c46668e5abf8a9d4f38f8223f94e1cc222463593075b22e940392514b4860cad42c2b4b45e563f0ac127827fb1594d80ace62f2f203266aab572d670fd34877b7111dae70c07b5df9d3a23454f33de1b0f210ee5253b000b7b9b1c50b2045a0bfdd73d436fd861eca78da3f284b21aad3197ee21f43928598e553d6e4381992ecd74174e55faa89ee0b76f13ee93f89c215b0e1074ea61401feb186013fd92827b4b293fc5026211dabbf60b4dd1437de0dd0f4cdaa287fdd0247f05b70a43fbb4f51c2037301588b3e6b9a38e746112844f71f2f33effcc86c2c3109782195aa5a65fe7b61ba53f83fd608e16d90b683968ce5b1936be6d9fbbd809d814d6aa", 0x595, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/21 21:42:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40030000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000201fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x81000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffff7f}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:32 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f00000000c0)=0x7) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) 2018/05/21 21:42:32 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) 2018/05/21 21:42:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:32 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x101800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x0, 0x100, 0x2, 0x10000, 0x1, 0x9, 0x8, 0x8, 0x8e, 0x43f, 0x9, 0x40}) 2018/05/21 21:42:32 executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) io_setup(0x6, &(0x7f00000001c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x80) r1 = getpgrp(0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8001, 0x620000) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x9, 0x152a, 0x3, 0x827, 0x0, 0x800, 0x9081, 0x4, 0x5, 0x6, 0x10000, 0x2, 0x4, 0x7, 0x3f, 0x5, 0x1, 0x2, 0x8001, 0x4, 0xffffffffffffff81, 0x7f, 0x0, 0x7fff, 0x0, 0x3, 0x3, 0x8, 0x1000, 0x8, 0x9, 0x1f1b, 0x5, 0x0, 0x7, 0x0, 0x0, 0x6de, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x200, 0x1, 0xa, 0x1, 0x800, 0x6, 0x10000}, r1, 0x4, r2, 0xa) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/214) 2018/05/21 21:42:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000007fffffff01fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x800e, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:32 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x8001, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x5, 0x9}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x40, 0x800) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000280)=""/4096) 2018/05/21 21:42:32 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) 2018/05/21 21:42:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:32 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) 2018/05/21 21:42:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000101fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140)=0x81, 0x4) prctl$intptr(0x18, 0x100000001) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0x1c, 0x1a, 0x201, 0x0, 0x0, {0xa}}, 0x1c}, 0x1}, 0x0) sendto(r0, &(0x7f0000000040)="0aea5f5f2895520700ffbe70737686782bf55aba6598020d", 0x18, 0x200010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003940)=[{{&(0x7f0000000300)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001880)}}, {{0x0, 0x0, &(0x7f0000002900), 0x24c, &(0x7f0000002940)=""/4096, 0x1000}}], 0x2, 0x0, &(0x7f0000003980)={0x77359400}) creat(&(0x7f00000000c0)='./file0\x00', 0x40) socket$can_bcm(0x1d, 0x2, 0x2) 2018/05/21 21:42:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x3580, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:32 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) 2018/05/21 21:42:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000040)=""/220) 2018/05/21 21:42:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:32 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) 2018/05/21 21:42:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000029201fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000880), 0x0, 0x0) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0xfffffffffffffff7, &(0x7f0000ae0fc0), 0x1000000000000122, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/05/21 21:42:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x1c, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:32 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:32 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) 2018/05/21 21:42:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000fffffff00000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 5: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000001300)={0x73, 0x79, 0x7a}, &(0x7f0000001340)='r', 0x1, 0xfffffffffffffffe) request_key(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000180)='ppp1(\x00', r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) lremovexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='security.ima\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'teql0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x5c, "270b57177c295a9955356d1e276e901e535b6b6de3cab41f8042341133e14cc7c7dd21140f7c95e52667dc13dadfc4477e47218dd4fb7f8b434dfb5a5adbf0d834c04ce375b74f62e431b51c099e1d0c8067c793697780a44894bfac"}, &(0x7f00000002c0)=0x64) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={r3, 0x52, "1f698d38afec4db5aa08ddfe34f9cfbfc9b6ed3ef24670df1e8d918ad4167f2c2424b2b58d6dfecfebbd142e4b72f212d6bcbab42bf2d8e5240e5d4d0d8eb9010fccdd9d0c1e0fa6d66962cfe8f543b5fa53"}, &(0x7f0000000380)=0x5a) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x102000, &(0x7f0000000100), 0x4, r1, 0x4}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}}, 0x10) 2018/05/21 21:42:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, r1, {0xfff3}, {0x2, 0x7}, {0xf, 0xffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r2 = socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r3}], 0x1, 0x9) 2018/05/21 21:42:33 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x80ffffff00000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:33 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000fffff0000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x900000000000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) 2018/05/21 21:42:33 executing program 3: r0 = socket(0x400000000a, 0x1, 0x6) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket(0x7, 0x5, 0xfffffffffffffff9) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x1}, &(0x7f0000000140)=0x8) poll(&(0x7f0000000180)=[{r0, 0x2020}, {r0, 0x400004001}, {r2, 0x440}, {r0, 0x410}, {r2, 0x14c}, {r0, 0x336a}], 0x6, 0x100006) 2018/05/21 21:42:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x40000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000010000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x1, 0x25b, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="f661930ea5f011544cd027c1e31cd045f1e26c578a840633768cf9d78e2d578960a76daddd1a05734e722f1127660645b93be36e868737e23427c2d96aa9e112645982a48274dcf91a7aba34811b587f5b237e51350cd3b821a9dcbfb0d186dd800a56e441126b22d19625e2b71f1ee2162b0beb29dd08e2de3be431e6d26d9bdce2ae8558f6bbbbe7446591c70d9e51c44323e2443385b9bff808b1c3e3ebfba1cfb01bf2aa1a814e1dc7756581766fb365845f2a9eeee13eeab70401ed538556fd249e3eb18eb1c5695b11539bac61dd14c339754bdc3f5a3550721620f86f8321", @ANYBLOB="4b774673b2baab70cca3cea30fcdc407260ac16981de97e84e35f253b793d12e68d0a2cbca7498c889a7aaba0eefbcd34850c8e0b759330baa8d906ab8cd02950c4e4ec998dc723f4467965d5e92b32ef10a80a095d831a3256835711663efc59e04603dcd7df84789d04fa383adde0fef58a6ae39fbfd69924f3acb22eb5b72491b504e06cf439cc4ab66a1c8", @ANYRES32, @ANYBLOB="67a25dd973de1179f9d2ef5fcb370d53bf31401f15e603db0bb9e862154deb60333c8c8cf95173dc20a4e4acb11bf420d36e6a00e6aff7ddbbbb6b869d59e4f18a606daa59ff3a97f59bd7893614b70cedb02aa8cb334c6046972cb9de526aa36796ea77b95f61296663ece0a0d78269ece5309eb241ff153b247d74238b71580746f41ce63ad75d2c3fdcb3bfe0ca7b9caeb7cf7b3dde1b473d8051800cea55480b594fcdd11ad572c71d7402feedcfa4a29ecc8e76cc2dc2880d934092b5e2a84b577cb9b4eaa3129c95d61c2973068b0a2b3c188a85aa0d294e52ab4d99455145c7dd97e6", @ANYRES16=r0]}, 0x2d3) 2018/05/21 21:42:33 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 340.676393] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/05/21 21:42:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400300}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={{0x7ff, 0x1, 0x800, 0x3f, 0x7fff, 0x80}, 0x2}) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x4000000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:33 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) 2018/05/21 21:42:33 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) 2018/05/21 21:42:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000020000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x366f3262, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0xb8, "0b4235dad26e01d9e5563234b65de6536eef87e7f41989bec71640643b8ce58929e47aadf7c00d15a9f237442235e1bdefac417c4b29b1b736d45dc61150c7b0c507c321865061781d1cad21a6c2b2131d9aeb29955b8f9ea0e83c2945b112d50e268babfb7b3ec6fdb3eea987cf25d45c3b29e4eee262962dfab70bd49866cda5f2a7250e6a8268b1461191c33cdd5dcfabb98666bcd06891637145611f90329a9b1bb2666aa2687e7bb3868a57e94dda2c2ad9f211e3ae"}, &(0x7f00000001c0)=0xdc) syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cd3997030f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0xffffff81, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}}}}, 0x0) 2018/05/21 21:42:33 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) 2018/05/21 21:42:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000000000fffffff001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x88480000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8, &(0x7f0000000000)="c626262c8523bf012cf66f") socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000180), 0x0, 0x3) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x3, 0xc4}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x3}, 0x8) 2018/05/21 21:42:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_migrate\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/125, 0x7d}, {&(0x7f0000000240)=""/253, 0xfd}], 0x2) fcntl$setsig(r1, 0xa, 0x13) 2018/05/21 21:42:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x80350000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000029200000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) 2018/05/21 21:42:33 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:33 executing program 3: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x4) 2018/05/21 21:42:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffff7f00000000}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000f0ffffff0000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8848, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x4682, 0x0) fanotify_mark(r2, 0x4, 0x2000a, r3, &(0x7f00000002c0)='./file0\x00') ioprio_get$uid(0x3, r1) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = socket$rds(0x15, 0x5, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) poll(&(0x7f0000000140)=[{r4}], 0x1, 0x9) 2018/05/21 21:42:33 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:33 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x20000010}, 0x1}, 0x0) 2018/05/21 21:42:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4924adb, [{}]}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x200, 0x2, [0x80000000, 0xff44]}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000340)=0x84) 2018/05/21 21:42:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000ffffff9e0000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x1) setrlimit(0x7, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 2018/05/21 21:42:34 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x19f4, 0x40080) getpeername$llc(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0xffffffffffffff5c) r1 = socket(0x3, 0x80006, 0x80) getpeername(r0, &(0x7f00000004c0)=@alg, &(0x7f0000000540)=0x80) connect$nfc_llcp(r0, &(0x7f0000000440)={0x27, 0x0, 0x1, 0x7, 0xf6, 0x100, "3fffcc94f2a20986ac59e4a41ef13bbb5bba973f87c15d24c6adb1fed56d6b2dd8ab11026f4f617908aef45c7fda59a9fbbf18b297b72f723633e853c75b1d", 0x30}, 0x60) ioctl(r1, 0x8914, &(0x7f0000000240)="c626262c8523bf012cf66f") openat(r0, &(0x7f0000000080)='./file0\x00', 0x2002, 0x20) getuid() r2 = socket$rds(0x15, 0x5, 0x0) pread64(r1, &(0x7f0000000280)=""/224, 0xe0, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'teql0\x00', 0x800}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000003c0)={0x1, 0x1f, 0x7f}) poll(&(0x7f0000000380)=[{r1, 0x2}], 0x1, 0x4) 2018/05/21 21:42:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/05/21 21:42:34 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x6488, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x20000110}, 0x1}, 0x0) 2018/05/21 21:42:34 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000f00000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x689, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x7ffff000}, 0x1}, 0x0) 2018/05/21 21:42:34 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/05/21 21:42:34 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0xfffffffffffffffa, 0x400) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000300)=""/23) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="f3", 0x1, r0) keyctl$invalidate(0x15, r2) keyctl$reject(0x13, r2, 0x7fff, 0x20, r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000240)=""/119, &(0x7f0000000180)=0x77) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0xfffffffffffffff9, 0x6, 0xbce, 0x3]}) 2018/05/21 21:42:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000020000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:34 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:34 executing program 3: r0 = socket(0xa, 0x3, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x4502) 2018/05/21 21:42:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8035000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/05/21 21:42:34 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:34 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x655, 0x800) getsockopt$inet_tcp_buf(r0, 0x6, 0x16, &(0x7f00000012c0)=""/67, &(0x7f0000000180)=0x43) r1 = socket(0x40000000015, 0x5, 0x0) getpeername$ipx(r1, &(0x7f0000000100), &(0x7f00000000c0)=0x10) r2 = socket(0x8, 0x3, 0x9) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001340)={0x0, 0x1000, "4c1dea1e37dc4329aea7e5f922637d23f74e47c7f87563994e02e66e5b633492f8af63cd1bc17df784830cee64a4f7fe76c8eebae5fda24cd393a4d09fc94a48fba48d754bfc822e9c82504a3ba82b8d9b4e0f4ac38478e4224d1b89e60f53e49e5ba6f3bb517391d5cf34af6a949d46a7ba0b8ea9d89f07b81fb75495eede32b5b048f1c7b05b847bd3ca966961904d5810a346c8398a43ce9f1282941a4aeebdca9fa69390f0162326eed19a6d94a5326b3e9bea0506a905de58de4bb8b0e2bad4c7bdef30f636e2d12fb456c54e2c3e628abf7741462f55859816613de9750bd60d69cb33000b77f387c51e800d2a17ffa98e62fa8d3b496a4b92c36dae1a0736576c7883ca9e850e39f66671a80a263fd9b4c84cd07627819d644feb53d287df0c604e40de12205c655f135d59083856d00c383804a3a1833ecf5e0e2a92b4de2ac787ec79324aa7a76ef5ea7044aec20d3d630fbdc800058dfa044d86ddfe8077f1fab3de502a2cc3c06349895b1d93366d286746312860966380195b0f9fca725e10fab2043897a791015d7689ffc31e7847ada29b424b62d19c6ba1e05f6d92c5a875660aacb467ca022280ba7cbd5647863e912ef25fa7cc4b50a25c6502e4c3262156bca359cd64d46274109541df1b354479dae3af6395a7a4ddecd4ae29924490ef1c3d4535d4c1e8cf84a8fba38cff68b2d31785e3952c6bb1a6d7ced76c4994122fce43310b1fd0ff48380756a43bd2029bcab75c49c67c72de287c50d2908d19244e46e3d3097b54388d87e6b49e315951c73011931cb1498aed61e2b7fbcd0e00e7ee5c843e375a73d2c20817831fa6f9d46ebed50063cebc6199e04519a7396b6fe6ffaf5d81707d2b464770675d4c2d52109a1e2397dc810a8161512fa65fcab5344ffa077718d2d88e84575bb3478598dd68465b4ba5722d8d386974c9dc3e1e93959e79c7f83d2e6fb8554a215a8858c73d4ed955071f1523b11198facf66fd260e1160e997491670908d9bc6290edb5bad6352b2942ac0de33a6cc91c9f4adad46cdf638f135fc77f5f2cbced3bebc4fc7c9ef0cd78d4f48a2361df07fd6fa06567d03c111e4111669c171503d170e27217dc4d0b3ba1d00c445d43109e56df96bb30f14a8b041b23cc813d6bd6faae65c4411f2f15f0f9af1b1e79e3cd0444ff52f1329db618a97ef44b18908576b328020f2ec5161a9292f809a4ebd2b070e642447a96df4fc3b4da991ea1d60ed0c4a4f9ab053f85c38a696b046706d8ab870ad7c7ca014d7db8d9a89334a014ef304ad09310accb102560b43d4e6912d3f4c5d31cb9054343bca9c793191dd44ab8d99ebffa5f7bda561b309297184b41b87a09763b024b34b90da79df2bf7c7948a8f2abcf8361388cea1884dcb61a683ecafc0c93b94eddf567a546f2c0b3f107ee238981851a38e3d9e6732d97f72241acaeb70c6534aa58f2975ae1e7135a1d3a2cda61d76e6f6d990e3c70ce171db8bf5e038e048fbfd1bf98a4d0bec94d18f1257ed007d5f6b45805803f2fab4dfbb1d2de1779a5bb227f01a9971545627e5219bc5cfb22f610339d9c4b9d79a9d3ea0f1f2358a68ffce6a529ce988e264572aa1ba8795704d0edd36ab0e6ca6d0e053caeee9e07f43ec45c70997379d9c4b8c5ec6078d76b9928967983431efab7842e563a5dc8fb919da2beaceba00eb154cc0ff88f2ed1580e444b29d00c3435aea1a5c7cd03d0515c8115656c4954e3aaa3873e5bba5149dc080d9aae02c178f9107438fd0c598e02955cfd3633f0fc947fb663b69212649cb4430ad4b9fd5aef8aa31d546c15be487bfc2ba3146b072f41ff28fdc76fbb7282345151c9844b3338b64f034e6778375560cd6e83c1f3fdda77462a1262fa3e88b5342b99ada9e854a4922fdf5555d104e2cc1af4a7ba8aa2a046ec7e2fde944e09a6f6c5baca5e9e3aca9e1c99923748a17dcc7ffbc1a0271a4ac538a2d45a29b5c8257824d18673f496bc948ac1522b4f31ab9530315f246bc4ef87b70f5d3e304dadc8792cc5fb63927912466fe441370efa06370cc6b2f37c54f06be39b428e915d6c865105df62ef3842e3bbe11ce62138a0d0d92f59b6e54d909e49bc60f81c3e17c06fcb727d988bd9632af27f4cadaf9d431c599c3110f40d21ba424fe3b6101a38b6cfb138bba70a4ecc3c2fdd50ef2f62c6e9af74f2893ec220fedb031476f4dce510957d017422806d531084f3ddcb122d4ddf0839b03bdb5190bc3226e7d6b29ceffa6e30950817da9f857b75f82c919bdd71d629bc68c32f3c54228ab34d36445941af057b86c72265ff3ff0ba50d2e4e728f00228fd8a229073c96f84da38ab1fa3a52eda850a627cff0a748172811606f543fc7ca348d2d6e25a7eece980e2142d3be56aaaba2600f6d555930036cb4672486ec57f3289fd809cc488a3da111bd5d65c22e4fd4288c511171f73b2090b1187dc364d13c19f4bcddceba5bee615de4844fd31df52963cfa6b8607dc8925a7d2f66fe7729bc16bf28fbcaa44d73aafd68ed9ef9ecf5cf0eccf561edb9d82dfa9b7ea88524d007759ad6d135511689f6741f659802eb204407f5dcbe88788a7c3c8cbc57c5c6560ab3306af341b4db218054619c9ddf6edb9786ae8c3570c965e24c2b77ca48ee290503fe5778116708f3a95c2170bab388fd59f2e446596587a9cdcdb4249b4aa4081ca4eac062d9d77f3409075b188013137f356de268596f9cf413d7f48eb2223261e3f1c697abb8773cbc20929e7b9ae656384941b84b46418539a795e640aaddc1b4dca8559713ce68b5f0169d29efe593474657a3836109b94d5b9476c4e8d369f4455387cffb83470c11e75ecee8d69621bd71e0a719337dca4312c90c67a9823ff349284994a4c08b65756ecf87afc85f3b70b8a3e2c3b8f35c33a01db824a3bec7fe17ce5bee20ace444369f6a8825e3dfc847b1f74a4e294a34c8faa107e872e2ba3fa06305f923ef06ecba20e4ac049bb9da77ec30c0277c40c2ddaa3d992939f83084552052f1173b8d45c337f7f92ac61209b63086967e315e6be4cf6ca7c0364fb0359eecf5d48a55a499e2e5cdc7be9e525d7383f1be2067dca28290eb5e3be10f3c78ed759081ece66a82b42afcaf9db50e533dc8ee1458e1a3451a2a9d8fd5d23c9efaf2accef5d93fb582cfe22b1be598365e4058191dd9c0e83337d1f852ded54fb20af38263666b31ea9106a6c2dc0ec24e7c9a3e558375d6a52f2fdeb4b3666fdd296ca3223761c0da86aca8b04dcf80fcb4b4044e779ccf3905014c2e1508a4f107c785bff12f2a1cdede57b02f4c1f53f1e8fe39f27c384281d240262b36461d6b1e739797a15a68653b7514bccfc903704cab1dace31caf51510f63d8e0dacfba13720fd0aa9f9e86e311262b1fd3c9d816e84302e09a092d4b414f087ed6961e986a51a272daab2b2f39c0ccedc25a44ba9ae05f57c94cd80f7b99bfd3b1d41f8f9d8f427328301c20cf0547f189a46440d96f16eb6d800ca20e16a6a9b7af5f39a8c7e0dffd38ff70f6f45c7b096bae16471899e25c5a6d8f4505f364cd3f659c719a31ec401da0193a51c17bc9628afe82348699cd14dc579d517b544a7e6e0e39baef6acc0eee70e72afbf4eba985bf53e4cc142375b72f0140c31c3736ecca512e3d5d3016805da5cf901fc2f24d9b3e49a8c4981e61316626acb2932c64d946cc21c9135900f2b2e83f5fb411617de780ff41249a5baf64bea861905568e6bb7ba45bac7ceac20ab2469b98cd2cedb48fc8f44d5e6584fae0811a3f7fad1d4c87ad8b057ee8f592f34753ccffe0526064f3aa5b4c8ee56fd923d1e6e54a4aa755004403cee791eaf385f093d9515f517b39800d526a1550535a68447abb9fcd1e334de267abd2b518cdd62f4e2e909813abaf4ca4f836c0a72afa68ff3f396bebb27cc729212b2e986266e7bffd86034d3db47c2b7cdcfb498e3a683ff30beb699f084df7108bf5535fce92136d83671b5e3585f6ac7e46ba6699efdd5553b42d248297f257e24ae6d9f97a788f06e82aef269167e878af83a5dfd2cce6d0ffa5b5d9ae292407f343346e010fc6a32eca42f76e4289dfa7654eaf3cdd7e049f1ee2c01caa46045fb18e295d44096d3433187495b27d37f020bbeb8da095b1ada5bff2102c3cbd352a2ca16d3168ac563e03e5ce8650291bbe2a8e70381e54eaf8064d12c18804f92ca9edd55732f66853391df3541ff6f5c2d35fc04eecc36f2226d91e93357c3b7c722d311d90a4e3cfffcd560fb2ec22bd96a36d4ee698e23b86865b77d432f68d94ec55acbada19cb437bc8a0389dc4ee6b143b074e9b1546c165e4994b4be1433b18decd7fcc7b02540c895a9a1fa29bfc177ef14d164a47fa5b6d8567a372a33670059ef39c6b4e0f80dc04829ce73e4ba639e01400a01a172f44318023ca71ff6e425ccb6805853e82ed8b81c2596e977fed701e005d1e350e065db37009a25a3a59c19dd1e96b330535d3d9484423cdc5604a0f5b9c7291488b150f2307803f7dddda3bd4fb566a5810725da2e3e1ddc0cdd20aaf787708173fce7902125b1dde9fd1b506d4e93a2ae86e70ecc2a28d39433e3ded710dafe599de172aa93c5e6c2dec3ba053381674378418305cbd96b2addf3add2b905b044c3f0545e0691063a34da047fdd5e5e1d2e95c430b195f7bd29ff761301a0f4649af3222904adffeed8c67a0174ec6ceb84eae9c9e3bab80939a6d4cebae4f3773342c4f376f722b65ad82e529f6f6460066bb284a9d9e9e6f44d75f881dcad7aafe2fb1354aa433653766174edece935bc00d7c6c58ab67ae3567b7d2a48e8c7afe167715b83d2a935bf3851bbb53ba05b3dbf92a6f3c4917ae1451ff0dedcaf78cb6242f1d1d483def51f8858c9822af738ebfa7ac60114ac3aa3b79b0301981357a51e61850ded094753879ba6f7659c8ad2168600b5abc1dd65524b6a957d52e72d09e51cceb7e4dac7220898144971715074a6427eb0cc39ee946122a27a073414d5a895e03e3158b901b2f752a8b9c6821040af8819cc1a18b400422f8a25bee566fb50734d204955fb56937039b69a628e564aa9f4cda4fd6c23d27e562eecaea181169dc9d243f501cea7ca64626214e0dce13df7a4c466420b07c52bed498b1b5df8af34a291ef02acc999277e29bf49fa05fe03ab4d27b5e1043b32da70befbfa8718a352d02e2b926b017e6141db91312d0bc1be0713dcd1616c1406d564e9d60e041e70b4b80a00e8ecacf7a299e627ac3562852f0f2129cbcdc5430965830a61ba26e152cb0c0b7331da403f7d3bf7d983d4eee94d257afc976d40d38b7c3c29a641b59efbfc158bbde2aaf77b6f36c162d368ea849e4b2d20c59a73a1c8889e205c648979940b16a3b9afd16252f38492bd6edc504082446b4f8059e7b7d22e8985352c775747b2e0a661347b0f9fdef4a7310f1076d644ed1e1b2934f6443d1d78c887ba20ed9b25f6a7b1f27a8aec317bbd8016ae078efc8e54c6c02b81e32b72d1a94443a06914f3c1b17a4cb145a5c93418a4e0b3a13e342a9052c3e7e9e4d6ca154eaca25dffc01dc43aa2b6a280425a279ee91085d244c12635528853e356a9ec69b34c45d1728fb95a1ec3bff4f85be6ad49e6ae638c8ff2b5ee807ad298d8e693fd0e030179d62ad03b1dc0dc9d7d5ccfe544e43ad1cbb7a0d8cfda72c994174af8eab6acf2ab0076326ff0cb21330abeecdaf23b36be0d3a6d411b4541d8786"}, &(0x7f0000002380)=0x1008) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000023c0)={r3, 0x8}, 0x8) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="129ea6736e0746eb274040bcec175e4e960e06cb8e97d15043169c42f3bcc9a914f432fdd3f67e56c8f05564e8bd19874769ae870e6379a402f6d4a55d20a86a1d4226a9ffbac36faa859bb56761d8cc077c8ffdd313ca244ba6fa66c668afeec4c146d2690aa9b911ddb171e428e2aff05ad7450a76a4da627a0738f5dbc635acf5bd978bc72ed1afc7725822b8538251d96431df87daadc788aacd0d6e2f55e6f13fbdd08f060601404f1215812261ac2d8068e6c7b7808e666f8dff8ba7e0ab003ddb3b80dd7ab534c7bfcf78848b3751b5fa54ee", 0xd6, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="ac1414bb0000000501000000050000000000f200e0000300000000d70714140d00000000f9dbc5cd54d81f61"], 0x24) keyctl$describe(0x6, r4, &(0x7f00000002c0)=""/4096, 0x1000) 2018/05/21 21:42:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0xc0}, 0x1}, 0x0) 2018/05/21 21:42:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x88caffff00000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000200000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:34 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x33fe0}, 0x1}, 0x0) 2018/05/21 21:42:34 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:34 executing program 3: r0 = socket(0xe, 0x1, 0x6) timer_create(0x2, &(0x7f0000000000)={0x0, 0xa, 0x7}, &(0x7f0000000040)=0x0) timer_delete(r1) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) 2018/05/21 21:42:34 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fa2"]) open_by_handle_at(r1, &(0x7f0000000140)={0xf4, 0x6, "70144efc3d7f1619bf4b263ebe789ba07ca62606db897ca5b52aa7ec2c1ed20439d9e3e502c6e96d9720831291efa9e6e8f6baddb38c2fde9a2a72c2b5390052d3acc97ab007b2a62d47691d9956a27b644e6d710cb0a0ce79cea6d4485dff34aa2a718759d3492d6029a140b7423dae4ce8d1eb90e91eeb28bc781728f20a41eaccc75bbb9447c62864f396d90dafa44b6e6170243c65b882b103e64bb0161bebc1ad4b80762f4978a4af95a037fd5d1b64f3cbff48e7e8de600ac84f14945ebea8516cac226643f6dab88525056629c13a748e205cbac30c0a7f41c5a46caa3c81ffa4c40641f3bd5eb14b"}, 0x22000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/21 21:42:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0xf}, 0x1}, 0x0) 2018/05/21 21:42:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000f000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8060000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:34 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000000), 0x0, 0x1) 2018/05/21 21:42:34 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:34 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:34 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:34 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x1fd, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)=@ioapic={0x5000, 0x42, 0x81, 0xfffffffffffffff8, 0x0, [{0x7, 0x7fff, 0xbc, [], 0x800}, {0x4, 0x3, 0x1f, [], 0x1}, {0x1, 0x2, 0x1, [], 0xfffffffffffffeff}, {0x0, 0x7fffffff, 0x4, [], 0x9}, {0x7, 0x7, 0x100000000, [], 0xfffffffffffffe01}, {0xffffffffffffffff, 0x100000001, 0xe78, [], 0x1000}, {0xfffffffffffffeff, 0x9, 0xffffffffffffffff, [], 0x3}, {0x2, 0x7fffffff, 0x7, [], 0x10000}, {0x38, 0x100000001, 0x8001, [], 0x101}, {0x8000, 0x20, 0x1ff, [], 0x2}, {0x0, 0x7fff, 0x233f, [], 0xfffffffffffffff7}, {0x0, 0xc1, 0x7fff, [], 0x1}, {0x7922bf5e, 0x5, 0x2}, {0x4, 0x20, 0x44, [], 0x73e3}, {0xfffffffffffff8c8, 0x1, 0x9, [], 0x20}, {0x4, 0x7, 0x2, [], 0x1}, {0x9, 0xc1b0, 0x2, [], 0xb1}, {0x8aa1, 0x7ff, 0x1f, [], 0xf92}, {0x6, 0x100, 0x0, [], 0x2}, {0x2, 0x8, 0x7f}, {0x4, 0x0, 0x2, [], 0x80}, {0x737, 0x3, 0x401}, {0x2, 0x7e9a, 0x8571, [], 0x1}, {0x2, 0xf17, 0x3, [], 0x9}]}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r3, &(0x7f0000000300)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0xffffffffffff133e, @mcast1={0xff, 0x1, [], 0x1}, 0x60}, {0xa, 0x4e24, 0xffff, @empty, 0xd}, 0x0, [0x9, 0x9, 0x800, 0x0, 0x3e, 0x8, 0x80000000]}, 0x5c) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xdb1, 0x80000) shutdown(r0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000180)=0x40) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x204000000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x5d9395bd, {0x2, 0x4e21}, {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e23, @rand_addr=0xfffffffe}, 0x200, 0xd, 0x1f, 0x9, 0x0, &(0x7f00000000c0)='veth0_to_bond\x00', 0x9, 0x5, 0x7ff}) 2018/05/21 21:42:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0xfffffdef}, 0x1}, 0x0) 2018/05/21 21:42:35 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:35 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:35 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000400fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:35 executing program 3: r0 = socket(0x1000000a, 0x80004, 0x4f) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:35 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8864, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x8}, 0x0) 2018/05/21 21:42:35 executing program 5: bind(0xffffffffffffffff, &(0x7f0000557130)=@generic={0x0, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a53a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f1622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) mremap(&(0x7f00004e9000/0x14000)=nil, 0x14000, 0x4000, 0x2, &(0x7f00004e6000/0x4000)=nil) r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e22, 0x40, @loopback={0x0, 0x1}, 0x10}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x353}}, @in6={0xa, 0x4e21, 0x11bd, @loopback={0x0, 0x1}, 0x4ecd}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}], 0x68) socketpair(0x1000000000016, 0x5, 0x800, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) 2018/05/21 21:42:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000f0ffff00000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:35 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x1c00, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1300}, 0x0) 2018/05/21 21:42:35 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r1}) 2018/05/21 21:42:35 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80, 0x101000) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'bridge_slave_1\x00', 0x5}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9) 2018/05/21 21:42:35 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:35 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000200000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:35 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x6, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x2}, 0x0) 2018/05/21 21:42:35 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1}) 2018/05/21 21:42:35 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:35 executing program 3: r0 = socket(0xfffffffffffffffb, 0xfffffffffffffffe, 0x5) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:35 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:35 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:35 executing program 7 (fault-call:4 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000009effffff00000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x7}, 0x0) [ 343.058289] FAULT_INJECTION: forcing a failure. [ 343.058289] name failslab, interval 1, probability 0, space 0, times 0 [ 343.069953] CPU: 0 PID: 22120 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #62 [ 343.077237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.086593] Call Trace: [ 343.089192] dump_stack+0x1b9/0x294 [ 343.092835] ? dump_stack_print_info.cold.2+0x52/0x52 [ 343.098030] ? __might_sleep+0x95/0x190 [ 343.102022] should_fail.cold.4+0xa/0x1a [ 343.106090] ? graph_lock+0x170/0x170 [ 343.109896] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 343.115010] ? mutex_trylock+0x2a0/0x2a0 [ 343.119063] ? graph_lock+0x170/0x170 [ 343.122850] ? graph_lock+0x170/0x170 [ 343.126633] ? find_held_lock+0x36/0x1c0 [ 343.130681] ? find_held_lock+0x36/0x1c0 [ 343.134726] ? __lock_is_held+0xb5/0x140 [ 343.138776] ? check_same_owner+0x320/0x320 [ 343.143083] ? rcu_note_context_switch+0x710/0x710 [ 343.147995] ? kasan_check_write+0x14/0x20 [ 343.152212] __should_failslab+0x124/0x180 [ 343.156429] should_failslab+0x9/0x14 [ 343.160214] kmem_cache_alloc_trace+0x2cb/0x780 [ 343.164865] ? device_pm_check_callbacks+0x116/0x3f0 [ 343.169952] ? driver_deferred_probe_add_trigger+0x140/0x140 [ 343.175746] ? device_create_file+0x1e0/0x1e0 [ 343.180235] kobject_uevent_env+0x20f/0xea0 [ 343.184555] ? sysfs_remove_group+0xf6/0x1b0 [ 343.188959] kobject_uevent+0x1f/0x30 [ 343.192743] device_del+0x6c9/0xb70 [ 343.196354] ? __device_links_no_driver+0x320/0x320 [ 343.201365] ? mntput+0x74/0xa0 [ 343.204649] ? simple_release_fs+0xa1/0xd0 [ 343.208877] device_unregister+0x15/0x30 [ 343.212930] bdi_unregister+0x62d/0x8e0 [ 343.216891] ? wb_blkcg_offline+0x140/0x140 [ 343.221193] ? _raw_spin_unlock+0x22/0x30 [ 343.225321] ? __lock_is_held+0xb5/0x140 [ 343.229377] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 343.234905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.240432] ? mutex_unlock+0xd/0x10 [ 343.244146] ? kernfs_remove_by_name_ns+0x65/0xb0 [ 343.248983] del_gendisk+0x8b5/0xba0 [ 343.252683] ? wait_for_completion+0x870/0x870 [ 343.257244] ? disk_events_poll_msecs_store+0x200/0x200 [ 343.262586] ? radix_tree_delete_item+0x14d/0x2d0 [ 343.267410] ? radix_tree_lookup+0x30/0x30 [ 343.271624] ? idr_find+0x44/0x50 [ 343.275058] ? loop_lookup+0x102/0x220 [ 343.278932] loop_remove+0x39/0xc0 [ 343.282452] loop_control_ioctl+0x462/0x500 [ 343.286757] ? loop_add+0x9c0/0x9c0 [ 343.290364] ? expand_files.part.8+0x9a0/0x9a0 [ 343.294938] ? kasan_check_write+0x14/0x20 [ 343.299164] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 343.304073] ? wait_for_completion+0x870/0x870 [ 343.308636] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 343.313804] ? loop_add+0x9c0/0x9c0 [ 343.317412] do_vfs_ioctl+0x1cf/0x16a0 [ 343.321297] ? ioctl_preallocate+0x2e0/0x2e0 [ 343.325689] ? fget_raw+0x20/0x20 [ 343.329122] ? __sb_end_write+0xac/0xe0 [ 343.333079] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 343.338608] ? fput+0x130/0x1a0 [ 343.341876] ? ksys_write+0x1a6/0x250 [ 343.345665] ? security_file_ioctl+0x94/0xc0 [ 343.350053] ksys_ioctl+0xa9/0xd0 [ 343.353498] __x64_sys_ioctl+0x73/0xb0 [ 343.357374] do_syscall_64+0x1b1/0x800 [ 343.361240] ? finish_task_switch+0x1ca/0x840 [ 343.365728] ? syscall_return_slowpath+0x5c0/0x5c0 [ 343.370636] ? syscall_return_slowpath+0x30f/0x5c0 [ 343.375555] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 343.380912] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.385746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.390914] RIP: 0033:0x455a09 [ 343.394086] RSP: 002b:00007fe44ba7ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.401793] RAX: ffffffffffffffda RBX: 00007fe44ba7f6d4 RCX: 0000000000455a09 [ 343.409048] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000013 [ 343.416297] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 343.423549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 343.430799] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000000 2018/05/21 21:42:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x3, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:36 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c85230a20acf66f") open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x83) bind$netrom(r0, &(0x7f0000000140)=@ax25={0x3, {"867e273b07312f"}}, 0xffffffffffffff2b) r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000180)=[{r1, 0x2000}], 0x1, 0x9) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x300) accept4$netrom(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) 2018/05/21 21:42:36 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000002fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x4}, 0x0) 2018/05/21 21:42:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:36 executing program 7 (fault-call:4 fault-nth:1): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) [ 343.556468] FAULT_INJECTION: forcing a failure. [ 343.556468] name failslab, interval 1, probability 0, space 0, times 0 [ 343.567839] CPU: 0 PID: 22145 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #62 [ 343.575114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.584467] Call Trace: [ 343.587067] dump_stack+0x1b9/0x294 [ 343.590703] ? dump_stack_print_info.cold.2+0x52/0x52 [ 343.595900] ? kernel_text_address+0x79/0xf0 [ 343.600316] ? __unwind_start+0x166/0x330 [ 343.604469] ? __kernel_text_address+0xd/0x40 [ 343.608975] should_fail.cold.4+0xa/0x1a [ 343.613047] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 343.618164] ? save_stack+0xa9/0xd0 [ 343.621792] ? graph_lock+0x170/0x170 [ 343.625585] ? kasan_kmalloc+0xc4/0xe0 [ 343.629481] ? kmem_cache_alloc_trace+0x152/0x780 [ 343.634340] ? kobject_uevent_env+0x20f/0xea0 [ 343.638836] ? kobject_uevent+0x1f/0x30 [ 343.642804] ? device_del+0x6c9/0xb70 [ 343.646602] ? device_unregister+0x15/0x30 [ 343.650843] ? find_held_lock+0x36/0x1c0 2018/05/21 21:42:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000fffffff000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:36 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0xffff, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) 2018/05/21 21:42:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x608, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:36 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r1}) [ 343.654908] ? __lock_is_held+0xb5/0x140 [ 343.658983] ? check_same_owner+0x320/0x320 [ 343.663315] ? rcu_note_context_switch+0x710/0x710 [ 343.668258] __should_failslab+0x124/0x180 [ 343.672500] should_failslab+0x9/0x14 [ 343.676290] __kmalloc+0x2c8/0x760 [ 343.679817] ? kobject_uevent_env+0x20f/0xea0 [ 343.684294] ? rcu_read_lock_sched_held+0x108/0x120 [ 343.689292] ? kobject_get_path+0xc2/0x1a0 [ 343.693516] kobject_get_path+0xc2/0x1a0 [ 343.697578] kobject_uevent_env+0x234/0xea0 [ 343.701896] ? sysfs_remove_group+0xf6/0x1b0 [ 343.706300] kobject_uevent+0x1f/0x30 [ 343.710090] device_del+0x6c9/0xb70 [ 343.713701] ? __device_links_no_driver+0x320/0x320 [ 343.718698] ? mntput+0x74/0xa0 [ 343.721960] ? simple_release_fs+0xa1/0xd0 [ 343.726192] device_unregister+0x15/0x30 [ 343.730241] bdi_unregister+0x62d/0x8e0 [ 343.734204] ? wb_blkcg_offline+0x140/0x140 [ 343.738506] ? _raw_spin_unlock+0x22/0x30 [ 343.742641] ? __lock_is_held+0xb5/0x140 [ 343.746686] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 343.752209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.757740] ? mutex_unlock+0xd/0x10 [ 343.761445] ? kernfs_remove_by_name_ns+0x65/0xb0 [ 343.766271] del_gendisk+0x8b5/0xba0 [ 343.769963] ? wait_for_completion+0x870/0x870 [ 343.774528] ? disk_events_poll_msecs_store+0x200/0x200 [ 343.779884] ? radix_tree_delete_item+0x14d/0x2d0 [ 343.784707] ? radix_tree_lookup+0x30/0x30 [ 343.788934] ? idr_find+0x44/0x50 [ 343.792368] ? loop_lookup+0x102/0x220 [ 343.796243] loop_remove+0x39/0xc0 [ 343.799766] loop_control_ioctl+0x462/0x500 [ 343.804067] ? loop_add+0x9c0/0x9c0 [ 343.807682] ? expand_files.part.8+0x9a0/0x9a0 [ 343.812255] ? kasan_check_write+0x14/0x20 [ 343.816480] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 343.821391] ? wait_for_completion+0x870/0x870 [ 343.825953] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 343.831122] ? loop_add+0x9c0/0x9c0 [ 343.834732] do_vfs_ioctl+0x1cf/0x16a0 [ 343.838604] ? ioctl_preallocate+0x2e0/0x2e0 [ 343.843006] ? fget_raw+0x20/0x20 [ 343.846453] ? __sb_end_write+0xac/0xe0 [ 343.850426] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 343.855941] ? fput+0x130/0x1a0 [ 343.859202] ? ksys_write+0x1a6/0x250 [ 343.862987] ? security_file_ioctl+0x94/0xc0 [ 343.867379] ksys_ioctl+0xa9/0xd0 [ 343.870827] __x64_sys_ioctl+0x73/0xb0 [ 343.874712] do_syscall_64+0x1b1/0x800 [ 343.878584] ? finish_task_switch+0x1ca/0x840 [ 343.883070] ? syscall_return_slowpath+0x5c0/0x5c0 [ 343.887987] ? syscall_return_slowpath+0x30f/0x5c0 [ 343.892919] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 343.898265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.903100] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/05/21 21:42:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x9}, 0x0) [ 343.908269] RIP: 0033:0x455a09 [ 343.911441] RSP: 002b:00007fe44ba7ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.919151] RAX: ffffffffffffffda RBX: 00007fe44ba7f6d4 RCX: 0000000000455a09 [ 343.926405] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000013 [ 343.933653] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 343.940902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 343.948174] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000001 2018/05/21 21:42:36 executing program 7 (fault-call:4 fault-nth:2): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 344.118758] FAULT_INJECTION: forcing a failure. [ 344.118758] name failslab, interval 1, probability 0, space 0, times 0 [ 344.130210] CPU: 0 PID: 22173 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #62 [ 344.137491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.146853] Call Trace: [ 344.149458] dump_stack+0x1b9/0x294 [ 344.153100] ? dump_stack_print_info.cold.2+0x52/0x52 [ 344.158298] ? kernel_text_address+0x79/0xf0 [ 344.162716] ? __unwind_start+0x166/0x330 2018/05/21 21:42:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000f0000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:36 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r1}) 2018/05/21 21:42:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xf0ffffffffffff, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 344.166877] ? __kernel_text_address+0xd/0x40 [ 344.171388] should_fail.cold.4+0xa/0x1a [ 344.175495] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 344.180613] ? save_stack+0xa9/0xd0 [ 344.184254] ? graph_lock+0x170/0x170 [ 344.188057] ? kasan_kmalloc+0xc4/0xe0 [ 344.191932] ? kmem_cache_alloc_trace+0x152/0x780 [ 344.196778] ? kobject_uevent_env+0x20f/0xea0 [ 344.201280] ? kobject_uevent+0x1f/0x30 [ 344.205257] ? device_del+0x6c9/0xb70 [ 344.209062] ? device_unregister+0x15/0x30 [ 344.213306] ? find_held_lock+0x36/0x1c0 [ 344.217368] ? __lock_is_held+0xb5/0x140 [ 344.221435] ? check_same_owner+0x320/0x320 [ 344.225753] ? do_raw_spin_unlock+0x9e/0x2e0 [ 344.230151] ? rcu_note_context_switch+0x710/0x710 [ 344.235065] __should_failslab+0x124/0x180 [ 344.239283] should_failslab+0x9/0x14 [ 344.243065] __kmalloc+0x2c8/0x760 [ 344.246595] ? kobject_uevent_env+0x20f/0xea0 [ 344.251090] ? rcu_read_lock_sched_held+0x108/0x120 [ 344.256090] ? kobject_get_path+0xc2/0x1a0 [ 344.260320] kobject_get_path+0xc2/0x1a0 [ 344.264363] kobject_uevent_env+0x234/0xea0 [ 344.268669] ? sysfs_remove_group+0xf6/0x1b0 [ 344.273062] kobject_uevent+0x1f/0x30 [ 344.276844] device_del+0x6c9/0xb70 [ 344.280462] ? __device_links_no_driver+0x320/0x320 [ 344.285493] ? mntput+0x74/0xa0 [ 344.288769] ? simple_release_fs+0xa1/0xd0 [ 344.292994] device_unregister+0x15/0x30 [ 344.297045] bdi_unregister+0x62d/0x8e0 [ 344.301003] ? wb_blkcg_offline+0x140/0x140 [ 344.305315] ? _raw_spin_unlock+0x22/0x30 [ 344.309455] ? __lock_is_held+0xb5/0x140 [ 344.313501] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.319022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.324540] ? mutex_unlock+0xd/0x10 [ 344.328241] ? kernfs_remove_by_name_ns+0x65/0xb0 [ 344.333065] del_gendisk+0x8b5/0xba0 [ 344.336759] ? wait_for_completion+0x870/0x870 [ 344.341322] ? disk_events_poll_msecs_store+0x200/0x200 [ 344.346668] ? radix_tree_delete_item+0x14d/0x2d0 [ 344.351492] ? radix_tree_lookup+0x30/0x30 [ 344.355707] ? idr_find+0x44/0x50 [ 344.359141] ? loop_lookup+0x102/0x220 [ 344.363013] loop_remove+0x39/0xc0 [ 344.366534] loop_control_ioctl+0x462/0x500 [ 344.370838] ? loop_add+0x9c0/0x9c0 [ 344.374448] ? expand_files.part.8+0x9a0/0x9a0 [ 344.379011] ? kasan_check_write+0x14/0x20 [ 344.383228] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 344.388142] ? wait_for_completion+0x870/0x870 [ 344.392726] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 344.397904] ? loop_add+0x9c0/0x9c0 [ 344.401514] do_vfs_ioctl+0x1cf/0x16a0 [ 344.405384] ? ioctl_preallocate+0x2e0/0x2e0 [ 344.409773] ? fget_raw+0x20/0x20 [ 344.413218] ? __sb_end_write+0xac/0xe0 [ 344.417185] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 344.422701] ? fput+0x130/0x1a0 [ 344.426047] ? ksys_write+0x1a6/0x250 [ 344.429830] ? security_file_ioctl+0x94/0xc0 [ 344.434219] ksys_ioctl+0xa9/0xd0 [ 344.437656] __x64_sys_ioctl+0x73/0xb0 [ 344.441527] do_syscall_64+0x1b1/0x800 [ 344.445398] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 344.450234] ? syscall_return_slowpath+0x5c0/0x5c0 [ 344.455145] ? syscall_return_slowpath+0x30f/0x5c0 [ 344.460066] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 344.465438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.470277] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.475454] RIP: 0033:0x455a09 [ 344.478638] RSP: 002b:00007fe44ba7ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.486349] RAX: ffffffffffffffda RBX: 00007fe44ba7f6d4 RCX: 0000000000455a09 [ 344.493604] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000013 [ 344.500862] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 344.508109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 344.515361] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000002 2018/05/21 21:42:37 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:37 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x3, &(0x7f0000000300)="c626262c8523bf012cf66fe119a3e921a043d985b23e80660afdbe8d968666e8fdc12b8b77c08aaa88a9ca9a52a99289920fef6c31be2fe6d00e7f8b51bc4499499ad2bfa875b80f0ff5b44af17b9515472439086034a44906480aea9655fc5d50e149fd82") r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)=0x9, 0x4) r2 = memfd_create(&(0x7f0000000380)='/dev/sequencer2\x00', 0x2) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000003c0)=""/174) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000280)={0x20002000}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200)={0x3, 0x52bde50a, 0x1, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x9, 0x4) getdents(r2, &(0x7f00000004c0)=""/60, 0x3c) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000002c0)=0x10001) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000180)=0x4) syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0xa068, 0x2) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r0, 0x1, 0x3f, 0x27) fchownat(r2, &(0x7f0000000500)='./file0\x00', r4, r5, 0x100) 2018/05/21 21:42:37 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x2}, 0x0) 2018/05/21 21:42:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x4305000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:37 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:37 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:37 executing program 7 (fault-call:4 fault-nth:3): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000292000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 344.734009] FAULT_INJECTION: forcing a failure. [ 344.734009] name failslab, interval 1, probability 0, space 0, times 0 [ 344.745517] CPU: 0 PID: 22205 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #62 [ 344.752795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.762152] Call Trace: [ 344.764752] dump_stack+0x1b9/0x294 [ 344.768396] ? dump_stack_print_info.cold.2+0x52/0x52 [ 344.773581] ? kernel_text_address+0x79/0xf0 [ 344.777975] ? __unwind_start+0x166/0x330 [ 344.782104] ? __kernel_text_address+0xd/0x40 [ 344.786581] should_fail.cold.4+0xa/0x1a [ 344.790622] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 344.795708] ? save_stack+0xa9/0xd0 [ 344.799315] ? graph_lock+0x170/0x170 [ 344.803095] ? kasan_kmalloc+0xc4/0xe0 [ 344.806960] ? kmem_cache_alloc_trace+0x152/0x780 [ 344.811779] ? kobject_uevent_env+0x20f/0xea0 [ 344.816250] ? kobject_uevent+0x1f/0x30 [ 344.820204] ? device_del+0x6c9/0xb70 [ 344.823983] ? device_unregister+0x15/0x30 [ 344.828197] ? find_held_lock+0x36/0x1c0 [ 344.832241] ? __lock_is_held+0xb5/0x140 [ 344.836290] ? check_same_owner+0x320/0x320 [ 344.840592] ? rcu_note_context_switch+0x710/0x710 [ 344.845501] __should_failslab+0x124/0x180 [ 344.849715] should_failslab+0x9/0x14 [ 344.853493] __kmalloc+0x2c8/0x760 [ 344.857013] ? kobject_uevent_env+0x20f/0xea0 [ 344.861489] ? rcu_read_lock_sched_held+0x108/0x120 [ 344.866484] ? kobject_get_path+0xc2/0x1a0 [ 344.870698] kobject_get_path+0xc2/0x1a0 [ 344.874740] kobject_uevent_env+0x234/0xea0 [ 344.879042] ? sysfs_remove_group+0xf6/0x1b0 [ 344.883432] kobject_uevent+0x1f/0x30 [ 344.887213] device_del+0x6c9/0xb70 [ 344.890820] ? __device_links_no_driver+0x320/0x320 [ 344.895813] ? mntput+0x74/0xa0 [ 344.899075] ? simple_release_fs+0xa1/0xd0 [ 344.903291] device_unregister+0x15/0x30 [ 344.907331] bdi_unregister+0x62d/0x8e0 [ 344.911287] ? wb_blkcg_offline+0x140/0x140 [ 344.915604] ? __lock_is_held+0xb5/0x140 [ 344.919651] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.925178] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.930701] ? mutex_unlock+0xd/0x10 [ 344.934398] ? kernfs_remove_by_name_ns+0x65/0xb0 [ 344.939223] del_gendisk+0x8b5/0xba0 [ 344.942914] ? wait_for_completion+0x870/0x870 [ 344.947476] ? disk_events_poll_msecs_store+0x200/0x200 [ 344.952816] ? radix_tree_delete_item+0x14d/0x2d0 [ 344.957644] ? radix_tree_lookup+0x30/0x30 [ 344.961858] ? idr_find+0x44/0x50 [ 344.965294] ? loop_lookup+0x102/0x220 [ 344.969165] loop_remove+0x39/0xc0 [ 344.972692] loop_control_ioctl+0x462/0x500 [ 344.976991] ? loop_add+0x9c0/0x9c0 [ 344.980594] ? expand_files.part.8+0x9a0/0x9a0 [ 344.985155] ? kasan_check_write+0x14/0x20 [ 344.989372] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 344.994281] ? wait_for_completion+0x870/0x870 [ 344.998843] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 345.004008] ? loop_add+0x9c0/0x9c0 [ 345.007614] do_vfs_ioctl+0x1cf/0x16a0 [ 345.011484] ? ioctl_preallocate+0x2e0/0x2e0 [ 345.015870] ? fget_raw+0x20/0x20 [ 345.019305] ? __sb_end_write+0xac/0xe0 [ 345.023259] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 345.028779] ? fput+0x130/0x1a0 [ 345.032038] ? ksys_write+0x1a6/0x250 [ 345.035819] ? security_file_ioctl+0x94/0xc0 [ 345.040205] ksys_ioctl+0xa9/0xd0 [ 345.043640] __x64_sys_ioctl+0x73/0xb0 [ 345.047515] do_syscall_64+0x1b1/0x800 [ 345.051393] ? finish_task_switch+0x1ca/0x840 [ 345.055867] ? syscall_return_slowpath+0x5c0/0x5c0 [ 345.060778] ? syscall_return_slowpath+0x30f/0x5c0 [ 345.065865] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 345.071220] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.076044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.081212] RIP: 0033:0x455a09 [ 345.084379] RSP: 002b:00007fe44ba7ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.092068] RAX: ffffffffffffffda RBX: 00007fe44ba7f6d4 RCX: 0000000000455a09 [ 345.099317] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000013 [ 345.106564] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 345.113813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 345.121061] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000003 2018/05/21 21:42:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000009202000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:37 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:37 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:37 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/05/21 21:42:37 executing program 7 (fault-call:4 fault-nth:4): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:37 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) readahead(r1, 0x5, 0x101) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9) prctl$setname(0xf, &(0x7f0000000040)='keyring])\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 2018/05/21 21:42:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x1000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:37 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x100000000000000}, 0x0) 2018/05/21 21:42:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000fffff00000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:38 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/05/21 21:42:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xc0ffffff, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:38 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x400000000000000}, 0x0) 2018/05/21 21:42:38 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r1}) 2018/05/21 21:42:38 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:38 executing program 6 (fault-call:4 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000029200000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 345.411627] FAULT_INJECTION: forcing a failure. [ 345.411627] name failslab, interval 1, probability 0, space 0, times 0 [ 345.423312] CPU: 1 PID: 22242 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #62 [ 345.430590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.439941] Call Trace: [ 345.442543] dump_stack+0x1b9/0x294 [ 345.446183] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.451379] ? is_bpf_text_address+0xd7/0x170 [ 345.455886] ? kernel_text_address+0x79/0xf0 [ 345.460302] ? __unwind_start+0x166/0x330 [ 345.464449] should_fail.cold.4+0xa/0x1a [ 345.468498] ? __save_stack_trace+0x7e/0xd0 [ 345.472807] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.477903] ? graph_lock+0x170/0x170 [ 345.481701] ? save_stack+0x43/0xd0 [ 345.485309] ? kasan_kmalloc+0xc4/0xe0 [ 345.489182] ? kasan_slab_alloc+0x12/0x20 [ 345.493328] ? find_held_lock+0x36/0x1c0 [ 345.497375] ? __lock_is_held+0xb5/0x140 [ 345.501420] ? radeon_ib_get+0x340/0x370 [ 345.505496] ? check_same_owner+0x320/0x320 [ 345.509816] ? rcu_note_context_switch+0x710/0x710 [ 345.515100] __should_failslab+0x124/0x180 [ 345.519326] should_failslab+0x9/0x14 [ 345.523114] kmem_cache_alloc_node_trace+0x26f/0x770 [ 345.528208] __kmalloc_node_track_caller+0x33/0x70 [ 345.533133] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 345.537877] __alloc_skb+0x14d/0x780 [ 345.541582] ? skb_scrub_packet+0x580/0x580 [ 345.545889] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 345.551069] ? netlink_has_listeners+0x2ff/0x4c0 [ 345.555809] ? netlink_tap_init_net+0x3c0/0x3c0 [ 345.560481] kobject_uevent_env+0x801/0xea0 [ 345.564799] ? sysfs_remove_group+0xf6/0x1b0 [ 345.569222] kobject_uevent+0x1f/0x30 [ 345.573024] device_del+0x6c9/0xb70 [ 345.576641] ? __device_links_no_driver+0x320/0x320 [ 345.581639] ? mntput+0x74/0xa0 [ 345.584902] ? simple_release_fs+0xa1/0xd0 [ 345.589120] device_unregister+0x15/0x30 [ 345.593164] bdi_unregister+0x62d/0x8e0 [ 345.597122] ? wb_blkcg_offline+0x140/0x140 [ 345.601424] ? _raw_spin_unlock+0x22/0x30 [ 345.605563] ? __lock_is_held+0xb5/0x140 [ 345.609613] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.615137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.620661] ? mutex_unlock+0xd/0x10 [ 345.624358] ? kernfs_remove_by_name_ns+0x65/0xb0 [ 345.629185] del_gendisk+0x8b5/0xba0 [ 345.632882] ? wait_for_completion+0x870/0x870 [ 345.637460] ? disk_events_poll_msecs_store+0x200/0x200 [ 345.642825] ? radix_tree_delete_item+0x14d/0x2d0 [ 345.647648] ? radix_tree_lookup+0x30/0x30 [ 345.651870] ? idr_find+0x44/0x50 [ 345.655319] ? loop_lookup+0x102/0x220 [ 345.659192] loop_remove+0x39/0xc0 [ 345.662716] loop_control_ioctl+0x462/0x500 [ 345.667020] ? loop_add+0x9c0/0x9c0 [ 345.670653] ? expand_files.part.8+0x9a0/0x9a0 [ 345.675229] ? kasan_check_write+0x14/0x20 [ 345.679461] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 345.684384] ? wait_for_completion+0x870/0x870 [ 345.688949] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 345.694120] ? loop_add+0x9c0/0x9c0 [ 345.697730] do_vfs_ioctl+0x1cf/0x16a0 [ 345.701605] ? ioctl_preallocate+0x2e0/0x2e0 [ 345.706001] ? fget_raw+0x20/0x20 [ 345.709437] ? __sb_end_write+0xac/0xe0 [ 345.713424] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 345.718943] ? fput+0x130/0x1a0 [ 345.722203] ? ksys_write+0x1a6/0x250 [ 345.725991] ? security_file_ioctl+0x94/0xc0 [ 345.730391] ksys_ioctl+0xa9/0xd0 [ 345.733835] __x64_sys_ioctl+0x73/0xb0 [ 345.737708] do_syscall_64+0x1b1/0x800 [ 345.741580] ? finish_task_switch+0x1ca/0x840 [ 345.746056] ? syscall_return_slowpath+0x5c0/0x5c0 [ 345.750968] ? syscall_return_slowpath+0x30f/0x5c0 [ 345.755884] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 345.761244] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.766090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.771277] RIP: 0033:0x455a09 [ 345.774450] RSP: 002b:00007fe44ba7ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.782139] RAX: ffffffffffffffda RBX: 00007fe44ba7f6d4 RCX: 0000000000455a09 [ 345.789396] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000013 [ 345.796655] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 345.803909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 345.811170] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000004 2018/05/21 21:42:38 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x900}, 0x0) 2018/05/21 21:42:38 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/05/21 21:42:38 executing program 7 (fault-call:4 fault-nth:5): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xd000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000ffffff9e00000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:38 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:38 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:38 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r1}) [ 346.028922] FAULT_INJECTION: forcing a failure. [ 346.028922] name failslab, interval 1, probability 0, space 0, times 0 [ 346.040247] CPU: 0 PID: 22275 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #62 [ 346.047530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.056881] Call Trace: [ 346.059466] dump_stack+0x1b9/0x294 [ 346.063079] ? dump_stack_print_info.cold.2+0x52/0x52 [ 346.068248] ? lock_downgrade+0x8e0/0x8e0 [ 346.072392] should_fail.cold.4+0xa/0x1a [ 346.076435] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 346.081530] ? graph_lock+0x170/0x170 [ 346.085313] ? kernel_text_address+0x79/0xf0 [ 346.089719] ? __unwind_start+0x166/0x330 [ 346.093855] ? __kernel_text_address+0xd/0x40 [ 346.098336] ? find_held_lock+0x36/0x1c0 [ 346.102404] ? __lock_is_held+0xb5/0x140 [ 346.106492] ? check_same_owner+0x320/0x320 [ 346.110814] ? device_unregister+0x15/0x30 [ 346.115053] ? bdi_unregister+0x62d/0x8e0 [ 346.119204] ? del_gendisk+0x8b5/0xba0 [ 346.123087] ? rcu_note_context_switch+0x710/0x710 [ 346.128006] ? ksys_ioctl+0xa9/0xd0 [ 346.131624] ? __x64_sys_ioctl+0x73/0xb0 [ 346.135676] ? do_syscall_64+0x1b1/0x800 [ 346.139732] __should_failslab+0x124/0x180 [ 346.143960] should_failslab+0x9/0x14 [ 346.147763] kmem_cache_alloc+0x2af/0x760 [ 346.151912] skb_clone+0x1ed/0x4f0 [ 346.155437] ? refcount_add_not_zero+0x250/0x320 [ 346.160189] ? skb_split+0x11d0/0x11d0 [ 346.164076] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 346.169091] ? netlink_trim+0x1b2/0x370 [ 346.173047] ? netlink_skb_destructor+0x210/0x210 [ 346.177875] ? cleanup_uevent_env+0x40/0x40 [ 346.182197] netlink_broadcast_filtered+0x1024/0x1580 [ 346.187394] ? __netlink_sendskb+0xd0/0xd0 [ 346.191619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.197141] ? refcount_inc_not_zero+0x1dd/0x2d0 [ 346.201885] ? refcount_add_not_zero+0x320/0x320 [ 346.206622] ? cleanup_uevent_env+0x40/0x40 [ 346.210939] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 346.216003] kobject_uevent_env+0x6e4/0xea0 [ 346.220316] ? sysfs_remove_group+0xf6/0x1b0 [ 346.224717] kobject_uevent+0x1f/0x30 [ 346.228518] device_del+0x6c9/0xb70 [ 346.232136] ? __device_links_no_driver+0x320/0x320 [ 346.237132] ? mntput+0x74/0xa0 [ 346.240403] ? simple_release_fs+0xa1/0xd0 [ 346.244624] device_unregister+0x15/0x30 [ 346.248675] bdi_unregister+0x62d/0x8e0 [ 346.252641] ? wb_blkcg_offline+0x140/0x140 [ 346.256952] ? _raw_spin_unlock+0x22/0x30 [ 346.261087] ? __lock_is_held+0xb5/0x140 [ 346.265132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.270652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.276171] ? mutex_unlock+0xd/0x10 [ 346.279869] ? kernfs_remove_by_name_ns+0x65/0xb0 [ 346.284693] del_gendisk+0x8b5/0xba0 [ 346.288396] ? wait_for_completion+0x870/0x870 [ 346.292968] ? disk_events_poll_msecs_store+0x200/0x200 [ 346.298325] ? radix_tree_delete_item+0x14d/0x2d0 [ 346.303158] ? radix_tree_lookup+0x30/0x30 [ 346.307373] ? idr_find+0x44/0x50 [ 346.310807] ? loop_lookup+0x102/0x220 [ 346.314683] loop_remove+0x39/0xc0 [ 346.318222] loop_control_ioctl+0x462/0x500 [ 346.322533] ? loop_add+0x9c0/0x9c0 [ 346.326143] ? expand_files.part.8+0x9a0/0x9a0 [ 346.330707] ? kasan_check_write+0x14/0x20 [ 346.334924] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 346.339842] ? wait_for_completion+0x870/0x870 [ 346.344426] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 346.349607] ? loop_add+0x9c0/0x9c0 [ 346.353223] do_vfs_ioctl+0x1cf/0x16a0 [ 346.357095] ? ioctl_preallocate+0x2e0/0x2e0 [ 346.361485] ? fget_raw+0x20/0x20 [ 346.364919] ? __sb_end_write+0xac/0xe0 [ 346.368892] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 346.374417] ? fput+0x130/0x1a0 [ 346.377680] ? ksys_write+0x1a6/0x250 [ 346.381465] ? security_file_ioctl+0x94/0xc0 [ 346.385864] ksys_ioctl+0xa9/0xd0 [ 346.389300] __x64_sys_ioctl+0x73/0xb0 [ 346.393184] do_syscall_64+0x1b1/0x800 [ 346.397063] ? finish_task_switch+0x1ca/0x840 [ 346.401538] ? syscall_return_slowpath+0x5c0/0x5c0 [ 346.406460] ? syscall_return_slowpath+0x30f/0x5c0 [ 346.411554] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 346.416906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.421748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.426927] RIP: 0033:0x455a09 2018/05/21 21:42:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000008fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0xffffff7f00000000}, 0x0) 2018/05/21 21:42:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x1400, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 346.430096] RSP: 002b:00007fe44ba7ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.437785] RAX: ffffffffffffffda RBX: 00007fe44ba7f6d4 RCX: 0000000000455a09 [ 346.445040] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000013 [ 346.452313] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 346.459572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 346.466825] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000005 2018/05/21 21:42:39 executing program 0 (fault-call:5 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:39 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:39 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r1}) 2018/05/21 21:42:39 executing program 7 (fault-call:4 fault-nth:6): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xd, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000f0ffffff00000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:39 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc020660b, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000007fffffff00000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 346.623035] FAULT_INJECTION: forcing a failure. [ 346.623035] name failslab, interval 1, probability 0, space 0, times 0 [ 346.634333] CPU: 1 PID: 22299 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 346.641613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.650968] Call Trace: [ 346.653567] dump_stack+0x1b9/0x294 [ 346.657204] ? dump_stack_print_info.cold.2+0x52/0x52 [ 346.662403] ? __might_sleep+0x95/0x190 [ 346.666396] should_fail.cold.4+0xa/0x1a [ 346.670457] ? loop_control_ioctl+0x8c/0x500 [ 346.674860] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 346.679970] ? mutex_trylock+0x2a0/0x2a0 [ 346.684034] ? __lock_acquire+0x7f5/0x5140 [ 346.688262] ? graph_lock+0x170/0x170 [ 346.692048] ? find_held_lock+0x36/0x1c0 [ 346.696099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.701636] ? find_held_lock+0x36/0x1c0 [ 346.705693] ? __lock_is_held+0xb5/0x140 [ 346.709765] ? check_same_owner+0x320/0x320 [ 346.714092] ? rcu_note_context_switch+0x710/0x710 [ 346.719025] __should_failslab+0x124/0x180 2018/05/21 21:42:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x34000}, 0x0) [ 346.723265] should_failslab+0x9/0x14 [ 346.727062] kmem_cache_alloc_trace+0x2cb/0x780 [ 346.731726] loop_add+0x96/0x9c0 [ 346.735096] ? loop_lookup+0x102/0x220 [ 346.738995] ? loop_queue_rq+0x640/0x640 [ 346.743073] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 346.748263] loop_control_ioctl+0x178/0x500 [ 346.752572] ? loop_add+0x9c0/0x9c0 [ 346.756187] ? expand_files.part.8+0x9a0/0x9a0 [ 346.760765] ? kasan_check_write+0x14/0x20 [ 346.765007] ? __mutex_unlock_slowpath+0x180/0x8a0 2018/05/21 21:42:39 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) [ 346.769942] ? wait_for_completion+0x870/0x870 [ 346.774522] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 346.779708] ? loop_add+0x9c0/0x9c0 [ 346.783345] do_vfs_ioctl+0x1cf/0x16a0 [ 346.787232] ? ioctl_preallocate+0x2e0/0x2e0 [ 346.791632] ? fget_raw+0x20/0x20 [ 346.795079] ? __sb_end_write+0xac/0xe0 [ 346.799069] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 346.804603] ? fput+0x130/0x1a0 [ 346.807877] ? ksys_write+0x1a6/0x250 [ 346.811680] ? security_file_ioctl+0x94/0xc0 [ 346.816096] ksys_ioctl+0xa9/0xd0 [ 346.819543] __x64_sys_ioctl+0x73/0xb0 [ 346.823427] do_syscall_64+0x1b1/0x800 [ 346.827312] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 346.832149] ? syscall_return_slowpath+0x5c0/0x5c0 [ 346.837071] ? syscall_return_slowpath+0x30f/0x5c0 [ 346.842004] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 346.847364] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.852205] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.857385] RIP: 0033:0x455a09 [ 346.860564] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.868275] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 346.875540] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 346.882801] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 346.890060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 346.897319] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000000 2018/05/21 21:42:39 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6e}) capget(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) 2018/05/21 21:42:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x900000000000000}, 0x0) 2018/05/21 21:42:39 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) 2018/05/21 21:42:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xffffff80, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:39 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000100000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:39 executing program 0 (fault-call:5 fault-nth:1): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x200000000000000}, 0x0) 2018/05/21 21:42:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000d0bffe)="7b10", 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)) io_setup(0x1000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)}]) io_getevents(r1, 0x1, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)={0x77359400}) 2018/05/21 21:42:39 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0045877, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000f0000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:39 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:39 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0189436, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x800e000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 347.159197] FAULT_INJECTION: forcing a failure. [ 347.159197] name failslab, interval 1, probability 0, space 0, times 0 [ 347.170520] CPU: 0 PID: 22343 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 347.177797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.187156] Call Trace: [ 347.189758] dump_stack+0x1b9/0x294 [ 347.193400] ? dump_stack_print_info.cold.2+0x52/0x52 [ 347.198595] ? perf_trace_lock_acquire+0xe3/0x980 [ 347.203452] ? rcu_is_watching+0x85/0x140 [ 347.207618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.213181] should_fail.cold.4+0xa/0x1a [ 347.217257] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 347.222374] ? radix_tree_clear_tags+0xc0/0xc0 [ 347.226971] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.232520] ? graph_lock+0x170/0x170 [ 347.236329] ? find_held_lock+0x36/0x1c0 [ 347.240401] ? __lock_is_held+0xb5/0x140 [ 347.244484] ? check_same_owner+0x320/0x320 [ 347.248818] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 347.254367] ? node_tag_clear+0xc0/0x1c0 [ 347.258444] ? rcu_note_context_switch+0x710/0x710 [ 347.263378] __should_failslab+0x124/0x180 [ 347.267623] should_failslab+0x9/0x14 [ 347.271435] kmem_cache_alloc_node_trace+0x26f/0x770 [ 347.276550] ? __fprop_inc_percpu_max+0x2c0/0x2c0 [ 347.281399] __kmalloc_node+0x33/0x70 [ 347.285197] blk_mq_alloc_tag_set+0x37d/0xab0 [ 347.289682] ? idr_alloc+0x145/0x1a0 [ 347.293395] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 347.298593] loop_add+0x2b4/0x9c0 [ 347.302043] ? loop_lookup+0x102/0x220 [ 347.305928] ? loop_queue_rq+0x640/0x640 [ 347.309990] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 347.315181] loop_control_ioctl+0x178/0x500 [ 347.319503] ? loop_add+0x9c0/0x9c0 [ 347.323129] ? expand_files.part.8+0x9a0/0x9a0 [ 347.327703] ? kasan_check_write+0x14/0x20 [ 347.331926] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 347.336848] ? wait_for_completion+0x870/0x870 [ 347.341421] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 347.346608] ? loop_add+0x9c0/0x9c0 [ 347.350238] do_vfs_ioctl+0x1cf/0x16a0 [ 347.354126] ? ioctl_preallocate+0x2e0/0x2e0 [ 347.358521] ? fget_raw+0x20/0x20 [ 347.361976] ? __sb_end_write+0xac/0xe0 [ 347.365961] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 347.371499] ? fput+0x130/0x1a0 [ 347.374779] ? ksys_write+0x1a6/0x250 [ 347.378585] ? security_file_ioctl+0x94/0xc0 [ 347.382993] ksys_ioctl+0xa9/0xd0 [ 347.386447] __x64_sys_ioctl+0x73/0xb0 [ 347.390336] do_syscall_64+0x1b1/0x800 [ 347.394221] ? finish_task_switch+0x1ca/0x840 [ 347.398716] ? syscall_return_slowpath+0x5c0/0x5c0 [ 347.403645] ? syscall_return_slowpath+0x30f/0x5c0 [ 347.408578] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 347.413947] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.418796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.423981] RIP: 0033:0x455a09 [ 347.427170] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.434879] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 347.442148] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 347.449418] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/21 21:42:39 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x40049409, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x600000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:40 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x4000000}, 0x0) [ 347.456685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 347.463953] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000001 2018/05/21 21:42:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000009effffff000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:40 executing program 3: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000f85000)={0x1, 0x3, &(0x7f0000519fa8)=ANY=[@ANYBLOB="180000000000e41262f7c82f208740e573ecd50dff000000"], &(0x7f0000d63000)="73597a6b618f6c65000d", 0x80000000009, 0x1000, &(0x7f0000f72000)=""/4096}, 0x48) close(r0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x7fffd) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0)) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 2018/05/21 21:42:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x4888, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:40 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5451, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:40 executing program 0 (fault-call:5 fault-nth:2): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:40 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) 2018/05/21 21:42:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x40030000000000}, 0x0) 2018/05/21 21:42:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xffffa888, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000002000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:40 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0189436, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:40 executing program 3: r0 = socket(0x10, 0x5, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x11, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x883e, 0x8}}}}}, 0x0) 2018/05/21 21:42:40 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x40049409, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) [ 347.697057] FAULT_INJECTION: forcing a failure. [ 347.697057] name failslab, interval 1, probability 0, space 0, times 0 [ 347.707612] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x1 [ 347.708368] CPU: 1 PID: 22379 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 347.721878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.731236] Call Trace: [ 347.733842] dump_stack+0x1b9/0x294 [ 347.737483] ? dump_stack_print_info.cold.2+0x52/0x52 [ 347.742695] ? is_bpf_text_address+0xd7/0x170 2018/05/21 21:42:40 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc020660b, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000002920000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cb66f") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="1e818325ea384758fe4e3c761fec4513b3b4212095e22e2f80b0785913abb57eefdb9a4083694dd540160e89c4a0fca59cbc0791ae37208817ee92874d9c666cf856e13f78611f51450850a214eb8cbfb2980f90b9a6b2ec4f7f2c28b471685703f045936f53c03f48dfaff6fbd239497ffc4859e5c5bb08fb2ea378d5937c6a54bc44357fa30e91df6e3d2726c59437746ad7c6b3f4e2cb163c0e7e53bfcb5a2088f8f0e90e43ebb982395da95b74bf2b07a315693619ca09b91c294346733631cde2fc22ecc9e669ae3298c463e0696a31275cba441cb656c26424ac6b26e0f5134c44a69bdc9b07637d", 0xeb}], 0x1, 0x0, 0x0, 0x10}, 0x4004000) dup2(r0, r1) [ 347.747206] should_fail.cold.4+0xa/0x1a [ 347.751197] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x1 [ 347.751278] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 347.762526] ? graph_lock+0x170/0x170 [ 347.766334] ? save_stack+0xa9/0xd0 [ 347.769963] ? find_held_lock+0x36/0x1c0 [ 347.774030] ? __lock_is_held+0xb5/0x140 [ 347.778107] ? check_same_owner+0x320/0x320 [ 347.782436] ? rcu_note_context_switch+0x710/0x710 [ 347.787378] __should_failslab+0x124/0x180 [ 347.791633] should_failslab+0x9/0x14 [ 347.795435] kmem_cache_alloc_node_trace+0x26f/0x770 [ 347.800540] ? kasan_unpoison_shadow+0x35/0x50 [ 347.805130] __kmalloc_node+0x33/0x70 [ 347.808942] blk_mq_alloc_tag_set+0x414/0xab0 [ 347.813453] ? idr_alloc+0x145/0x1a0 [ 347.817171] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 347.822366] loop_add+0x2b4/0x9c0 [ 347.825827] ? loop_lookup+0x102/0x220 [ 347.829712] ? loop_queue_rq+0x640/0x640 [ 347.833776] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 347.838968] loop_control_ioctl+0x178/0x500 [ 347.843293] ? loop_add+0x9c0/0x9c0 [ 347.846920] ? expand_files.part.8+0x9a0/0x9a0 [ 347.851503] ? kasan_check_write+0x14/0x20 [ 347.855741] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 347.860677] ? wait_for_completion+0x870/0x870 [ 347.865265] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 347.870457] ? loop_add+0x9c0/0x9c0 [ 347.874086] do_vfs_ioctl+0x1cf/0x16a0 [ 347.877984] ? ioctl_preallocate+0x2e0/0x2e0 [ 347.882423] ? fget_raw+0x20/0x20 [ 347.885878] ? __sb_end_write+0xac/0xe0 [ 347.889856] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 347.895392] ? fput+0x130/0x1a0 [ 347.898671] ? ksys_write+0x1a6/0x250 [ 347.902478] ? security_file_ioctl+0x94/0xc0 [ 347.906892] ksys_ioctl+0xa9/0xd0 [ 347.910354] __x64_sys_ioctl+0x73/0xb0 [ 347.914246] do_syscall_64+0x1b1/0x800 [ 347.918133] ? finish_task_switch+0x1ca/0x840 [ 347.922634] ? syscall_return_slowpath+0x5c0/0x5c0 [ 347.927568] ? syscall_return_slowpath+0x30f/0x5c0 [ 347.932500] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 347.937867] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.942716] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/05/21 21:42:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x800000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:40 executing program 5 (fault-call:4 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0xffffff7f}, 0x0) [ 347.947900] RIP: 0033:0x455a09 [ 347.951085] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.958795] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 347.966060] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 347.973329] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 347.980599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 347.987872] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000002 2018/05/21 21:42:40 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xfffff000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:40 executing program 0 (fault-call:5 fault-nth:3): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:40 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x1000000}, 0x0) 2018/05/21 21:42:40 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5460, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x89060000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000092020000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:40 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:40 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) [ 348.202821] FAULT_INJECTION: forcing a failure. [ 348.202821] name failslab, interval 1, probability 0, space 0, times 0 [ 348.214229] CPU: 0 PID: 22429 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 348.221512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.230870] Call Trace: [ 348.233475] dump_stack+0x1b9/0x294 [ 348.237121] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.242326] ? kasan_check_read+0x11/0x20 [ 348.246478] ? rcu_is_watching+0x85/0x140 [ 348.250637] should_fail.cold.4+0xa/0x1a [ 348.254719] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 348.259849] ? kernel_text_address+0x79/0xf0 [ 348.264264] ? __unwind_start+0x166/0x330 [ 348.268417] ? graph_lock+0x170/0x170 [ 348.272222] ? __save_stack_trace+0x7e/0xd0 [ 348.276554] ? find_held_lock+0x36/0x1c0 [ 348.280628] ? __lock_is_held+0xb5/0x140 [ 348.284711] ? check_same_owner+0x320/0x320 [ 348.289036] ? rcu_note_context_switch+0x710/0x710 [ 348.293976] __should_failslab+0x124/0x180 [ 348.298222] should_failslab+0x9/0x14 [ 348.302032] kmem_cache_alloc_node_trace+0x26f/0x770 [ 348.307146] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.312684] ? find_next_bit+0x104/0x130 [ 348.316753] blk_mq_init_tags+0x79/0x2b0 [ 348.320817] blk_mq_alloc_rq_map+0x9f/0x220 [ 348.325143] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 348.329644] blk_mq_alloc_tag_set+0x612/0xab0 [ 348.334138] ? idr_alloc+0x145/0x1a0 [ 348.337853] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 348.343047] loop_add+0x2b4/0x9c0 [ 348.346506] ? loop_lookup+0x102/0x220 [ 348.350394] ? loop_queue_rq+0x640/0x640 [ 348.354462] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 348.359649] loop_control_ioctl+0x178/0x500 [ 348.363965] ? loop_add+0x9c0/0x9c0 [ 348.367594] ? expand_files.part.8+0x9a0/0x9a0 [ 348.372179] ? kasan_check_write+0x14/0x20 [ 348.376412] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 348.381347] ? wait_for_completion+0x870/0x870 [ 348.385929] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 348.391115] ? loop_add+0x9c0/0x9c0 [ 348.394740] do_vfs_ioctl+0x1cf/0x16a0 [ 348.398633] ? ioctl_preallocate+0x2e0/0x2e0 [ 348.403038] ? fget_raw+0x20/0x20 [ 348.406496] ? __sb_end_write+0xac/0xe0 [ 348.410472] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.416005] ? fput+0x130/0x1a0 [ 348.419284] ? ksys_write+0x1a6/0x250 [ 348.423093] ? security_file_ioctl+0x94/0xc0 [ 348.427502] ksys_ioctl+0xa9/0xd0 [ 348.430960] __x64_sys_ioctl+0x73/0xb0 [ 348.434846] do_syscall_64+0x1b1/0x800 [ 348.438729] ? finish_task_switch+0x1ca/0x840 [ 348.443226] ? syscall_return_slowpath+0x5c0/0x5c0 [ 348.448156] ? syscall_return_slowpath+0x30f/0x5c0 [ 348.453090] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 348.458459] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.463309] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.468490] RIP: 0033:0x455a09 [ 348.471675] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.479383] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 348.486647] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 348.493913] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/21 21:42:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000001000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:40 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0045877, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:40 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0045878, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x86ddffff, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x9000000}, 0x0) 2018/05/21 21:42:41 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5421, 0x0) [ 348.501175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 348.508441] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000003 [ 348.519376] blk-mq: reduced tag depth (128 -> 64) 2018/05/21 21:42:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000ffffff9e000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:41 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5421, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:41 executing program 0 (fault-call:5 fault-nth:4): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x400300}, 0x0) 2018/05/21 21:42:41 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5460, 0x0) 2018/05/21 21:42:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x4, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:41 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000fffffff0000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:41 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5451, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:41 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c82, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) [ 349.353633] FAULT_INJECTION: forcing a failure. [ 349.353633] name failslab, interval 1, probability 0, space 0, times 0 [ 349.364948] CPU: 0 PID: 22473 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 349.372229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.381584] Call Trace: [ 349.384186] dump_stack+0x1b9/0x294 [ 349.387818] ? dump_stack_print_info.cold.2+0x52/0x52 [ 349.393020] should_fail.cold.4+0xa/0x1a [ 349.397086] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 349.402190] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 349.407379] ? graph_lock+0x170/0x170 [ 349.411178] ? is_bpf_text_address+0xd7/0x170 [ 349.415677] ? find_held_lock+0x36/0x1c0 [ 349.419743] ? __lock_is_held+0xb5/0x140 [ 349.423813] ? check_same_owner+0x320/0x320 [ 349.428130] ? kasan_kmalloc+0xc4/0xe0 [ 349.432021] ? kmem_cache_alloc_node_trace+0x150/0x770 [ 349.437298] ? blk_mq_init_tags+0x79/0x2b0 [ 349.441535] ? rcu_note_context_switch+0x710/0x710 [ 349.446458] ? loop_add+0x2b4/0x9c0 [ 349.450084] ? loop_control_ioctl+0x178/0x500 [ 349.454577] ? do_vfs_ioctl+0x1cf/0x16a0 [ 349.458637] __should_failslab+0x124/0x180 [ 349.462872] should_failslab+0x9/0x14 [ 349.466672] kmem_cache_alloc_node_trace+0x26f/0x770 [ 349.471772] ? print_usage_bug+0xc0/0xc0 [ 349.475839] __kmalloc_node+0x33/0x70 [ 349.479640] sbitmap_init_node+0x290/0x460 [ 349.483876] sbitmap_queue_init_node+0xaa/0x7d0 [ 349.488554] ? sbitmap_init_node+0x460/0x460 [ 349.492961] ? rcu_read_lock_sched_held+0x108/0x120 [ 349.497984] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 349.503261] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 349.508796] ? find_next_bit+0x104/0x130 [ 349.512871] blk_mq_init_tags+0x11b/0x2b0 [ 349.517023] blk_mq_alloc_rq_map+0x9f/0x220 [ 349.521346] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 349.525847] blk_mq_alloc_tag_set+0x612/0xab0 [ 349.530345] ? idr_alloc+0x145/0x1a0 [ 349.534060] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 349.539259] loop_add+0x2b4/0x9c0 [ 349.542711] ? loop_lookup+0x102/0x220 [ 349.546597] ? loop_queue_rq+0x640/0x640 [ 349.550667] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 349.555855] loop_control_ioctl+0x178/0x500 [ 349.560175] ? loop_add+0x9c0/0x9c0 [ 349.563804] ? expand_files.part.8+0x9a0/0x9a0 [ 349.568385] ? kasan_check_write+0x14/0x20 [ 349.572621] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 349.577554] ? wait_for_completion+0x870/0x870 [ 349.582133] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 349.587317] ? loop_add+0x9c0/0x9c0 [ 349.590945] do_vfs_ioctl+0x1cf/0x16a0 [ 349.594843] ? ioctl_preallocate+0x2e0/0x2e0 [ 349.599249] ? fget_raw+0x20/0x20 [ 349.602704] ? __sb_end_write+0xac/0xe0 [ 349.606683] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.612215] ? fput+0x130/0x1a0 [ 349.615494] ? ksys_write+0x1a6/0x250 [ 349.619297] ? security_file_ioctl+0x94/0xc0 [ 349.623709] ksys_ioctl+0xa9/0xd0 [ 349.627249] __x64_sys_ioctl+0x73/0xb0 [ 349.631138] do_syscall_64+0x1b1/0x800 [ 349.635020] ? finish_task_switch+0x1ca/0x840 [ 349.639514] ? syscall_return_slowpath+0x5c0/0x5c0 [ 349.644442] ? syscall_return_slowpath+0x30f/0x5c0 [ 349.649372] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 349.654740] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.659588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.664776] RIP: 0033:0x455a09 [ 349.667964] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.676106] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 349.683369] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 349.690637] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 349.697900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2018/05/21 21:42:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xffffca88, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:42 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x2000000}, 0x0) 2018/05/21 21:42:42 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5452, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:42 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5421, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000f00000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x40049409, 0x0) [ 349.705169] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000004 [ 349.741629] blk-mq: reduced tag depth (128 -> 64) 2018/05/21 21:42:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000002000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x14, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:42 executing program 0 (fault-call:5 fault-nth:5): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4020940d, 0x0) 2018/05/21 21:42:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000f0ffffff000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:42 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xc0ffffff00000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:42 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x400000000000000}, 0x0) 2018/05/21 21:42:42 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0045878, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:42 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) [ 350.361638] FAULT_INJECTION: forcing a failure. [ 350.361638] name failslab, interval 1, probability 0, space 0, times 0 [ 350.372986] CPU: 0 PID: 22517 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 350.380255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.389607] Call Trace: [ 350.392201] dump_stack+0x1b9/0x294 [ 350.395838] ? dump_stack_print_info.cold.2+0x52/0x52 [ 350.401043] ? find_next_zero_bit+0x111/0x140 [ 350.405545] should_fail.cold.4+0xa/0x1a [ 350.409607] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 350.414717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.420259] ? graph_lock+0x170/0x170 [ 350.424068] ? find_held_lock+0x36/0x1c0 [ 350.428137] ? __lock_is_held+0xb5/0x140 [ 350.432217] ? check_same_owner+0x320/0x320 [ 350.436547] ? __kmalloc_node+0x33/0x70 [ 350.440535] ? rcu_note_context_switch+0x710/0x710 [ 350.445473] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 350.450755] __should_failslab+0x124/0x180 [ 350.454999] should_failslab+0x9/0x14 [ 350.458814] kmem_cache_alloc_node_trace+0x26f/0x770 [ 350.463922] ? __kmalloc_node+0x47/0x70 [ 350.467903] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 350.472923] ? find_next_bit+0x104/0x130 [ 350.476992] sbitmap_queue_init_node+0x3bd/0x7d0 [ 350.481753] ? sbitmap_init_node+0x460/0x460 [ 350.486166] ? rcu_read_lock_sched_held+0x108/0x120 [ 350.491193] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 350.496476] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.502019] ? find_next_bit+0x104/0x130 [ 350.506096] blk_mq_init_tags+0x11b/0x2b0 2018/05/21 21:42:43 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc020660b, 0x0) 2018/05/21 21:42:43 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5452, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:43 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x88caffff, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:43 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000f0ffff000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 350.510259] blk_mq_alloc_rq_map+0x9f/0x220 [ 350.514584] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 350.519083] blk_mq_alloc_tag_set+0x612/0xab0 [ 350.523583] ? idr_alloc+0x145/0x1a0 [ 350.527303] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 350.532501] loop_add+0x2b4/0x9c0 [ 350.535953] ? loop_lookup+0x102/0x220 [ 350.539841] ? loop_queue_rq+0x640/0x640 [ 350.543910] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 350.549105] loop_control_ioctl+0x178/0x500 [ 350.553421] ? loop_add+0x9c0/0x9c0 [ 350.557048] ? expand_files.part.8+0x9a0/0x9a0 [ 350.561629] ? kasan_check_write+0x14/0x20 [ 350.565862] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 350.570800] ? wait_for_completion+0x870/0x870 [ 350.575383] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 350.580566] ? loop_add+0x9c0/0x9c0 [ 350.584231] do_vfs_ioctl+0x1cf/0x16a0 [ 350.588124] ? ioctl_preallocate+0x2e0/0x2e0 [ 350.592534] ? fget_raw+0x20/0x20 [ 350.595981] ? __sb_end_write+0xac/0xe0 [ 350.599946] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 350.605475] ? fput+0x130/0x1a0 [ 350.608746] ? ksys_write+0x1a6/0x250 [ 350.612542] ? security_file_ioctl+0x94/0xc0 [ 350.616952] ksys_ioctl+0xa9/0xd0 [ 350.620404] __x64_sys_ioctl+0x73/0xb0 [ 350.624283] do_syscall_64+0x1b1/0x800 [ 350.628162] ? finish_task_switch+0x1ca/0x840 [ 350.632658] ? syscall_return_slowpath+0x5c0/0x5c0 [ 350.637578] ? syscall_return_slowpath+0x30f/0x5c0 [ 350.642495] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 350.647853] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.652696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.657877] RIP: 0033:0x455a09 [ 350.661063] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.668771] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 350.676037] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 350.684002] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 350.691270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 350.698532] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000005 2018/05/21 21:42:43 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 350.709014] blk-mq: reduced tag depth (128 -> 64) 2018/05/21 21:42:44 executing program 0 (fault-call:5 fault-nth:6): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:44 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4020940d, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:44 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x9000000}, 0x0) 2018/05/21 21:42:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000292000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:44 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x2, 0x0) 2018/05/21 21:42:44 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c82, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:44 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:44 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xf0ffff, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 351.756767] FAULT_INJECTION: forcing a failure. [ 351.756767] name failslab, interval 1, probability 0, space 0, times 0 [ 351.768049] CPU: 1 PID: 22556 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 351.775326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.784683] Call Trace: [ 351.787290] dump_stack+0x1b9/0x294 [ 351.790932] ? dump_stack_print_info.cold.2+0x52/0x52 [ 351.796189] ? find_next_zero_bit+0x111/0x140 [ 351.800703] should_fail.cold.4+0xa/0x1a [ 351.804776] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 351.809897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.815444] ? graph_lock+0x170/0x170 [ 351.819259] ? find_held_lock+0x36/0x1c0 [ 351.823334] ? __lock_is_held+0xb5/0x140 [ 351.827407] ? check_same_owner+0x320/0x320 [ 351.831731] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 351.836752] ? rcu_note_context_switch+0x710/0x710 [ 351.841681] ? __lockdep_init_map+0x105/0x590 [ 351.846178] __should_failslab+0x124/0x180 [ 351.850415] should_failslab+0x9/0x14 [ 351.854215] kmem_cache_alloc_node_trace+0x26f/0x770 [ 351.859315] ? init_wait_entry+0x1b0/0x1b0 [ 351.863553] ? __kmalloc_node+0x47/0x70 [ 351.867531] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 351.872552] sbitmap_queue_init_node+0x3bd/0x7d0 [ 351.877314] ? sbitmap_init_node+0x460/0x460 [ 351.881722] ? rcu_read_lock_sched_held+0x108/0x120 [ 351.886739] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 351.892015] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.897547] ? find_next_bit+0x104/0x130 [ 351.901615] blk_mq_init_tags+0x17c/0x2b0 [ 351.905768] blk_mq_alloc_rq_map+0x9f/0x220 [ 351.910092] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 351.914593] blk_mq_alloc_tag_set+0x612/0xab0 [ 351.919092] ? idr_alloc+0x145/0x1a0 [ 351.922807] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 351.928002] loop_add+0x2b4/0x9c0 [ 351.931462] ? loop_lookup+0x102/0x220 [ 351.935346] ? loop_queue_rq+0x640/0x640 [ 351.939417] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 351.944610] loop_control_ioctl+0x178/0x500 [ 351.948928] ? loop_add+0x9c0/0x9c0 [ 351.952557] ? expand_files.part.8+0x9a0/0x9a0 [ 351.957166] ? kasan_check_write+0x14/0x20 [ 351.961404] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 351.966334] ? wait_for_completion+0x870/0x870 [ 351.970916] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 351.976104] ? loop_add+0x9c0/0x9c0 [ 351.979730] do_vfs_ioctl+0x1cf/0x16a0 [ 351.983623] ? ioctl_preallocate+0x2e0/0x2e0 [ 351.988028] ? fget_raw+0x20/0x20 [ 351.991479] ? __sb_end_write+0xac/0xe0 [ 351.995459] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 352.000995] ? fput+0x130/0x1a0 [ 352.004276] ? ksys_write+0x1a6/0x250 [ 352.008080] ? security_file_ioctl+0x94/0xc0 [ 352.012492] ksys_ioctl+0xa9/0xd0 [ 352.015950] __x64_sys_ioctl+0x73/0xb0 [ 352.019842] do_syscall_64+0x1b1/0x800 [ 352.023730] ? finish_task_switch+0x1ca/0x840 [ 352.028228] ? syscall_return_slowpath+0x5c0/0x5c0 [ 352.033161] ? syscall_return_slowpath+0x30f/0x5c0 [ 352.038091] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 352.043460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.048305] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.053493] RIP: 0033:0x455a09 2018/05/21 21:42:44 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:44 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x80ffffff, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000007fffffff000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 352.056675] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.064382] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 352.071648] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 352.078910] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 352.086173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 352.093435] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000006 [ 352.112866] blk-mq: reduced tag depth (128 -> 64) 2018/05/21 21:42:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x4000000}, 0x0) 2018/05/21 21:42:45 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0045878, 0x0) 2018/05/21 21:42:45 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4020940d, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000fffff000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:45 executing program 0 (fault-call:5 fault-nth:7): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:45 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x1c000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:45 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:45 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5460, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) [ 352.720024] FAULT_INJECTION: forcing a failure. [ 352.720024] name failslab, interval 1, probability 0, space 0, times 0 [ 352.731325] CPU: 0 PID: 22584 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 352.738594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.747945] Call Trace: [ 352.750546] dump_stack+0x1b9/0x294 [ 352.754175] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.759374] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.764750] should_fail.cold.4+0xa/0x1a 2018/05/21 21:42:45 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xf000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000009effffff0001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 352.768815] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 352.773924] ? mark_held_locks+0xc9/0x160 [ 352.778075] ? graph_lock+0x170/0x170 [ 352.781885] ? __raw_spin_lock_init+0x1c/0x100 [ 352.786473] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 352.791498] ? __lockdep_init_map+0x105/0x590 [ 352.796000] ? __lockdep_init_map+0x105/0x590 [ 352.800508] ? __lock_is_held+0xb5/0x140 [ 352.804574] ? __init_waitqueue_head+0x96/0x140 [ 352.809254] ? check_same_owner+0x320/0x320 [ 352.813574] ? sbitmap_queue_init_node+0xc6/0x7d0 [ 352.818421] ? rcu_note_context_switch+0x710/0x710 [ 352.823354] __should_failslab+0x124/0x180 [ 352.827591] should_failslab+0x9/0x14 [ 352.831389] kmem_cache_alloc_node_trace+0x26f/0x770 [ 352.836495] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.842031] ? find_next_bit+0x104/0x130 [ 352.846096] __kmalloc_node+0x33/0x70 [ 352.849897] blk_mq_alloc_rq_map+0xcc/0x220 [ 352.854223] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 352.858719] blk_mq_alloc_tag_set+0x612/0xab0 [ 352.863300] ? idr_alloc+0x145/0x1a0 [ 352.867014] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 352.872212] loop_add+0x2b4/0x9c0 [ 352.875663] ? loop_lookup+0x102/0x220 [ 352.879548] ? loop_queue_rq+0x640/0x640 [ 352.883612] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 352.888803] loop_control_ioctl+0x178/0x500 [ 352.893121] ? loop_add+0x9c0/0x9c0 [ 352.896747] ? expand_files.part.8+0x9a0/0x9a0 [ 352.901327] ? kasan_check_write+0x14/0x20 [ 352.905564] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 352.910497] ? wait_for_completion+0x870/0x870 [ 352.915078] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 352.920269] ? loop_add+0x9c0/0x9c0 [ 352.923898] do_vfs_ioctl+0x1cf/0x16a0 [ 352.927791] ? ioctl_preallocate+0x2e0/0x2e0 [ 352.932196] ? fget_raw+0x20/0x20 [ 352.935650] ? __sb_end_write+0xac/0xe0 [ 352.939629] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 352.945159] ? fput+0x130/0x1a0 [ 352.948440] ? ksys_write+0x1a6/0x250 [ 352.952241] ? security_file_ioctl+0x94/0xc0 [ 352.956653] ksys_ioctl+0xa9/0xd0 [ 352.960112] __x64_sys_ioctl+0x73/0xb0 [ 352.964000] do_syscall_64+0x1b1/0x800 [ 352.967885] ? finish_task_switch+0x1ca/0x840 [ 352.972383] ? syscall_return_slowpath+0x5c0/0x5c0 [ 352.977315] ? syscall_return_slowpath+0x30f/0x5c0 [ 352.982249] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 352.987616] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.992462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.997645] RIP: 0033:0x455a09 [ 353.000833] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.008540] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 353.015804] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 353.023069] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 353.030332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 353.037596] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000007 [ 353.061434] blk-mq: reduced tag depth (128 -> 64) 2018/05/21 21:42:46 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) exit(0x9) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:46 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r2, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000002500), 0x0, &(0x7f0000000080)=[{0x18, 0x29, 0x4, 'D'}], 0x18}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:46 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x2}, 0x0) 2018/05/21 21:42:46 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x86ddffff00000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:46 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000002920001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:46 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:46 executing program 0 (fault-call:5 fault-nth:8): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 354.073931] FAULT_INJECTION: forcing a failure. [ 354.073931] name failslab, interval 1, probability 0, space 0, times 0 [ 354.089765] CPU: 1 PID: 22611 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 354.097044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.106404] Call Trace: [ 354.109006] dump_stack+0x1b9/0x294 [ 354.112638] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.117830] ? is_bpf_text_address+0xd7/0x170 [ 354.122329] should_fail.cold.4+0xa/0x1a [ 354.126392] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.131499] ? graph_lock+0x170/0x170 [ 354.135304] ? save_stack+0xa9/0xd0 [ 354.138931] ? save_stack+0x43/0xd0 [ 354.142557] ? kasan_kmalloc+0xc4/0xe0 [ 354.146440] ? __kmalloc_node+0x47/0x70 [ 354.150411] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 354.154904] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 354.159570] ? blk_mq_alloc_tag_set+0x612/0xab0 [ 354.164232] ? loop_add+0x2b4/0x9c0 [ 354.167858] ? loop_control_ioctl+0x178/0x500 [ 354.172355] ? do_vfs_ioctl+0x1cf/0x16a0 [ 354.176417] ? __lock_is_held+0xb5/0x140 [ 354.180478] ? __init_waitqueue_head+0x96/0x140 [ 354.185161] ? check_same_owner+0x320/0x320 [ 354.189483] ? rcu_note_context_switch+0x710/0x710 [ 354.194416] __should_failslab+0x124/0x180 [ 354.198655] should_failslab+0x9/0x14 [ 354.202460] kmem_cache_alloc_node_trace+0x26f/0x770 [ 354.207564] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.213103] ? kasan_unpoison_shadow+0x35/0x50 [ 354.217690] __kmalloc_node+0x33/0x70 [ 354.221491] blk_mq_alloc_rq_map+0x10d/0x220 [ 354.225901] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 354.230402] blk_mq_alloc_tag_set+0x612/0xab0 [ 354.234898] ? idr_alloc+0x145/0x1a0 [ 354.238612] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 354.243811] loop_add+0x2b4/0x9c0 [ 354.247265] ? loop_lookup+0x102/0x220 [ 354.251150] ? loop_queue_rq+0x640/0x640 [ 354.255216] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 354.260409] loop_control_ioctl+0x178/0x500 [ 354.264728] ? loop_add+0x9c0/0x9c0 [ 354.268356] ? expand_files.part.8+0x9a0/0x9a0 [ 354.272936] ? kasan_check_write+0x14/0x20 [ 354.277168] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 354.282100] ? wait_for_completion+0x870/0x870 [ 354.286683] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 354.291873] ? loop_add+0x9c0/0x9c0 [ 354.295501] do_vfs_ioctl+0x1cf/0x16a0 [ 354.299394] ? ioctl_preallocate+0x2e0/0x2e0 [ 354.303800] ? fget_raw+0x20/0x20 [ 354.307253] ? __sb_end_write+0xac/0xe0 [ 354.311235] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 354.316772] ? fput+0x130/0x1a0 [ 354.320051] ? ksys_write+0x1a6/0x250 [ 354.323854] ? security_file_ioctl+0x94/0xc0 [ 354.328265] ksys_ioctl+0xa9/0xd0 [ 354.331724] __x64_sys_ioctl+0x73/0xb0 [ 354.335614] do_syscall_64+0x1b1/0x800 [ 354.339501] ? syscall_return_slowpath+0x5c0/0x5c0 [ 354.344432] ? syscall_return_slowpath+0x30f/0x5c0 [ 354.349366] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 354.354735] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.359582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.364764] RIP: 0033:0x455a09 2018/05/21 21:42:46 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000fffffff00001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:47 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 354.367946] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.375656] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 354.382921] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 354.390185] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 354.397449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 354.404710] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000008 [ 354.414747] blk-mq: reduced tag depth (128 -> 64) 2018/05/21 21:42:47 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x0) 2018/05/21 21:42:47 executing program 0 (fault-call:5 fault-nth:9): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:47 executing program 6: syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3, &(0x7f0000001400)=[{&(0x7f0000000280)="f9ab5bb630e4ece2f89ee599611967888f98a6b092fcc2c05999d247f71f3a048c7779905b8a1c11c16154060408cc6931e109754ad8714b35cbc536efb0600421075195872ceb823b4a5287b594d03e680707e2ee01950a112a88b5ff2ade3a803c", 0x62, 0x1ff}, {&(0x7f0000000300)="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", 0x1000, 0x35}, {&(0x7f0000001300)="30e474cbe47cbd78f6fbeb63ffb8fdd0eab0bd2293ed531b3fd28a777a2599cedd5a03351f92c207ebf0ec6ae12ac76fb26c03e56330995521325c81d8f3d791bdd4e7d1c6becf8cddc2c4a60a87370bdba4dc48eb8126c9abeb0cd3d05a6dc7dffb27ae8c4d1324edaac44731bbdc7f9bdf47e6a2581d1bc535068e918ee98ff5c1efb7eadfbd1ef81c000ae8d67b4c2de610344e98de55326307532e24b4dc92fec43c4b3c10c856cb3aeb5cd7f64d11dda5c36f7cffcc4b725e75f9717ead13004e268963c695578d51e0c326ba0b96f1ca", 0xd3, 0x3}], 0x200000, &(0x7f0000001480)='\x00') r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000180)=""/218) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001700)={{{@in=@local, @in=@local}}, {{@in=@broadcast}}}, &(0x7f0000001800)=0xe8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000014c0)={0x0, 0x6}, &(0x7f0000001500)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001540)={0x0, 0x8}, &(0x7f0000001580)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000015c0)={r2, 0x400, 0xfff, 0x6, 0x8, 0x100000000, 0xb0, 0x4, {r2, @in6={{0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, 0xfffffffffffffffc, 0x7, 0x5, 0x7, 0x8}}, &(0x7f0000001680)=0xb0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f00000016c0)={0x6, 0x4, 0x1, 0x5}) 2018/05/21 21:42:47 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x3000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:47 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x400300}, 0x0) [ 354.541395] ceph: device name is missing path (no : separator in /dev/loop6) [ 354.579918] FAULT_INJECTION: forcing a failure. [ 354.579918] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 354.591806] CPU: 0 PID: 22635 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 354.599081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.608427] Call Trace: [ 354.611019] dump_stack+0x1b9/0x294 [ 354.614644] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.619841] ? find_held_lock+0x36/0x1c0 [ 354.623912] should_fail.cold.4+0xa/0x1a [ 354.627983] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.633091] ? graph_lock+0x170/0x170 [ 354.636896] ? lock_downgrade+0x8e0/0x8e0 [ 354.641051] ? __lock_is_held+0xb5/0x140 [ 354.645123] ? check_same_owner+0x320/0x320 [ 354.649445] ? kernel_text_address+0x79/0xf0 [ 354.653858] ? rcu_note_context_switch+0x710/0x710 [ 354.658791] ? __kernel_text_address+0xd/0x40 [ 354.663283] ? __might_sleep+0x95/0x190 [ 354.667249] __alloc_pages_nodemask+0x34e/0xd70 [ 354.671907] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 354.676919] ? save_stack+0x43/0xd0 [ 354.681090] ? kasan_kmalloc+0xc4/0xe0 [ 354.684975] ? __kmalloc_node+0x47/0x70 [ 354.688944] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 354.693513] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 354.698180] ? blk_mq_alloc_tag_set+0x612/0xab0 [ 354.702853] ? loop_control_ioctl+0x178/0x500 [ 354.707348] ? do_vfs_ioctl+0x1cf/0x16a0 [ 354.711404] ? ksys_ioctl+0xa9/0xd0 [ 354.715026] ? __x64_sys_ioctl+0x73/0xb0 [ 354.719086] ? do_syscall_64+0x1b1/0x800 [ 354.723147] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.728520] ? graph_lock+0x170/0x170 [ 354.732308] ? __lock_is_held+0xb5/0x140 [ 354.736364] ? __init_waitqueue_head+0x96/0x140 [ 354.741044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.746581] ? find_next_bit+0x104/0x130 [ 354.750643] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 354.755654] ? blk_mq_hw_queue_to_node+0xd9/0x180 [ 354.760488] blk_mq_alloc_rqs+0x333/0x8b0 [ 354.764627] ? __kmalloc_node+0x33/0x70 [ 354.768601] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 354.773881] ? blk_mq_alloc_rq_map+0x220/0x220 [ 354.778463] ? __kmalloc_node+0x47/0x70 [ 354.782432] ? blk_mq_alloc_rq_map+0x142/0x220 [ 354.787018] __blk_mq_alloc_rq_map+0x15f/0x2e0 [ 354.791605] blk_mq_alloc_tag_set+0x612/0xab0 [ 354.796104] ? idr_alloc+0x145/0x1a0 [ 354.799819] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 354.805008] loop_add+0x2b4/0x9c0 [ 354.808458] ? loop_lookup+0x102/0x220 [ 354.812342] ? loop_queue_rq+0x640/0x640 [ 354.816399] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 354.821581] loop_control_ioctl+0x178/0x500 [ 354.825898] ? loop_add+0x9c0/0x9c0 [ 354.829525] ? expand_files.part.8+0x9a0/0x9a0 [ 354.834108] ? kasan_check_write+0x14/0x20 [ 354.838341] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 354.843268] ? wait_for_completion+0x870/0x870 [ 354.847837] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 354.853013] ? loop_add+0x9c0/0x9c0 [ 354.856629] do_vfs_ioctl+0x1cf/0x16a0 [ 354.860521] ? ioctl_preallocate+0x2e0/0x2e0 [ 354.864935] ? fget_raw+0x20/0x20 [ 354.868395] ? __sb_end_write+0xac/0xe0 [ 354.872373] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 354.877905] ? fput+0x130/0x1a0 [ 354.881183] ? ksys_write+0x1a6/0x250 [ 354.884979] ? security_file_ioctl+0x94/0xc0 [ 354.889376] ksys_ioctl+0xa9/0xd0 [ 354.892825] __x64_sys_ioctl+0x73/0xb0 [ 354.896710] do_syscall_64+0x1b1/0x800 [ 354.900592] ? finish_task_switch+0x1ca/0x840 [ 354.905091] ? syscall_return_slowpath+0x5c0/0x5c0 [ 354.910020] ? syscall_return_slowpath+0x30f/0x5c0 [ 354.914953] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 354.920313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.925157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.930337] RIP: 0033:0x455a09 [ 354.933517] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.941224] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 354.948484] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 354.955741] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 354.963009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 354.970270] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000009 [ 354.999253] ceph: device name is missing path (no : separator in /dev/loop6) 2018/05/21 21:42:48 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000920200000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:48 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:48 executing program 7: lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x00'}, &(0x7f00000001c0)=""/114, 0x72) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:48 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x2000000}, 0x0) 2018/05/21 21:42:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0045877, 0x0) 2018/05/21 21:42:48 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xb000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:48 executing program 0 (fault-call:5 fault-nth:10): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 355.416290] FAULT_INJECTION: forcing a failure. [ 355.416290] name failslab, interval 1, probability 0, space 0, times 0 [ 355.427647] CPU: 1 PID: 22651 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 355.434916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.444275] Call Trace: [ 355.446872] dump_stack+0x1b9/0x294 [ 355.450504] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.455696] ? lock_downgrade+0x8e0/0x8e0 [ 355.459854] should_fail.cold.4+0xa/0x1a [ 355.463911] ? __lock_is_held+0xb5/0x140 [ 355.467976] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.473087] ? graph_lock+0x170/0x170 [ 355.476893] ? __lock_is_held+0xb5/0x140 [ 355.480957] ? find_held_lock+0x36/0x1c0 [ 355.485025] ? __lock_is_held+0xb5/0x140 [ 355.489096] ? check_same_owner+0x320/0x320 [ 355.493411] ? loop_init_request+0x7b/0x170 [ 355.497731] ? rcu_note_context_switch+0x710/0x710 [ 355.502661] ? graph_lock+0x170/0x170 [ 355.506467] ? __lock_is_held+0xb5/0x140 [ 355.511179] __should_failslab+0x124/0x180 [ 355.515416] should_failslab+0x9/0x14 [ 355.519211] kmem_cache_alloc_node+0x272/0x780 [ 355.523792] ? mark_held_locks+0xc9/0x160 [ 355.527948] ? debug_mutex_init+0x1c/0x60 [ 355.532101] blk_alloc_queue_node+0xe5/0xe40 [ 355.536502] ? blk_init_allocated_queue+0x620/0x620 [ 355.541516] ? __mutex_init+0x1ef/0x280 [ 355.545495] ? __ia32_sys_membarrier+0x150/0x150 [ 355.550260] ? blk_mq_alloc_rq_map+0x142/0x220 [ 355.554845] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.560374] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 355.565128] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 355.569802] ? idr_alloc+0x145/0x1a0 [ 355.573523] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 355.578717] blk_mq_init_queue+0x4b/0xb0 [ 355.582775] loop_add+0x32b/0x9c0 [ 355.586218] ? loop_lookup+0x102/0x220 [ 355.590100] ? loop_queue_rq+0x640/0x640 [ 355.594165] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 355.599359] loop_control_ioctl+0x178/0x500 [ 355.603681] ? loop_add+0x9c0/0x9c0 [ 355.607311] ? expand_files.part.8+0x9a0/0x9a0 [ 355.611891] ? kasan_check_write+0x14/0x20 [ 355.616129] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 355.621061] ? wait_for_completion+0x870/0x870 [ 355.625637] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 355.630822] ? loop_add+0x9c0/0x9c0 [ 355.634478] do_vfs_ioctl+0x1cf/0x16a0 [ 355.638373] ? ioctl_preallocate+0x2e0/0x2e0 [ 355.642783] ? fget_raw+0x20/0x20 [ 355.646234] ? __sb_end_write+0xac/0xe0 [ 355.650198] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 355.655728] ? fput+0x130/0x1a0 [ 355.659003] ? ksys_write+0x1a6/0x250 [ 355.662803] ? security_file_ioctl+0x94/0xc0 [ 355.667216] ksys_ioctl+0xa9/0xd0 [ 355.670667] __x64_sys_ioctl+0x73/0xb0 [ 355.674546] do_syscall_64+0x1b1/0x800 [ 355.678428] ? finish_task_switch+0x1ca/0x840 [ 355.682920] ? syscall_return_slowpath+0x5c0/0x5c0 [ 355.687849] ? syscall_return_slowpath+0x30f/0x5c0 [ 355.692769] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 355.698129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.702977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.708160] RIP: 0033:0x455a09 2018/05/21 21:42:48 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x1000000}, 0x0) 2018/05/21 21:42:48 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x806, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 355.711351] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.719061] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 355.726320] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 355.733583] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 355.740843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 355.748102] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000a 2018/05/21 21:42:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000f0ffffff0001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0189436, 0x0) 2018/05/21 21:42:48 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000002540)={@mcast1={0xff, 0x1, [], 0x1}, 0x4, 0x2, 0x3, 0x2, 0x401, 0x87, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000002340)={0x0, 0x6c, "f1ec4664f7882ab9dd2ebba9c7e6c42bf82be9a44f503ab2a5b2b5298da2aa1992033494100b917a48102f770e86d39620d2691f5a6c433986f8d3308935eadf046d0ef441a5380c1d1b93f2d6e6afe3f5313298705da306ae18e29f7db7c8bd09d88ea05895bd18fae40d4d"}, &(0x7f00000023c0)=0x74) sendmsg$inet_sctp(r2, &(0x7f0000002500)={&(0x7f0000000040)=@in={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="0e162481b9ad374b0640542fd600c844945a1ca230137ba59459e513a5ec176997b2e1c302ab6dbbb2d74de13e23e62a08bc5deb84efa4d3431d4bfd80c45b177fd565997c934d15a3cda8c82b808f493e5ec7097efab3c090a47231bfd583f4eb73e12ec30ca0a89e23b189d4c0d373f06ca03ea4f3495cd4afb77deaa4e69c181d073ab350928e5734ea1de8926dfdb3", 0x91}, {&(0x7f0000001240)="4894d460b727fe152ca4c4a53dad87d8c6f184cd008805219c9b3f2dbe089ae4f7d3b885863d41bc7862ecebddd893bc5ffa118a4ad8853ce5db13a9ac81275934ba45f9f99eee4f1230ec5c004506aa857ba4b808840e6e45c07003806e515296bdb748b1445939f056c70443df0dee933ff003e0e8ddd57c9b54730152c8a0e60e890d77f7c470ad66411d8ff912f499d8ebbaa91e2dd3c2e88ca11fe393f9103e7899fc64b526b6d998392ef0011c1c9fcce70ed6f196cc9b7897f772000867c9b5f57629db8ec85ab559aa93e7e303", 0xd1}, {&(0x7f0000001340)="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", 0x1000}], 0x4, &(0x7f0000002400)=[@authinfo={0x18, 0x84, 0x6, {0xc453}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback=0x7f000001}, @authinfo={0x18, 0x84, 0x6, {0x10000}}, @init={0x18, 0x84, 0x0, {0x9, 0xd7e, 0x8, 0x1000}}, @prinfo={0x18, 0x84, 0x5, {0x30}}, @init={0x18, 0x84, 0x0, {0x3, 0x7fffffff, 0x0, 0x80000000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0xebb5, 0x5, 0x5, 0x9, 0x47b, 0x7, 0x3ff, 0x7, r3}}], 0xd8, 0x10}, 0x8044) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:48 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c65302062646576766d6e6574307b0abf3f3c6b8b08000000c6274c2952fac28bfa87c74e3a4147152f313f78cfc33e6c4077301f448a052a25c1f8408e94504aeded9dd8ee94b027a633518533cacea28198ff2b6096bc4ed3104dfb9ed1e7ee4060550a30e6f31a696cbd429e0a2f00af7eca8c983ea061b7519030"], 0x84) inotify_init() ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:48 executing program 0 (fault-call:5 fault-nth:11): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:48 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x34000}, 0x0) 2018/05/21 21:42:48 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8035, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000010001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 355.930260] FAULT_INJECTION: forcing a failure. [ 355.930260] name failslab, interval 1, probability 0, space 0, times 0 [ 355.941580] CPU: 0 PID: 22686 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 355.948852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.958206] Call Trace: [ 355.960805] dump_stack+0x1b9/0x294 [ 355.964449] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.969646] ? lock_downgrade+0x8e0/0x8e0 [ 355.973809] should_fail.cold.4+0xa/0x1a [ 355.977879] ? __lock_is_held+0xb5/0x140 [ 355.981944] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.987055] ? graph_lock+0x170/0x170 [ 355.990856] ? __lock_is_held+0xb5/0x140 [ 355.994920] ? find_held_lock+0x36/0x1c0 [ 355.998985] ? __lock_is_held+0xb5/0x140 [ 356.003045] ? sdma_v2_4_process_illegal_inst_irq+0x60/0x70 [ 356.008768] ? check_same_owner+0x320/0x320 [ 356.013094] ? loop_init_request+0x7b/0x170 [ 356.017425] ? rcu_note_context_switch+0x710/0x710 [ 356.022345] ? graph_lock+0x170/0x170 [ 356.026144] ? __lock_is_held+0xb5/0x140 [ 356.030210] __should_failslab+0x124/0x180 [ 356.034452] should_failslab+0x9/0x14 [ 356.038251] kmem_cache_alloc_node+0x272/0x780 [ 356.042830] ? mark_held_locks+0xc9/0x160 [ 356.046977] ? debug_mutex_init+0x1c/0x60 [ 356.051130] blk_alloc_queue_node+0xe5/0xe40 [ 356.055545] ? blk_init_allocated_queue+0x620/0x620 [ 356.060562] ? __mutex_init+0x1ef/0x280 [ 356.064538] ? __ia32_sys_membarrier+0x150/0x150 [ 356.069306] ? blk_mq_alloc_rq_map+0x142/0x220 [ 356.073894] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.079433] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 356.084187] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 356.088858] ? idr_alloc+0x145/0x1a0 [ 356.092582] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 356.097778] blk_mq_init_queue+0x4b/0xb0 [ 356.101840] loop_add+0x32b/0x9c0 [ 356.105293] ? loop_lookup+0x102/0x220 [ 356.109177] ? loop_queue_rq+0x640/0x640 [ 356.113247] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 356.118436] loop_control_ioctl+0x178/0x500 [ 356.122757] ? loop_add+0x9c0/0x9c0 [ 356.126391] ? expand_files.part.8+0x9a0/0x9a0 [ 356.130976] ? kasan_check_write+0x14/0x20 [ 356.135209] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 356.140143] ? wait_for_completion+0x870/0x870 [ 356.144725] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 356.149915] ? loop_add+0x9c0/0x9c0 [ 356.153542] do_vfs_ioctl+0x1cf/0x16a0 [ 356.157438] ? ioctl_preallocate+0x2e0/0x2e0 [ 356.161849] ? fget_raw+0x20/0x20 [ 356.165300] ? __sb_end_write+0xac/0xe0 [ 356.169276] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 356.174811] ? fput+0x130/0x1a0 [ 356.178088] ? ksys_write+0x1a6/0x250 [ 356.181890] ? security_file_ioctl+0x94/0xc0 [ 356.186822] ksys_ioctl+0xa9/0xd0 [ 356.190278] __x64_sys_ioctl+0x73/0xb0 [ 356.194169] do_syscall_64+0x1b1/0x800 [ 356.198057] ? finish_task_switch+0x1ca/0x840 [ 356.202552] ? syscall_return_slowpath+0x5c0/0x5c0 [ 356.207489] ? syscall_return_slowpath+0x30f/0x5c0 [ 356.212422] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 356.217794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 356.222640] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.227879] RIP: 0033:0x455a09 [ 356.231065] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.238778] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 356.246046] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 356.253313] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 356.260581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 356.267843] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000b 2018/05/21 21:42:49 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) process_vm_writev(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/130, 0x82}, {&(0x7f00000013c0)=""/164, 0xa4}, {&(0x7f0000001480)=""/149, 0x95}], 0x7, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/150, 0x96}, {&(0x7f0000001680)=""/37, 0x25}, {&(0x7f00000016c0)=""/11, 0xb}, {&(0x7f0000001700)=""/64, 0x40}, {&(0x7f0000001740)=""/149, 0x95}, {&(0x7f0000001800)=""/85, 0x55}], 0x6, 0x0) 2018/05/21 21:42:49 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x600, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:49 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)={0x8, 0x0, [{0x6000, 0x16, &(0x7f0000000040)=""/22}, {0xf001, 0x66, &(0x7f0000000180)=""/102}, {0x10f000, 0x93, &(0x7f0000000200)=""/147}, {0x7002, 0x11, &(0x7f0000000100)=""/17}, {0x10000, 0x2a, &(0x7f00000002c0)=""/42}, {0x100000, 0x58, &(0x7f0000000300)=""/88}, {0x4000, 0x98, &(0x7f0000000380)=""/152}, {0x2, 0x82, &(0x7f0000000440)=""/130}]}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000020001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:49 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x200000000000000}, 0x0) 2018/05/21 21:42:49 executing program 0 (fault-call:5 fault-nth:12): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5451, 0x0) 2018/05/21 21:42:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000029200000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:49 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x1c00000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 356.758429] FAULT_INJECTION: forcing a failure. [ 356.758429] name failslab, interval 1, probability 0, space 0, times 0 [ 356.769768] CPU: 0 PID: 22703 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 356.777047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.786405] Call Trace: [ 356.789001] dump_stack+0x1b9/0x294 [ 356.792642] ? dump_stack_print_info.cold.2+0x52/0x52 [ 356.797856] should_fail.cold.4+0xa/0x1a [ 356.801926] ? __unwind_start+0x166/0x330 2018/05/21 21:42:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5452, 0x0) [ 356.806089] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 356.811203] ? __save_stack_trace+0x7e/0xd0 [ 356.815535] ? graph_lock+0x170/0x170 [ 356.819358] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 356.824902] ? find_next_zero_bit+0x111/0x140 [ 356.829406] ? find_held_lock+0x36/0x1c0 [ 356.833475] ? __lock_is_held+0xb5/0x140 [ 356.837552] ? check_same_owner+0x320/0x320 [ 356.841880] ? rcu_note_context_switch+0x710/0x710 [ 356.846813] ? lock_downgrade+0x8e0/0x8e0 [ 356.850972] __should_failslab+0x124/0x180 [ 356.855219] should_failslab+0x9/0x14 [ 356.859025] kmem_cache_alloc_trace+0x2cb/0x780 [ 356.863700] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 356.868811] bioset_create+0xa8/0x900 [ 356.872617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.878157] ? bioset_free+0x320/0x320 [ 356.882051] blk_alloc_queue_node+0x16e/0xe40 [ 356.886549] ? blk_init_allocated_queue+0x620/0x620 [ 356.891571] ? __mutex_init+0x1ef/0x280 [ 356.895549] ? __ia32_sys_membarrier+0x150/0x150 [ 356.900314] ? blk_mq_alloc_rq_map+0x142/0x220 [ 356.904906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.910443] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 356.915204] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 356.919875] ? idr_alloc+0x145/0x1a0 [ 356.923595] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 356.928801] blk_mq_init_queue+0x4b/0xb0 [ 356.932864] loop_add+0x32b/0x9c0 [ 356.936326] ? loop_lookup+0x102/0x220 [ 356.940213] ? loop_queue_rq+0x640/0x640 [ 356.944284] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 356.949481] loop_control_ioctl+0x178/0x500 [ 356.953799] ? loop_add+0x9c0/0x9c0 [ 356.957426] ? expand_files.part.8+0x9a0/0x9a0 [ 356.962006] ? kasan_check_write+0x14/0x20 [ 356.966243] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 356.971170] ? wait_for_completion+0x870/0x870 [ 356.975751] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 356.980939] ? loop_add+0x9c0/0x9c0 [ 356.984566] do_vfs_ioctl+0x1cf/0x16a0 [ 356.988456] ? ioctl_preallocate+0x2e0/0x2e0 [ 356.992863] ? fget_raw+0x20/0x20 [ 356.996320] ? __sb_end_write+0xac/0xe0 [ 357.000300] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 357.005835] ? fput+0x130/0x1a0 [ 357.009112] ? ksys_write+0x1a6/0x250 [ 357.012915] ? security_file_ioctl+0x94/0xc0 [ 357.017347] ksys_ioctl+0xa9/0xd0 [ 357.020801] __x64_sys_ioctl+0x73/0xb0 [ 357.024688] do_syscall_64+0x1b1/0x800 [ 357.028576] ? finish_task_switch+0x1ca/0x840 [ 357.033072] ? syscall_return_slowpath+0x5c0/0x5c0 [ 357.038010] ? syscall_return_slowpath+0x30f/0x5c0 [ 357.042950] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 357.048322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.053171] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/05/21 21:42:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x900}, 0x0) 2018/05/21 21:42:49 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) [ 357.058359] RIP: 0033:0x455a09 [ 357.061542] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.069249] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 357.076512] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 357.083779] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 357.091046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 357.098320] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000c 2018/05/21 21:42:49 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000040)=[0x9, 0x3ff, 0x26, 0x9, 0x0], 0x5, 0xfffffffffffffffa, 0x1, 0x783, 0x6, 0x100, {0x7c, 0x0, 0x2, 0x7, 0xffff, 0xffffffff, 0x6210, 0x2, 0x0, 0x3, 0x3, 0x9, 0x9d, 0x2, "afd6290f51611af1172c36eb54231ecb2b067114868208ad86ef35f446153f3f"}}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000ffffff9e0001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:49 executing program 0 (fault-call:5 fault-nth:13): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c82, 0x0) 2018/05/21 21:42:49 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:49 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x300000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 357.284903] FAULT_INJECTION: forcing a failure. [ 357.284903] name failslab, interval 1, probability 0, space 0, times 0 [ 357.296297] CPU: 1 PID: 22741 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 357.303572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.312922] Call Trace: [ 357.315524] dump_stack+0x1b9/0x294 [ 357.319168] ? dump_stack_print_info.cold.2+0x52/0x52 [ 357.324375] ? __might_sleep+0x95/0x190 [ 357.328362] should_fail.cold.4+0xa/0x1a [ 357.332433] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 357.337541] ? mutex_trylock+0x2a0/0x2a0 [ 357.341606] ? graph_lock+0x170/0x170 [ 357.345405] ? find_held_lock+0x36/0x1c0 [ 357.349464] ? find_held_lock+0x36/0x1c0 [ 357.353531] ? __lock_is_held+0xb5/0x140 [ 357.357602] ? check_same_owner+0x320/0x320 [ 357.361921] ? print_usage_bug+0xc0/0xc0 [ 357.365982] ? graph_lock+0x170/0x170 [ 357.369776] ? __lock_is_held+0xb5/0x140 [ 357.373841] ? rcu_note_context_switch+0x710/0x710 [ 357.378782] __should_failslab+0x124/0x180 [ 357.383026] should_failslab+0x9/0x14 [ 357.386829] kmem_cache_alloc_node_trace+0x26f/0x770 [ 357.391940] ? mempool_free+0x370/0x370 [ 357.395914] mempool_create_node+0x84/0x610 [ 357.400238] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 357.405254] ? mempool_alloc_slab+0x60/0x60 [ 357.409578] ? mempool_free+0x370/0x370 [ 357.413552] ? mempool_alloc_slab+0x60/0x60 [ 357.417878] mempool_create+0x37/0x40 [ 357.421682] bioset_create+0x477/0x900 [ 357.425575] ? bioset_free+0x320/0x320 [ 357.429466] ? debug_mutex_init+0x1c/0x60 [ 357.433620] blk_alloc_queue_node+0x16e/0xe40 [ 357.438120] ? blk_init_allocated_queue+0x620/0x620 [ 357.443134] ? __mutex_init+0x1ef/0x280 [ 357.447112] ? __ia32_sys_membarrier+0x150/0x150 [ 357.451876] ? blk_mq_alloc_rq_map+0x142/0x220 [ 357.456465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.462000] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 357.466760] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 357.471439] ? idr_alloc+0x145/0x1a0 [ 357.475155] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 357.480352] blk_mq_init_queue+0x4b/0xb0 [ 357.484429] loop_add+0x32b/0x9c0 [ 357.487884] ? loop_lookup+0x102/0x220 [ 357.491766] ? loop_queue_rq+0x640/0x640 [ 357.495838] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 357.501030] loop_control_ioctl+0x178/0x500 [ 357.505346] ? loop_add+0x9c0/0x9c0 [ 357.508976] ? expand_files.part.8+0x9a0/0x9a0 [ 357.514391] ? kasan_check_write+0x14/0x20 [ 357.518624] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 357.523553] ? wait_for_completion+0x870/0x870 [ 357.528140] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 357.533325] ? loop_add+0x9c0/0x9c0 [ 357.536950] do_vfs_ioctl+0x1cf/0x16a0 [ 357.540842] ? ioctl_preallocate+0x2e0/0x2e0 [ 357.545252] ? fget_raw+0x20/0x20 [ 357.548702] ? __sb_end_write+0xac/0xe0 [ 357.552682] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 357.558212] ? fput+0x130/0x1a0 [ 357.561492] ? ksys_write+0x1a6/0x250 [ 357.565294] ? security_file_ioctl+0x94/0xc0 [ 357.569704] ksys_ioctl+0xa9/0xd0 [ 357.573160] __x64_sys_ioctl+0x73/0xb0 [ 357.577049] do_syscall_64+0x1b1/0x800 [ 357.580933] ? finish_task_switch+0x1ca/0x840 [ 357.585428] ? syscall_return_slowpath+0x5c0/0x5c0 [ 357.590356] ? syscall_return_slowpath+0x30f/0x5c0 [ 357.595286] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 357.600651] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.605498] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.610680] RIP: 0033:0x455a09 [ 357.613866] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.621576] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 357.628842] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 357.636108] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 357.643369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 357.650634] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000d 2018/05/21 21:42:50 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x900000000000000}, 0x0) 2018/05/21 21:42:50 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) capset(&(0x7f0000000100)={0x399f1736, r2}, &(0x7f0000000180)={0x7fffffff, 0x7f, 0xf2bb, 0x3, 0xffffffffffffffe1, 0x200}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000001c0)=""/22) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r3}) 2018/05/21 21:42:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000f00000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:50 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0x2000, 0x3000, 0xdc4, 0x8a, 0xc1e7}) 2018/05/21 21:42:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:50 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x4305, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:50 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:50 executing program 0 (fault-call:5 fault-nth:14): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 357.761186] FAULT_INJECTION: forcing a failure. [ 357.761186] name failslab, interval 1, probability 0, space 0, times 0 [ 357.772509] CPU: 1 PID: 22758 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 357.779782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.789136] Call Trace: [ 357.791737] dump_stack+0x1b9/0x294 [ 357.795383] ? dump_stack_print_info.cold.2+0x52/0x52 [ 357.800579] ? __might_sleep+0x95/0x190 [ 357.804564] should_fail.cold.4+0xa/0x1a [ 357.808630] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 357.813734] ? mutex_trylock+0x2a0/0x2a0 [ 357.817802] ? graph_lock+0x170/0x170 [ 357.821603] ? find_held_lock+0x36/0x1c0 [ 357.825664] ? find_held_lock+0x36/0x1c0 [ 357.829730] ? __lock_is_held+0xb5/0x140 [ 357.833803] ? check_same_owner+0x320/0x320 [ 357.838123] ? print_usage_bug+0xc0/0xc0 [ 357.842178] ? graph_lock+0x170/0x170 [ 357.845977] ? __lock_is_held+0xb5/0x140 [ 357.850038] ? rcu_note_context_switch+0x710/0x710 [ 357.854970] __should_failslab+0x124/0x180 [ 357.859212] should_failslab+0x9/0x14 [ 357.863012] kmem_cache_alloc_node_trace+0x26f/0x770 [ 357.868125] ? mempool_free+0x370/0x370 [ 357.872102] mempool_create_node+0x84/0x610 [ 357.876421] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 357.881441] ? mempool_alloc_slab+0x60/0x60 [ 357.885765] ? mempool_free+0x370/0x370 [ 357.889746] ? mempool_alloc_slab+0x60/0x60 [ 357.894066] mempool_create+0x37/0x40 [ 357.897873] bioset_create+0x477/0x900 [ 357.901766] ? bioset_free+0x320/0x320 [ 357.905652] ? debug_mutex_init+0x1c/0x60 [ 357.909806] blk_alloc_queue_node+0x16e/0xe40 [ 357.914303] ? blk_init_allocated_queue+0x620/0x620 [ 357.919319] ? __mutex_init+0x1ef/0x280 [ 357.923297] ? __ia32_sys_membarrier+0x150/0x150 [ 357.928059] ? blk_mq_alloc_rq_map+0x142/0x220 [ 357.932644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.938181] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 357.942939] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 357.947609] ? idr_alloc+0x145/0x1a0 [ 357.951324] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 357.956515] blk_mq_init_queue+0x4b/0xb0 [ 357.960577] loop_add+0x32b/0x9c0 [ 357.964033] ? loop_lookup+0x102/0x220 [ 357.967919] ? loop_queue_rq+0x640/0x640 [ 357.971984] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 357.977173] loop_control_ioctl+0x178/0x500 [ 357.981494] ? loop_add+0x9c0/0x9c0 [ 357.985119] ? expand_files.part.8+0x9a0/0x9a0 [ 357.989703] ? kasan_check_write+0x14/0x20 [ 357.993939] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 357.998869] ? wait_for_completion+0x870/0x870 [ 358.003455] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 358.008643] ? loop_add+0x9c0/0x9c0 [ 358.012268] do_vfs_ioctl+0x1cf/0x16a0 [ 358.016158] ? ioctl_preallocate+0x2e0/0x2e0 [ 358.020569] ? fget_raw+0x20/0x20 [ 358.024022] ? __sb_end_write+0xac/0xe0 [ 358.027999] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 358.033536] ? fput+0x130/0x1a0 [ 358.036810] ? ksys_write+0x1a6/0x250 [ 358.040613] ? security_file_ioctl+0x94/0xc0 [ 358.045022] ksys_ioctl+0xa9/0xd0 [ 358.048477] __x64_sys_ioctl+0x73/0xb0 [ 358.052367] do_syscall_64+0x1b1/0x800 [ 358.056249] ? finish_task_switch+0x1ca/0x840 [ 358.060744] ? syscall_return_slowpath+0x5c0/0x5c0 [ 358.065670] ? syscall_return_slowpath+0x30f/0x5c0 [ 358.070651] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 358.076035] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.080880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.086061] RIP: 0033:0x455a09 [ 358.089242] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.096946] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 358.104207] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/21 21:42:50 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) kexec_load(0x9, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="3d8ae263eb34d19da807ba0174ad5bfcf4b7dd0f71eaa340c619133bc52982d809c3770b308c311cb61b27ff89eb23049d0b720e789a5469a334fa8de83d88675db3b5732451cc8e3e60e5a196f1e2d6f29c99051a284d1bb17dca9bd395b5209a4611bf1e30", 0x66, 0x7, 0xfffffffffffffffe}, {&(0x7f0000000200)="ec373ca51cd837ec056a171c83bafc4dea9d67098a6632a90c5f345816d44b128f2b3c35dc3fb295029be267fa402c541c3b5afb0f9424b6889663178842a95ac141e81adb8ef9a4759abe8f57812ba78167ad56477b69624a8ce8514eba34d8bc1beeec2d4a435561523da75c410ef448d9e4b8ca57d46fe56b629f19c189722a57fb5f24f2e63ba6618ac671040d50f566fcd1491166247b8c88ca3ef473941171a8ea228c4422bf925628d9e98cf562761d4b", 0xb4, 0xb790, 0x100}, {&(0x7f00000002c0)="f7da6b5efe305631c964f2c8dc78b285a9b998f4a85f204fe07d16fbadfda360ba2abb23ef878cd5e77616a1c13e889dd154aeb16ecb9eab209054f282355120743b95e780073aa0cc32259be4ede6ba6fa871758d672169adb32f715bb63093ef2f796612eb61307b0c94c7ee0463be9db89beb9b217ae3c69b2d2f1ba05f5c2ccc07a201af839621a9f59a16b2da330b9a53", 0x93, 0x8, 0x2}], 0x160002) 2018/05/21 21:42:50 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x9}, 0x0) 2018/05/21 21:42:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x6) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:50 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8847000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 358.111469] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 358.118735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 358.126005] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000e 2018/05/21 21:42:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000020000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:50 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40000, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000040)=""/64) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) accept4$ax25(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c81, r3) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:50 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:50 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x40030000000000}, 0x0) 2018/05/21 21:42:50 executing program 0 (fault-call:5 fault-nth:15): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 358.320204] FAULT_INJECTION: forcing a failure. [ 358.320204] name failslab, interval 1, probability 0, space 0, times 0 [ 358.331550] CPU: 1 PID: 22785 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 358.338830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.348178] Call Trace: [ 358.350769] dump_stack+0x1b9/0x294 [ 358.354400] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.359591] ? __kernel_text_address+0xd/0x40 [ 358.364085] ? unwind_get_return_address+0x61/0xa0 [ 358.369015] should_fail.cold.4+0xa/0x1a [ 358.373075] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.378183] ? save_stack+0xa9/0xd0 [ 358.381808] ? graph_lock+0x170/0x170 [ 358.385607] ? mempool_create+0x37/0x40 [ 358.389580] ? bioset_create+0x477/0x900 [ 358.393640] ? blk_alloc_queue_node+0x16e/0xe40 [ 358.398305] ? blk_mq_init_queue+0x4b/0xb0 [ 358.402535] ? loop_add+0x32b/0x9c0 [ 358.406160] ? loop_control_ioctl+0x178/0x500 [ 358.410665] ? find_held_lock+0x36/0x1c0 [ 358.414730] ? __lock_is_held+0xb5/0x140 [ 358.418799] ? check_same_owner+0x320/0x320 [ 358.423125] ? rcu_note_context_switch+0x710/0x710 [ 358.428055] __should_failslab+0x124/0x180 [ 358.432294] should_failslab+0x9/0x14 [ 358.436095] kmem_cache_alloc_node_trace+0x26f/0x770 [ 358.441194] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.446212] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 358.451492] __kmalloc_node+0x33/0x70 [ 358.455290] ? mempool_free+0x370/0x370 [ 358.459262] mempool_create_node+0x111/0x610 [ 358.463667] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 358.468741] ? mempool_alloc_slab+0x60/0x60 [ 358.473069] ? mempool_free+0x370/0x370 [ 358.477041] ? mempool_alloc_slab+0x60/0x60 [ 358.481362] mempool_create+0x37/0x40 [ 358.485166] bioset_create+0x477/0x900 [ 358.489053] ? bioset_free+0x320/0x320 [ 358.492940] ? debug_mutex_init+0x1c/0x60 [ 358.497092] blk_alloc_queue_node+0x16e/0xe40 [ 358.501590] ? blk_init_allocated_queue+0x620/0x620 [ 358.506606] ? __mutex_init+0x1ef/0x280 [ 358.510584] ? __ia32_sys_membarrier+0x150/0x150 [ 358.515348] ? blk_mq_alloc_rq_map+0x142/0x220 [ 358.519936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.525470] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 358.530230] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 358.534898] ? idr_alloc+0x145/0x1a0 [ 358.538616] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 358.543811] blk_mq_init_queue+0x4b/0xb0 [ 358.547874] loop_add+0x32b/0x9c0 [ 358.551326] ? loop_lookup+0x102/0x220 [ 358.555212] ? loop_queue_rq+0x640/0x640 [ 358.559280] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 358.564467] loop_control_ioctl+0x178/0x500 [ 358.568783] ? loop_add+0x9c0/0x9c0 [ 358.572411] ? expand_files.part.8+0x9a0/0x9a0 [ 358.576992] ? kasan_check_write+0x14/0x20 [ 358.581229] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 358.586161] ? wait_for_completion+0x870/0x870 [ 358.590741] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 358.595930] ? loop_add+0x9c0/0x9c0 [ 358.599556] do_vfs_ioctl+0x1cf/0x16a0 [ 358.603448] ? ioctl_preallocate+0x2e0/0x2e0 [ 358.607854] ? fget_raw+0x20/0x20 [ 358.611308] ? __sb_end_write+0xac/0xe0 [ 358.615286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 358.620820] ? fput+0x130/0x1a0 [ 358.624101] ? ksys_write+0x1a6/0x250 [ 358.627906] ? security_file_ioctl+0x94/0xc0 [ 358.632319] ksys_ioctl+0xa9/0xd0 [ 358.635779] __x64_sys_ioctl+0x73/0xb0 [ 358.639669] do_syscall_64+0x1b1/0x800 [ 358.643568] ? finish_task_switch+0x1ca/0x840 [ 358.648064] ? syscall_return_slowpath+0x5c0/0x5c0 [ 358.652992] ? syscall_return_slowpath+0x30f/0x5c0 [ 358.657925] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 358.663289] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.668137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.673321] RIP: 0033:0x455a09 [ 358.676506] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.684219] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 358.691484] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 358.698747] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 358.706009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 358.713276] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000f 2018/05/21 21:42:51 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000580)={0x8510, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x6, r2, 0x10000, 0x8000000003}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000100)={0x6, r3, 0x0, 0x401}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x5, 0x10000, 0xa5, 0x10000, 0x5, 0x80, 0x3, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x6, 0x1, 0x20, 0x0, 0x10000}}, &(0x7f0000000240)=0xb0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000003c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x48, 0x0, &(0x7f0000000400)=[@release={0x40046306, 0x4}, @clear_death={0x400c630f, 0x0, 0x4}, @acquire={0x40046305, 0x4}, @increfs={0x40046304, 0x1}, @enter_looper={0x630c}, @increfs_done={0x40106308, r6, 0x4}, @release={0x40046306, 0x2}], 0xb8, 0x0, &(0x7f0000000480)="bdf0f0e165b05b8bb69aabaac0770e3aa8cdf504906a30dd0810bfe0ca2f94ac1ba15c61d88969c929f4c06fea91f0e0ba69d8e554e214a1edd9b7a992fb34cc5714d9fcaed58aa5434d42cfb70cc79f7cb815bfe1608750c500c74c2f17367e2c85c4df8f3fc4b573ecc553713e12476f41f3cab2b2790d540fb13fff415c0bff293720e3b2c620a7b55d594dfd3e84d2f129d256cba3a3a3f341d022e638269e224e4c0322cb5cb882adc8028496c138ed0979619f770b"}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000280)={r5, 0xcd, "7fd0b07241111ac7c4a990c72ef99a17698e65dd5191f1b00e7f9126c3d1cf310df265800fd94ca5701b4f5ff21511e327cfda82607d6dd94cb481531352ff3161f31f8c0cb86919b636f41099e7357440dbbf90c12d59f57335be731db25ee1d15257f60b438758bff6da9d958e6b96fe83474fb21eb1f42d0f48a9de24d74e0d7f758ed35558a937ceb27226df959e9fe42f3ef78635705f1ba476b11b47a773ca32ea7f9b4a143cf11185f79125935d994b1db653745c7118f197f9a1698850f1f3fe91501d2de9b8c4ca74"}, &(0x7f0000000380)=0xd5) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r4}) 2018/05/21 21:42:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000000000f0ffff0001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:51 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x8864000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) accept$packet(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001540)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001580)=r2) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000000)={0x2, 0x0, [{}, {}]}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) fgetxattr(r3, &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000180)=""/10, 0xa) 2018/05/21 21:42:51 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x80c00, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:51 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0xffffff7f}, 0x0) 2018/05/21 21:42:51 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:51 executing program 0 (fault-call:5 fault-nth:16): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000007fffffff0001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 358.827167] FAULT_INJECTION: forcing a failure. [ 358.827167] name failslab, interval 1, probability 0, space 0, times 0 [ 358.838463] CPU: 1 PID: 22803 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 358.845736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.855089] Call Trace: [ 358.857694] dump_stack+0x1b9/0x294 [ 358.861338] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.866540] ? __save_stack_trace+0x7e/0xd0 [ 358.870879] should_fail.cold.4+0xa/0x1a [ 358.874952] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.880054] ? kasan_kmalloc+0xc4/0xe0 [ 358.883940] ? kasan_slab_alloc+0x12/0x20 [ 358.888083] ? kmem_cache_alloc+0x12e/0x760 [ 358.892403] ? mempool_alloc_slab+0x44/0x60 [ 358.896732] ? mempool_create_node+0x2cf/0x610 [ 358.901311] ? mempool_create+0x37/0x40 [ 358.905280] ? bioset_create+0x477/0x900 [ 358.909340] ? graph_lock+0x170/0x170 [ 358.913137] ? do_vfs_ioctl+0x1cf/0x16a0 [ 358.917197] ? ksys_ioctl+0xa9/0xd0 [ 358.920822] ? __x64_sys_ioctl+0x73/0xb0 [ 358.924881] ? do_syscall_64+0x1b1/0x800 [ 358.928940] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.934304] ? find_held_lock+0x36/0x1c0 [ 358.938369] ? __lock_is_held+0xb5/0x140 [ 358.942429] ? ioctx_alloc+0x810/0x2480 [ 358.946416] ? check_same_owner+0x320/0x320 [ 358.950737] ? rcu_note_context_switch+0x710/0x710 [ 358.955671] __should_failslab+0x124/0x180 [ 358.959909] ? mempool_free+0x370/0x370 [ 358.963880] should_failslab+0x9/0x14 [ 358.967680] kmem_cache_alloc+0x2af/0x760 [ 358.971831] ? init_wait_entry+0x1b0/0x1b0 [ 358.976071] ? mempool_alloc_slab+0x44/0x60 [ 358.980396] ? mempool_free+0x370/0x370 [ 358.984374] mempool_alloc_slab+0x44/0x60 [ 358.988523] mempool_create_node+0x2cf/0x610 [ 358.992937] ? mempool_free+0x370/0x370 [ 358.996914] ? mempool_alloc_slab+0x60/0x60 [ 359.001236] mempool_create+0x37/0x40 [ 359.005036] bioset_create+0x477/0x900 [ 359.008927] ? bioset_free+0x320/0x320 [ 359.012814] ? debug_mutex_init+0x1c/0x60 [ 359.016966] blk_alloc_queue_node+0x16e/0xe40 [ 359.021462] ? blk_init_allocated_queue+0x620/0x620 [ 359.026482] ? __mutex_init+0x1ef/0x280 [ 359.030457] ? __ia32_sys_membarrier+0x150/0x150 [ 359.035221] ? blk_mq_alloc_rq_map+0x142/0x220 [ 359.039805] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.045343] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 359.050099] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 359.054766] ? idr_alloc+0x145/0x1a0 [ 359.058483] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 359.063677] blk_mq_init_queue+0x4b/0xb0 [ 359.067735] loop_add+0x32b/0x9c0 [ 359.071191] ? loop_lookup+0x102/0x220 [ 359.075075] ? loop_queue_rq+0x640/0x640 [ 359.079143] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 359.084334] loop_control_ioctl+0x178/0x500 [ 359.088660] ? loop_add+0x9c0/0x9c0 [ 359.092289] ? expand_files.part.8+0x9a0/0x9a0 [ 359.096870] ? kasan_check_write+0x14/0x20 [ 359.101107] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 359.106041] ? wait_for_completion+0x870/0x870 [ 359.110623] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 359.115812] ? loop_add+0x9c0/0x9c0 [ 359.119438] do_vfs_ioctl+0x1cf/0x16a0 [ 359.123330] ? ioctl_preallocate+0x2e0/0x2e0 [ 359.127736] ? fget_raw+0x20/0x20 [ 359.131191] ? __sb_end_write+0xac/0xe0 [ 359.135168] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 359.140704] ? fput+0x130/0x1a0 [ 359.143984] ? ksys_write+0x1a6/0x250 [ 359.147794] ? security_file_ioctl+0x94/0xc0 [ 359.152203] ksys_ioctl+0xa9/0xd0 [ 359.155662] __x64_sys_ioctl+0x73/0xb0 [ 359.159554] do_syscall_64+0x1b1/0x800 [ 359.163438] ? finish_task_switch+0x1ca/0x840 [ 359.167933] ? syscall_return_slowpath+0x5c0/0x5c0 [ 359.172862] ? syscall_return_slowpath+0x30f/0x5c0 [ 359.177792] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 359.183157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.188031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.193218] RIP: 0033:0x455a09 [ 359.196400] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.204110] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 359.211377] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 359.218643] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/21 21:42:51 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x4}, 0x0) 2018/05/21 21:42:51 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0xb00000000000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 359.225907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 359.233199] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000010 2018/05/21 21:42:51 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x17, &(0x7f0000000000)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000180)={{0x101, 0x592e}, 'port1\x00', 0x1, 0x100040, 0x6, 0x2, 0x5, 0x5, 0xba, 0x0, 0x1, 0x100000001}) 2018/05/21 21:42:51 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xc0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0xff, @loopback={0x0, 0x1}, 0x5}}, 0x7, 0x2}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r2, 0x2, 0x1, [0xc037]}, &(0x7f0000000280)=0xa) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000fffff0000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:51 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x80001, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:52 executing program 0 (fault-call:5 fault-nth:17): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:52 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x4000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:52 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x0) 2018/05/21 21:42:52 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000000000f000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x3ffffffd, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:52 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000180)={0x8001, 0x5, 0x0, [{0x2, 0x3, 0x0, 0xcb, 0x1, 0x81, 0x80000000}, {0x0, 0x14a2, 0x9, 0x4, 0x9, 0x8001, 0x4}, {0xffff, 0x9, 0x81, 0x100, 0xad3, 0x55fd, 0x2}, {0x7, 0x1, 0x9, 0x47, 0x2, 0x8, 0x9}, {0xe901, 0x6, 0x9, 0x3, 0xfffffffffffffffe, 0x5, 0x4}]}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) timerfd_create(0x7, 0x80000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) dup2(r1, r0) r3 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f0000000300)=""/110) [ 359.479027] FAULT_INJECTION: forcing a failure. [ 359.479027] name failslab, interval 1, probability 0, space 0, times 0 [ 359.490297] CPU: 0 PID: 22834 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 359.497572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.506928] Call Trace: [ 359.509535] dump_stack+0x1b9/0x294 [ 359.513175] ? dump_stack_print_info.cold.2+0x52/0x52 [ 359.518372] ? __save_stack_trace+0x7e/0xd0 [ 359.522706] should_fail.cold.4+0xa/0x1a [ 359.526772] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 359.531878] ? kasan_kmalloc+0xc4/0xe0 [ 359.535764] ? kasan_slab_alloc+0x12/0x20 [ 359.539908] ? kmem_cache_alloc+0x12e/0x760 [ 359.544228] ? mempool_alloc_slab+0x44/0x60 [ 359.548546] ? mempool_create_node+0x2cf/0x610 [ 359.553128] ? mempool_create+0x37/0x40 [ 359.557103] ? bioset_create+0x477/0x900 [ 359.561165] ? graph_lock+0x170/0x170 [ 359.564963] ? do_vfs_ioctl+0x1cf/0x16a0 [ 359.569042] ? ksys_ioctl+0xa9/0xd0 [ 359.572671] ? __x64_sys_ioctl+0x73/0xb0 [ 359.576733] ? do_syscall_64+0x1b1/0x800 [ 359.580792] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.586160] ? find_held_lock+0x36/0x1c0 [ 359.590233] ? __lock_is_held+0xb5/0x140 [ 359.594307] ? check_same_owner+0x320/0x320 [ 359.598635] ? rcu_note_context_switch+0x710/0x710 [ 359.603570] __should_failslab+0x124/0x180 [ 359.607812] ? mempool_free+0x370/0x370 [ 359.611788] should_failslab+0x9/0x14 [ 359.615588] kmem_cache_alloc+0x2af/0x760 [ 359.619740] ? init_wait_entry+0x1b0/0x1b0 [ 359.623976] ? mempool_alloc_slab+0x44/0x60 [ 359.628299] ? mempool_free+0x370/0x370 [ 359.632281] mempool_alloc_slab+0x44/0x60 [ 359.636434] mempool_create_node+0x2cf/0x610 [ 359.640849] ? mempool_free+0x370/0x370 [ 359.644822] ? mempool_alloc_slab+0x60/0x60 [ 359.649145] mempool_create+0x37/0x40 [ 359.652949] bioset_create+0x477/0x900 [ 359.656842] ? bioset_free+0x320/0x320 [ 359.660733] ? debug_mutex_init+0x1c/0x60 [ 359.664883] blk_alloc_queue_node+0x16e/0xe40 [ 359.669380] ? blk_init_allocated_queue+0x620/0x620 [ 359.674398] ? __mutex_init+0x1ef/0x280 [ 359.678379] ? __ia32_sys_membarrier+0x150/0x150 [ 359.683143] ? blk_mq_alloc_rq_map+0x142/0x220 [ 359.687730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.693264] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 359.698025] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 359.702695] ? idr_alloc+0x145/0x1a0 [ 359.706414] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 359.711610] blk_mq_init_queue+0x4b/0xb0 [ 359.715669] loop_add+0x32b/0x9c0 [ 359.719123] ? loop_lookup+0x102/0x220 [ 359.723009] ? loop_queue_rq+0x640/0x640 2018/05/21 21:42:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000201fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 359.727081] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 359.732272] loop_control_ioctl+0x178/0x500 [ 359.736590] ? loop_add+0x9c0/0x9c0 [ 359.740215] ? expand_files.part.8+0x9a0/0x9a0 [ 359.744797] ? kasan_check_write+0x14/0x20 [ 359.749033] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 359.753965] ? wait_for_completion+0x870/0x870 [ 359.758550] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 359.763739] ? loop_add+0x9c0/0x9c0 [ 359.767369] do_vfs_ioctl+0x1cf/0x16a0 [ 359.771270] ? ioctl_preallocate+0x2e0/0x2e0 [ 359.775678] ? fget_raw+0x20/0x20 2018/05/21 21:42:52 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x3580, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 359.779139] ? __sb_end_write+0xac/0xe0 [ 359.783121] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 359.788657] ? fput+0x130/0x1a0 [ 359.791940] ? ksys_write+0x1a6/0x250 [ 359.795753] ? security_file_ioctl+0x94/0xc0 [ 359.800167] ksys_ioctl+0xa9/0xd0 [ 359.803626] __x64_sys_ioctl+0x73/0xb0 [ 359.807515] do_syscall_64+0x1b1/0x800 [ 359.811401] ? finish_task_switch+0x1ca/0x840 [ 359.815900] ? syscall_return_slowpath+0x5c0/0x5c0 [ 359.820832] ? syscall_return_slowpath+0x30f/0x5c0 [ 359.825769] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 359.831136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.835983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.841169] RIP: 0033:0x455a09 [ 359.844351] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.852064] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 359.859332] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 359.866599] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/21 21:42:52 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x400000000000000}, 0x0) [ 359.873863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 359.881133] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000011 2018/05/21 21:42:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000000000ffffff9e01fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x200, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:52 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:52 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x20200, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setregs(0xd, r2, 0x483, &(0x7f0000000280)="f2e7044bc5e19364f469038985aa636284715c3b0f681dd70f3f1f63191aa86a8525e7790e9239f21a31a98a40e4eae85d7a1ca2f217ea271e829449b7725997e7718cdc1fef183b8e6603f2a9389aab6fc3cf4c3431f4d379eae68e5c66344512e3025ed59a2b0208b054444127dbcee1014007f29ed9d19097212aaf04d05b8bf6d90f0965abcd8970f89a63f5c06cc42b37b116b0733fcdceb1ee2610afa56286") clock_gettime(0x0, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x120, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5a}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x9}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000180)={0x77359400}, 0x11d) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x1000000000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) 2018/05/21 21:42:52 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xffffdd86, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:52 executing program 0 (fault-call:5 fault-nth:18): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:52 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 2018/05/21 21:42:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000000000f0000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 360.078630] FAULT_INJECTION: forcing a failure. [ 360.078630] name failslab, interval 1, probability 0, space 0, times 0 [ 360.089996] CPU: 1 PID: 22867 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 360.097272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.106622] Call Trace: [ 360.109222] dump_stack+0x1b9/0x294 [ 360.112858] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.118048] ? __kernel_text_address+0xd/0x40 [ 360.122550] ? unwind_get_return_address+0x61/0xa0 [ 360.127484] should_fail.cold.4+0xa/0x1a [ 360.131550] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.136658] ? save_stack+0xa9/0xd0 [ 360.140286] ? graph_lock+0x170/0x170 [ 360.144086] ? mempool_create+0x37/0x40 [ 360.148056] ? bioset_create+0x6b3/0x900 [ 360.152143] ? blk_alloc_queue_node+0x16e/0xe40 [ 360.156810] ? blk_mq_init_queue+0x4b/0xb0 [ 360.161041] ? loop_add+0x32b/0x9c0 [ 360.164662] ? loop_control_ioctl+0x178/0x500 [ 360.169158] ? find_held_lock+0x36/0x1c0 [ 360.173224] ? __lock_is_held+0xb5/0x140 [ 360.177297] ? check_same_owner+0x320/0x320 [ 360.181622] ? rcu_note_context_switch+0x710/0x710 [ 360.186560] __should_failslab+0x124/0x180 [ 360.190798] should_failslab+0x9/0x14 [ 360.194601] kmem_cache_alloc_node_trace+0x26f/0x770 [ 360.199702] ? rcu_read_lock_sched_held+0x108/0x120 [ 360.204718] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 360.209997] ? init_wait_entry+0x1b0/0x1b0 [ 360.214241] __kmalloc_node+0x33/0x70 [ 360.218045] ? mempool_free+0x370/0x370 [ 360.222020] mempool_create_node+0x111/0x610 [ 360.226430] ? mempool_alloc_slab+0x60/0x60 [ 360.230751] ? mempool_free+0x370/0x370 [ 360.234726] ? mempool_alloc_slab+0x60/0x60 [ 360.239046] mempool_create+0x37/0x40 [ 360.242849] bioset_create+0x6b3/0x900 [ 360.246740] ? bioset_free+0x320/0x320 [ 360.250626] ? debug_mutex_init+0x1c/0x60 [ 360.254775] blk_alloc_queue_node+0x16e/0xe40 [ 360.259276] ? blk_init_allocated_queue+0x620/0x620 [ 360.264295] ? __mutex_init+0x1ef/0x280 [ 360.268276] ? __ia32_sys_membarrier+0x150/0x150 [ 360.273037] ? blk_mq_alloc_rq_map+0x142/0x220 [ 360.277621] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.283158] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 360.287916] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 360.292590] ? idr_alloc+0x145/0x1a0 [ 360.296306] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 360.301499] blk_mq_init_queue+0x4b/0xb0 [ 360.305562] loop_add+0x32b/0x9c0 [ 360.309014] ? loop_lookup+0x102/0x220 [ 360.312897] ? loop_queue_rq+0x640/0x640 [ 360.316965] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 360.322157] loop_control_ioctl+0x178/0x500 [ 360.326474] ? loop_add+0x9c0/0x9c0 [ 360.330103] ? expand_files.part.8+0x9a0/0x9a0 [ 360.334682] ? kasan_check_write+0x14/0x20 [ 360.338914] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 360.343844] ? wait_for_completion+0x870/0x870 [ 360.348429] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 360.353619] ? loop_add+0x9c0/0x9c0 [ 360.357246] do_vfs_ioctl+0x1cf/0x16a0 [ 360.361135] ? ioctl_preallocate+0x2e0/0x2e0 [ 360.365544] ? fget_raw+0x20/0x20 [ 360.368996] ? __sb_end_write+0xac/0xe0 [ 360.372971] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 360.378504] ? fput+0x130/0x1a0 [ 360.381782] ? ksys_write+0x1a6/0x250 [ 360.385584] ? security_file_ioctl+0x94/0xc0 [ 360.390025] ksys_ioctl+0xa9/0xd0 [ 360.393480] __x64_sys_ioctl+0x73/0xb0 [ 360.397373] do_syscall_64+0x1b1/0x800 [ 360.401256] ? finish_task_switch+0x1ca/0x840 [ 360.405753] ? syscall_return_slowpath+0x5c0/0x5c0 [ 360.410680] ? syscall_return_slowpath+0x30f/0x5c0 [ 360.415610] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 360.420979] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/05/21 21:42:53 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x800, 0x300) getsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000400)=@req={0x400, 0xff, 0x6, 0x2}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000200)=0x6, 0xffffffffffffff4b) keyctl$join(0x1, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) write$cgroup_subtree(r1, &(0x7f0000000480), 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000040)={'syzkaller0\x00', 0x7f}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000440)={0x7}, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x7460f7d4}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x1, 0x2e}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x68, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x11}, 0x4dc}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in={0x2, 0x4e23, @multicast2=0xe0000002}]}, &(0x7f0000000380)=0x10) 2018/05/21 21:42:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 2018/05/21 21:42:53 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x401, 0x200000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="cc010453b60100005d0300002000000038010000060000000000000000000000b36633357628033b11acad44be08719fcb8e183615daa16a1f676b290ab6aeea880ae96050f6201f1bac4373c46fe127ba9b401d000000000063393afb73e288345c5b9f3ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001caac7d0b7413380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014c5c1"], 0x554) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x8848000000000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 360.425823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.431005] RIP: 0033:0x455a09 [ 360.434189] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.441897] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 360.449159] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 360.456422] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 360.463685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 360.470947] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000012 2018/05/21 21:42:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={r2, &(0x7f0000000180)=""/174}) 2018/05/21 21:42:53 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2018/05/21 21:42:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x80ffffff00000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000000000f000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:53 executing program 0 (fault-call:5 fault-nth:19): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 360.689381] FAULT_INJECTION: forcing a failure. [ 360.689381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.701238] CPU: 1 PID: 22898 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 360.708524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.717959] Call Trace: [ 360.720556] dump_stack+0x1b9/0x294 [ 360.724189] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.729379] ? find_held_lock+0x36/0x1c0 [ 360.733447] should_fail.cold.4+0xa/0x1a [ 360.737514] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.742623] ? debug_check_no_locks_freed+0x310/0x310 [ 360.747812] ? lock_downgrade+0x8e0/0x8e0 [ 360.751969] ? kasan_check_read+0x11/0x20 [ 360.756118] ? rcu_is_watching+0x85/0x140 [ 360.760263] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 360.765459] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 360.770655] ? is_bpf_text_address+0xd7/0x170 [ 360.775149] ? kernel_text_address+0x79/0xf0 [ 360.779556] ? __unwind_start+0x166/0x330 [ 360.783706] ? __kernel_text_address+0xd/0x40 [ 360.788207] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.793744] ? should_fail+0x21b/0xbcd [ 360.797632] ? __save_stack_trace+0x7e/0xd0 [ 360.801956] __alloc_pages_nodemask+0x34e/0xd70 [ 360.806628] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 360.811641] ? print_usage_bug+0xc0/0xc0 [ 360.815701] ? kasan_kmalloc+0xc4/0xe0 [ 360.819590] ? find_held_lock+0x36/0x1c0 [ 360.823651] ? __lock_is_held+0xb5/0x140 [ 360.827721] ? check_same_owner+0x320/0x320 [ 360.832047] cache_grow_begin+0x72/0x6c0 [ 360.836115] kmem_cache_alloc+0x689/0x760 [ 360.840264] ? init_wait_entry+0x1b0/0x1b0 [ 360.844504] ? mempool_free+0x370/0x370 [ 360.848483] mempool_alloc_slab+0x44/0x60 [ 360.852633] mempool_create_node+0x2cf/0x610 [ 360.857046] ? mempool_free+0x370/0x370 [ 360.861016] ? mempool_alloc_slab+0x60/0x60 [ 360.865337] mempool_create+0x37/0x40 [ 360.869151] bioset_create+0x6b3/0x900 [ 360.873044] ? bioset_free+0x320/0x320 [ 360.876932] ? debug_mutex_init+0x1c/0x60 [ 360.881082] blk_alloc_queue_node+0x16e/0xe40 [ 360.885577] ? blk_init_allocated_queue+0x620/0x620 [ 360.890593] ? __mutex_init+0x1ef/0x280 [ 360.894572] ? __ia32_sys_membarrier+0x150/0x150 [ 360.899334] ? blk_mq_alloc_rq_map+0x142/0x220 [ 360.903917] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.909451] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 360.914214] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 360.918882] ? idr_alloc+0x145/0x1a0 [ 360.922595] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 360.927791] blk_mq_init_queue+0x4b/0xb0 [ 360.931849] loop_add+0x32b/0x9c0 [ 360.935299] ? loop_lookup+0x102/0x220 [ 360.939182] ? loop_queue_rq+0x640/0x640 [ 360.943250] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 360.948441] loop_control_ioctl+0x178/0x500 [ 360.952766] ? loop_add+0x9c0/0x9c0 [ 360.956390] ? expand_files.part.8+0x9a0/0x9a0 [ 360.960970] ? kasan_check_write+0x14/0x20 [ 360.965205] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 360.970135] ? wait_for_completion+0x870/0x870 [ 360.974717] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 360.979905] ? loop_add+0x9c0/0x9c0 [ 360.983533] do_vfs_ioctl+0x1cf/0x16a0 [ 360.987427] ? ioctl_preallocate+0x2e0/0x2e0 [ 360.991836] ? fget_raw+0x20/0x20 [ 360.995288] ? __sb_end_write+0xac/0xe0 [ 360.999263] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 361.004795] ? fput+0x130/0x1a0 [ 361.008072] ? ksys_write+0x1a6/0x250 [ 361.011878] ? security_file_ioctl+0x94/0xc0 [ 361.016289] ksys_ioctl+0xa9/0xd0 [ 361.019746] __x64_sys_ioctl+0x73/0xb0 [ 361.023632] do_syscall_64+0x1b1/0x800 [ 361.027515] ? finish_task_switch+0x1ca/0x840 [ 361.032009] ? syscall_return_slowpath+0x5c0/0x5c0 [ 361.036938] ? syscall_return_slowpath+0x30f/0x5c0 [ 361.041883] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 361.047250] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.052098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.057279] RIP: 0033:0x455a09 [ 361.060469] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.068198] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 361.075464] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 361.082732] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 361.089995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 361.097258] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000013 2018/05/21 21:42:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000000133200, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x14001, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:53 executing program 0 (fault-call:5 fault-nth:20): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:53 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={r2, r3/1000+30000}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:53 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0xfffffffffffffffd, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x8864000000000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000000000f0ffffff01fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2018/05/21 21:42:53 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:53 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000200000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 361.241480] FAULT_INJECTION: forcing a failure. [ 361.241480] name failslab, interval 1, probability 0, space 0, times 0 [ 361.252799] CPU: 1 PID: 22918 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 361.260076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.269439] Call Trace: [ 361.272038] dump_stack+0x1b9/0x294 [ 361.275685] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.280897] ? is_bpf_text_address+0xd7/0x170 [ 361.285402] ? kernel_text_address+0x79/0xf0 [ 361.289835] should_fail.cold.4+0xa/0x1a [ 361.293989] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 361.299098] ? graph_lock+0x170/0x170 [ 361.302899] ? save_stack+0xa9/0xd0 [ 361.306527] ? print_usage_bug+0xc0/0xc0 [ 361.310589] ? kasan_kmalloc+0xc4/0xe0 [ 361.314477] ? find_held_lock+0x36/0x1c0 [ 361.318544] ? __lock_is_held+0xb5/0x140 [ 361.322620] ? check_same_owner+0x320/0x320 [ 361.326942] ? rcu_note_context_switch+0x710/0x710 [ 361.331867] ? __lockdep_init_map+0x105/0x590 [ 361.336363] __should_failslab+0x124/0x180 [ 361.340599] ? mempool_free+0x370/0x370 [ 361.344575] should_failslab+0x9/0x14 [ 361.348372] kmem_cache_alloc+0x2af/0x760 [ 361.352524] ? init_wait_entry+0x1b0/0x1b0 [ 361.356763] ? mempool_free+0x370/0x370 [ 361.360736] mempool_alloc_slab+0x44/0x60 [ 361.364889] mempool_create_node+0x2cf/0x610 [ 361.369301] ? mempool_free+0x370/0x370 [ 361.373275] ? mempool_alloc_slab+0x60/0x60 [ 361.377596] mempool_create+0x37/0x40 [ 361.381401] bioset_create+0x6b3/0x900 [ 361.385299] ? bioset_free+0x320/0x320 [ 361.389191] ? debug_mutex_init+0x1c/0x60 [ 361.393342] blk_alloc_queue_node+0x16e/0xe40 [ 361.397846] ? blk_init_allocated_queue+0x620/0x620 [ 361.402863] ? __mutex_init+0x1ef/0x280 [ 361.406843] ? __ia32_sys_membarrier+0x150/0x150 [ 361.411606] ? blk_mq_alloc_rq_map+0x142/0x220 [ 361.416193] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.421745] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 361.426525] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 361.431198] ? idr_alloc+0x145/0x1a0 [ 361.434914] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 361.440110] blk_mq_init_queue+0x4b/0xb0 [ 361.444174] loop_add+0x32b/0x9c0 [ 361.447631] ? loop_lookup+0x102/0x220 [ 361.451515] ? loop_queue_rq+0x640/0x640 [ 361.455579] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 361.460769] loop_control_ioctl+0x178/0x500 [ 361.465088] ? loop_add+0x9c0/0x9c0 [ 361.468714] ? expand_files.part.8+0x9a0/0x9a0 [ 361.473296] ? kasan_check_write+0x14/0x20 [ 361.477533] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 361.482463] ? wait_for_completion+0x870/0x870 [ 361.487048] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 361.492236] ? loop_add+0x9c0/0x9c0 [ 361.495861] do_vfs_ioctl+0x1cf/0x16a0 [ 361.499757] ? ioctl_preallocate+0x2e0/0x2e0 [ 361.504167] ? fget_raw+0x20/0x20 [ 361.507620] ? __sb_end_write+0xac/0xe0 [ 361.512273] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 361.517807] ? fput+0x130/0x1a0 [ 361.521085] ? ksys_write+0x1a6/0x250 [ 361.524891] ? security_file_ioctl+0x94/0xc0 [ 361.529304] ksys_ioctl+0xa9/0xd0 [ 361.532763] __x64_sys_ioctl+0x73/0xb0 [ 361.536653] do_syscall_64+0x1b1/0x800 [ 361.540539] ? finish_task_switch+0x1ca/0x840 [ 361.545037] ? syscall_return_slowpath+0x5c0/0x5c0 [ 361.549987] ? syscall_return_slowpath+0x30f/0x5c0 [ 361.554918] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 361.560286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.565219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.570404] RIP: 0033:0x455a09 [ 361.573593] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.581302] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 2018/05/21 21:42:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x88480000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:53 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0xfffffffffffffdd2) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x1740d853, 0x4, 0x9, 0xffffffffffffffff, 0x11, 0xd60}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x2, 0x100000001, 0x10000, 0xfffffffffffffff9, 0x0, 0x20, 0x2, 0x2, 0x40, 0x2, 0xd147, 0x3, 0x3, 0xffff, 0x6, 0x200, 0x6, 0x80, 0x3f, 0x4, 0x4, 0x3ff, 0x358, 0x8, 0x80000000, 0x7, 0x3, 0x5, 0x4, 0x7, 0x2, 0x6, 0x2, 0x401, 0xfffffffffffffff8, 0x5, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0xffffffff}, 0x804, 0xffffffffffff57e5, 0x8, 0x0, 0x0, 0x5, 0x62e7}, r2, 0xc, r1, 0x2) 2018/05/21 21:42:54 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x0) [ 361.588566] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 361.595829] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 361.603094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 361.610357] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000014 2018/05/21 21:42:54 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0xfffffffffffffffe, 0x0) sync() ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:54 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:54 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xf000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:54 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100)=0x3, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040), 0x2bf) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:54 executing program 0 (fault-call:5 fault-nth:21): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:54 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x204b80, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0xc47, &(0x7f0000000100)=0x4) read(r1, &(0x7f0000000180)=""/141, 0x8d) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:54 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 2018/05/21 21:42:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000000000fffffff001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:54 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) getsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x3, 0x1d5]) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r3 = getegid() r4 = getgid() getresgid(&(0x7f0000000080)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f00000004c0)=[r3, r4, r5, r6]) r7 = semget$private(0x0, 0x2, 0x200) semctl$SEM_STAT(r7, 0x1, 0x12, &(0x7f00000005c0)=""/91) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x3, r2}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x8, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr, @in=@local}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xfd2d) accept(r1, &(0x7f0000000680)=@in={0x0, 0x0, @rand_addr}, &(0x7f0000000700)=0x80) rt_sigsuspend(&(0x7f0000000200)={0x7}, 0x8) 2018/05/21 21:42:54 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) [ 361.941976] FAULT_INJECTION: forcing a failure. [ 361.941976] name failslab, interval 1, probability 0, space 0, times 0 [ 361.953299] CPU: 0 PID: 22949 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 361.960572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.969923] Call Trace: [ 361.972523] dump_stack+0x1b9/0x294 [ 361.976171] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.981371] ? __save_stack_trace+0x7e/0xd0 [ 361.985710] should_fail.cold.4+0xa/0x1a [ 361.989784] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 361.994898] ? kasan_kmalloc+0xc4/0xe0 [ 361.998788] ? kasan_slab_alloc+0x12/0x20 [ 362.002939] ? kmem_cache_alloc+0x12e/0x760 [ 362.007267] ? mempool_alloc_slab+0x44/0x60 [ 362.011597] ? mempool_create_node+0x2cf/0x610 [ 362.016183] ? mempool_create+0x37/0x40 [ 362.020162] ? bioset_create+0x6b3/0x900 [ 362.024227] ? graph_lock+0x170/0x170 [ 362.028031] ? do_vfs_ioctl+0x1cf/0x16a0 [ 362.032096] ? ksys_ioctl+0xa9/0xd0 [ 362.035722] ? __x64_sys_ioctl+0x73/0xb0 [ 362.039788] ? do_syscall_64+0x1b1/0x800 [ 362.043856] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.049230] ? find_held_lock+0x36/0x1c0 [ 362.053298] ? __lock_is_held+0xb5/0x140 [ 362.057377] ? check_same_owner+0x320/0x320 [ 362.061707] ? rcu_note_context_switch+0x710/0x710 [ 362.066644] __should_failslab+0x124/0x180 [ 362.070889] ? mempool_free+0x370/0x370 [ 362.074869] should_failslab+0x9/0x14 [ 362.078674] kmem_cache_alloc+0x2af/0x760 [ 362.082828] ? init_wait_entry+0x1b0/0x1b0 [ 362.087076] ? mempool_alloc_slab+0x44/0x60 [ 362.091406] ? mempool_free+0x370/0x370 [ 362.095386] mempool_alloc_slab+0x44/0x60 [ 362.099544] mempool_create_node+0x2cf/0x610 [ 362.103963] ? mempool_free+0x370/0x370 [ 362.107942] ? mempool_alloc_slab+0x60/0x60 [ 362.112269] mempool_create+0x37/0x40 [ 362.116071] bioset_create+0x6b3/0x900 [ 362.119960] ? bioset_free+0x320/0x320 [ 362.123855] blk_alloc_queue_node+0x16e/0xe40 [ 362.128363] ? blk_init_allocated_queue+0x620/0x620 [ 362.133389] ? __mutex_init+0x1ef/0x280 [ 362.137374] ? __ia32_sys_membarrier+0x150/0x150 [ 362.142136] ? blk_mq_alloc_rq_map+0x142/0x220 [ 362.146724] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.152259] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 362.157014] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 362.161680] ? idr_alloc+0x145/0x1a0 [ 362.165395] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 362.170589] blk_mq_init_queue+0x4b/0xb0 [ 362.174644] loop_add+0x32b/0x9c0 [ 362.178099] ? loop_lookup+0x102/0x220 [ 362.181983] ? loop_queue_rq+0x640/0x640 [ 362.186049] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 362.191246] loop_control_ioctl+0x178/0x500 [ 362.195568] ? loop_add+0x9c0/0x9c0 [ 362.199191] ? expand_files.part.8+0x9a0/0x9a0 [ 362.203775] ? kasan_check_write+0x14/0x20 [ 362.208008] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 362.212944] ? wait_for_completion+0x870/0x870 [ 362.217536] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 362.222728] ? loop_add+0x9c0/0x9c0 [ 362.226355] do_vfs_ioctl+0x1cf/0x16a0 [ 362.230254] ? ioctl_preallocate+0x2e0/0x2e0 [ 362.234667] ? fget_raw+0x20/0x20 [ 362.238124] ? __sb_end_write+0xac/0xe0 [ 362.242107] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 362.247649] ? fput+0x130/0x1a0 [ 362.250930] ? ksys_write+0x1a6/0x250 [ 362.254738] ? security_file_ioctl+0x94/0xc0 [ 362.259148] ksys_ioctl+0xa9/0xd0 [ 362.262609] __x64_sys_ioctl+0x73/0xb0 [ 362.266497] do_syscall_64+0x1b1/0x800 [ 362.270380] ? finish_task_switch+0x1ca/0x840 [ 362.274875] ? syscall_return_slowpath+0x5c0/0x5c0 [ 362.279800] ? syscall_return_slowpath+0x30f/0x5c0 [ 362.284732] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 362.290097] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.294940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.300122] RIP: 0033:0x455a09 [ 362.303307] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.311017] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 362.318281] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 362.325544] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 362.332809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2018/05/21 21:42:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 2018/05/21 21:42:55 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x600, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000029201fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 362.340073] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000015 2018/05/21 21:42:55 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:55 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)=""/17) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:55 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x300, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:55 executing program 0 (fault-call:5 fault-nth:22): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 362.598928] FAULT_INJECTION: forcing a failure. [ 362.598928] name failslab, interval 1, probability 0, space 0, times 0 [ 362.610219] CPU: 1 PID: 22973 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 362.617493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.626840] Call Trace: [ 362.630045] dump_stack+0x1b9/0x294 [ 362.633680] ? dump_stack_print_info.cold.2+0x52/0x52 [ 362.638868] ? __percpu_counter_init+0x2aa/0x360 [ 362.643630] should_fail.cold.4+0xa/0x1a [ 362.647692] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 362.652804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.658348] ? wb_init+0x6ea/0x9e0 [ 362.661889] ? graph_lock+0x170/0x170 [ 362.665687] ? bdi_put+0x180/0x180 [ 362.669231] ? find_held_lock+0x36/0x1c0 [ 362.673294] ? __lock_is_held+0xb5/0x140 [ 362.677384] ? check_same_owner+0x320/0x320 [ 362.681721] ? rcu_note_context_switch+0x710/0x710 [ 362.686657] __should_failslab+0x124/0x180 [ 362.690898] should_failslab+0x9/0x14 [ 362.694701] kmem_cache_alloc_trace+0x2cb/0x780 [ 362.699371] ? bdi_alloc_node+0x67/0xe0 [ 362.703346] ? bdi_alloc_node+0x67/0xe0 [ 362.707325] ? rcu_read_lock_sched_held+0x108/0x120 [ 362.712346] blk_alloc_queue_stats+0x88/0x1b0 [ 362.716843] ? blk_stat_enable_accounting+0xe0/0xe0 [ 362.721869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.727409] blk_alloc_queue_node+0x1f6/0xe40 [ 362.731906] ? blk_init_allocated_queue+0x620/0x620 [ 362.736922] ? __mutex_init+0x1ef/0x280 [ 362.740897] ? __ia32_sys_membarrier+0x150/0x150 [ 362.745659] ? blk_mq_alloc_rq_map+0x142/0x220 [ 362.750246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.755787] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 362.760546] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 362.765219] ? idr_alloc+0x145/0x1a0 [ 362.768940] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 362.774134] blk_mq_init_queue+0x4b/0xb0 [ 362.778198] loop_add+0x32b/0x9c0 [ 362.781656] ? loop_lookup+0x102/0x220 [ 362.785540] ? loop_queue_rq+0x640/0x640 [ 362.789605] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 362.794794] loop_control_ioctl+0x178/0x500 [ 362.799113] ? loop_add+0x9c0/0x9c0 [ 362.802744] ? expand_files.part.8+0x9a0/0x9a0 [ 362.807330] ? kasan_check_write+0x14/0x20 [ 362.811562] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 362.816495] ? wait_for_completion+0x870/0x870 [ 362.821076] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 362.826261] ? loop_add+0x9c0/0x9c0 [ 362.829890] do_vfs_ioctl+0x1cf/0x16a0 [ 362.833782] ? ioctl_preallocate+0x2e0/0x2e0 [ 362.838189] ? fget_raw+0x20/0x20 [ 362.841643] ? __sb_end_write+0xac/0xe0 [ 362.845623] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 362.851155] ? fput+0x130/0x1a0 [ 362.854436] ? ksys_write+0x1a6/0x250 [ 362.858240] ? security_file_ioctl+0x94/0xc0 [ 362.862652] ksys_ioctl+0xa9/0xd0 [ 362.866107] __x64_sys_ioctl+0x73/0xb0 [ 362.869999] do_syscall_64+0x1b1/0x800 [ 362.873885] ? syscall_return_slowpath+0x5c0/0x5c0 [ 362.878816] ? syscall_return_slowpath+0x30f/0x5c0 [ 362.883747] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 362.889114] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.893959] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.899145] RIP: 0033:0x455a09 [ 362.902331] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.910037] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 362.917303] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 362.924576] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 362.931839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 362.939106] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000016 2018/05/21 21:42:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000009effffff01fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:56 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:56 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x4000, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000300)) getsockopt$inet6_tcp_buf(r1, 0x6, 0x16, &(0x7f00000001c0)=""/220, &(0x7f00000002c0)=0xdc) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000340)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0x2, 0x0, 0x10000, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000140)={r3, 0xff}) 2018/05/21 21:42:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 2018/05/21 21:42:56 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x1400, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000180)={r2, r3/1000+10000}, 0x10) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)=0x0) ptrace(0xffffffffffffffff, r5) 2018/05/21 21:42:56 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000180)={0xfffffffffffffffa, {{0x2, 0x4e24, @loopback=0x7f000001}}, 0x0, 0x1, [{{0x2, 0x4e21, @multicast2=0xe0000002}}]}, 0x110) 2018/05/21 21:42:56 executing program 0 (fault-call:5 fault-nth:23): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 363.451064] FAULT_INJECTION: forcing a failure. [ 363.451064] name failslab, interval 1, probability 0, space 0, times 0 [ 363.462381] CPU: 1 PID: 22988 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 363.469660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.479016] Call Trace: [ 363.481618] dump_stack+0x1b9/0x294 [ 363.485255] ? dump_stack_print_info.cold.2+0x52/0x52 [ 363.490454] should_fail.cold.4+0xa/0x1a [ 363.494512] ? __lock_is_held+0xb5/0x140 [ 363.498577] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 363.503683] ? kasan_check_read+0x11/0x20 [ 363.507830] ? do_raw_spin_unlock+0x9e/0x2e0 [ 363.512729] ? graph_lock+0x170/0x170 [ 363.516529] ? __lock_is_held+0xb5/0x140 [ 363.520587] ? ioread8_rep+0xc8/0x120 [ 363.524392] ? find_held_lock+0x36/0x1c0 [ 363.528458] ? __lock_is_held+0xb5/0x140 [ 363.532534] ? check_same_owner+0x320/0x320 [ 363.536858] ? rcu_note_context_switch+0x710/0x710 [ 363.541789] __should_failslab+0x124/0x180 [ 363.546024] should_failslab+0x9/0x14 [ 363.549829] kmem_cache_alloc_node_trace+0x26f/0x770 [ 363.554937] ? bioset_free+0x320/0x320 [ 363.558826] bdi_alloc_node+0x67/0xe0 [ 363.562627] blk_alloc_queue_node+0x1c1/0xe40 [ 363.567126] ? blk_init_allocated_queue+0x620/0x620 [ 363.572142] ? __mutex_init+0x1ef/0x280 [ 363.576122] ? __ia32_sys_membarrier+0x150/0x150 [ 363.580916] ? blk_mq_alloc_rq_map+0x142/0x220 [ 363.585505] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.591044] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 363.595800] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 363.600470] ? idr_alloc+0x145/0x1a0 [ 363.604187] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 363.609382] blk_mq_init_queue+0x4b/0xb0 [ 363.613449] loop_add+0x32b/0x9c0 [ 363.616904] ? loop_lookup+0x102/0x220 [ 363.620790] ? loop_queue_rq+0x640/0x640 [ 363.624855] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 363.630042] loop_control_ioctl+0x178/0x500 [ 363.634365] ? loop_add+0x9c0/0x9c0 [ 363.637990] ? expand_files.part.8+0x9a0/0x9a0 [ 363.642571] ? kasan_check_write+0x14/0x20 [ 363.646804] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 363.651734] ? wait_for_completion+0x870/0x870 [ 363.656317] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 363.661502] ? loop_add+0x9c0/0x9c0 [ 363.665130] do_vfs_ioctl+0x1cf/0x16a0 [ 363.669023] ? ioctl_preallocate+0x2e0/0x2e0 [ 363.673430] ? fget_raw+0x20/0x20 [ 363.676883] ? __sb_end_write+0xac/0xe0 [ 363.680863] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 363.686398] ? fput+0x130/0x1a0 [ 363.689678] ? ksys_write+0x1a6/0x250 [ 363.693485] ? security_file_ioctl+0x94/0xc0 [ 363.697897] ksys_ioctl+0xa9/0xd0 [ 363.701351] __x64_sys_ioctl+0x73/0xb0 [ 363.705244] do_syscall_64+0x1b1/0x800 [ 363.709127] ? finish_task_switch+0x1ca/0x840 [ 363.713623] ? syscall_return_slowpath+0x5c0/0x5c0 [ 363.718552] ? syscall_return_slowpath+0x30f/0x5c0 [ 363.723486] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 363.728855] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.733702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.738885] RIP: 0033:0x455a09 [ 363.742066] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/05/21 21:42:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x40030000000000}, 0x0) [ 363.749772] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 363.757035] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 363.764300] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 363.771563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 363.778828] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000017 2018/05/21 21:42:56 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000000)={0x10001, 0x100000001, 0x8, 0x95, 0x12, 0x2}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:56 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x8100000000000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000009202000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:56 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) bind$netrom(r1, &(0x7f0000000040)=@ax25={0x3, {"fd5f6d7b70b816"}, 0x5}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) r2 = syz_open_dev$urandom(&(0x7f0000000180)='/dev/urandom\x00', 0x0, 0xa0000) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) fremovexattr(r0, &(0x7f0000000100)=@known='system.posix_acl_access\x00') 2018/05/21 21:42:56 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x7, 0xcc0}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x9) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:56 executing program 0 (fault-call:5 fault-nth:24): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x900000000000000}, 0x0) [ 363.957234] FAULT_INJECTION: forcing a failure. [ 363.957234] name failslab, interval 1, probability 0, space 0, times 0 [ 363.968546] CPU: 1 PID: 23024 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 363.975822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.985178] Call Trace: [ 363.987783] dump_stack+0x1b9/0x294 [ 363.991419] ? dump_stack_print_info.cold.2+0x52/0x52 [ 363.996625] should_fail.cold.4+0xa/0x1a [ 364.000696] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 364.005807] ? trace_hardirqs_on+0xd/0x10 [ 364.009961] ? graph_lock+0x170/0x170 [ 364.013772] ? graph_lock+0x170/0x170 [ 364.017580] ? find_held_lock+0x36/0x1c0 [ 364.021656] ? __lock_is_held+0xb5/0x140 [ 364.025731] ? ZSTD_compressBlock_lazy_extDict+0x3630/0x39e0 [ 364.031551] ? check_same_owner+0x320/0x320 [ 364.035882] ? rcu_note_context_switch+0x710/0x710 [ 364.040822] __should_failslab+0x124/0x180 [ 364.045065] should_failslab+0x9/0x14 [ 364.048863] kmem_cache_alloc_trace+0x2cb/0x780 [ 364.053531] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 364.058634] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 364.063656] wb_congested_get_create+0x1ca/0x450 [ 364.068416] ? wb_wakeup_delayed+0xf0/0xf0 [ 364.072650] ? __lockdep_init_map+0x105/0x590 [ 364.077145] wb_init+0x62e/0x9e0 [ 364.080513] ? bdi_put+0x180/0x180 [ 364.084055] ? mark_held_locks+0xc9/0x160 [ 364.088207] ? __x64_sys_ioctl+0x73/0xb0 [ 364.092267] ? __raw_spin_lock_init+0x1c/0x100 [ 364.096852] ? mark_held_locks+0xc9/0x160 [ 364.101004] ? __raw_spin_lock_init+0x1c/0x100 [ 364.105591] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 364.110614] ? lockdep_init_map+0x9/0x10 [ 364.114675] bdi_init+0x353/0x510 [ 364.118125] ? wb_init+0x9e0/0x9e0 [ 364.121666] ? bdi_alloc_node+0x67/0xe0 [ 364.125640] ? bdi_alloc_node+0x67/0xe0 [ 364.129638] ? rcu_read_lock_sched_held+0x108/0x120 [ 364.134655] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 364.139934] ? bioset_free+0x320/0x320 [ 364.143825] bdi_alloc_node+0x81/0xe0 [ 364.147629] blk_alloc_queue_node+0x1c1/0xe40 [ 364.152125] ? blk_init_allocated_queue+0x620/0x620 [ 364.157143] ? __mutex_init+0x1ef/0x280 [ 364.161118] ? __ia32_sys_membarrier+0x150/0x150 [ 364.165883] ? blk_mq_alloc_rq_map+0x142/0x220 [ 364.170469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.176002] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 364.180758] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 364.185432] ? idr_alloc+0x145/0x1a0 [ 364.189149] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 364.194353] blk_mq_init_queue+0x4b/0xb0 [ 364.198428] loop_add+0x32b/0x9c0 [ 364.201891] ? loop_lookup+0x102/0x220 [ 364.205778] ? loop_queue_rq+0x640/0x640 [ 364.209844] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 364.215034] loop_control_ioctl+0x178/0x500 [ 364.219355] ? loop_add+0x9c0/0x9c0 [ 364.222995] ? expand_files.part.8+0x9a0/0x9a0 [ 364.227579] ? kasan_check_write+0x14/0x20 [ 364.231816] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 364.236749] ? wait_for_completion+0x870/0x870 [ 364.241335] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 364.246525] ? loop_add+0x9c0/0x9c0 [ 364.250153] do_vfs_ioctl+0x1cf/0x16a0 [ 364.254052] ? ioctl_preallocate+0x2e0/0x2e0 [ 364.258463] ? fget_raw+0x20/0x20 [ 364.261916] ? __sb_end_write+0xac/0xe0 [ 364.265892] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 364.271424] ? fput+0x130/0x1a0 [ 364.274701] ? ksys_write+0x1a6/0x250 [ 364.278507] ? security_file_ioctl+0x94/0xc0 [ 364.282919] ksys_ioctl+0xa9/0xd0 [ 364.286373] __x64_sys_ioctl+0x73/0xb0 [ 364.290264] do_syscall_64+0x1b1/0x800 [ 364.294148] ? finish_task_switch+0x1ca/0x840 [ 364.298649] ? syscall_return_slowpath+0x5c0/0x5c0 [ 364.303581] ? syscall_return_slowpath+0x30f/0x5c0 [ 364.308513] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 364.313876] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.318721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.323901] RIP: 0033:0x455a09 [ 364.327087] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.334792] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 364.342059] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 364.349323] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/21 21:42:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@loopback, @in=@local}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000400)=0xe8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x1, 0x7, 0x6, 0x9, 0x7, 0x4, 0x9, 0xd1, 0xffffffffffffffe1, 0x1, 0x2, 0x1f}) listen$netrom(r2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000004c0)) open_by_handle_at(r2, &(0x7f0000000440)={0x65, 0x4, "06328e27e47202164630156933de475cc8ce34e38ff5a48e5243c6a550a15f3ec6ffdea0194882bcf858ebf353fd25b14ab777ba9a41323c0dc5d437482051c98268126d3cba285e68c9fe2026bdb6b6b26c49416eb3daf3d61f02fd23"}, 0x4000) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="43b6e43e7cb183e08e1f6c000000d5355b2459474883f1ecc998ea26de87dccfb6016c2faa12921a341fd754527cc6b481e8e7ed0b882963a07b16a1956ecf8fa241a778123ed511abc8855670cb5512d4ad3d96293ab8fd99f217438027bf4e2e83e35ea024ac39cd9ee3f1b47de18aa7b981c329c6aef2e678bd2378"], &(0x7f0000000180)=0x12) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e24, 0x5022, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x7}}, 0x1000, 0x7}, &(0x7f0000000280)=0x90) 2018/05/21 21:42:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x900}, 0x0) 2018/05/21 21:42:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000101fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:57 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:57 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) accept$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x800, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:57 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x69ab, 0xe0d, 0x8000, 0x8, 0xfff, 0xfffffffffffffffb, 0x10000, 0x6, 0xfffffffffffffffc, 0x4, 0x100000000}, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000040)) 2018/05/21 21:42:57 executing program 0 (fault-call:5 fault-nth:25): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 364.356585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 364.363848] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000018 2018/05/21 21:42:57 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x400000000000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 364.480265] FAULT_INJECTION: forcing a failure. [ 364.480265] name failslab, interval 1, probability 0, space 0, times 0 [ 364.491578] CPU: 1 PID: 23041 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 364.498854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.508212] Call Trace: [ 364.510807] dump_stack+0x1b9/0x294 [ 364.514441] ? dump_stack_print_info.cold.2+0x52/0x52 [ 364.519642] should_fail.cold.4+0xa/0x1a [ 364.523709] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 364.528818] ? print_usage_bug+0xc0/0xc0 [ 364.532882] ? graph_lock+0x170/0x170 [ 364.536683] ? debug_object_free+0x5f0/0x5f0 [ 364.541096] ? find_held_lock+0x36/0x1c0 [ 364.545170] ? __lock_is_held+0xb5/0x140 [ 364.549245] ? check_same_owner+0x320/0x320 [ 364.553573] ? rcu_note_context_switch+0x710/0x710 [ 364.558507] __should_failslab+0x124/0x180 [ 364.562746] should_failslab+0x9/0x14 [ 364.566547] kmem_cache_alloc_node_trace+0x26f/0x770 [ 364.571649] ? lock_downgrade+0x8e0/0x8e0 [ 364.575808] throtl_pd_alloc+0xd7/0x970 [ 364.579789] ? blk_throtl_dispatch_work_fn+0x480/0x480 [ 364.585065] ? _raw_spin_unlock_irq+0x27/0x70 [ 364.589571] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 364.594584] ? trace_hardirqs_on+0xd/0x10 [ 364.598737] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.604276] ? blk_throtl_dispatch_work_fn+0x480/0x480 [ 364.609552] blkcg_activate_policy+0xf4/0x580 [ 364.614054] blk_throtl_init+0x3d0/0x630 [ 364.618114] ? blk_throtl_drain+0x7e0/0x7e0 [ 364.622442] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 364.627460] blkcg_init_queue+0x1ef/0x480 [ 364.631606] blk_alloc_queue_node+0x8bd/0xe40 [ 364.636105] ? blk_init_allocated_queue+0x620/0x620 [ 364.641127] ? __mutex_init+0x1ef/0x280 [ 364.645123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.650663] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 364.655516] ? idr_alloc+0x145/0x1a0 [ 364.659237] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 364.664432] blk_mq_init_queue+0x4b/0xb0 [ 364.668492] loop_add+0x32b/0x9c0 [ 364.671947] ? loop_lookup+0x102/0x220 [ 364.675831] ? loop_queue_rq+0x640/0x640 [ 364.679911] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 364.685104] loop_control_ioctl+0x178/0x500 [ 364.689427] ? loop_add+0x9c0/0x9c0 [ 364.693057] ? expand_files.part.8+0x9a0/0x9a0 [ 364.697639] ? kasan_check_write+0x14/0x20 [ 364.701876] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 364.706806] ? wait_for_completion+0x870/0x870 [ 364.711387] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 364.716574] ? loop_add+0x9c0/0x9c0 [ 364.720202] do_vfs_ioctl+0x1cf/0x16a0 [ 364.724093] ? ioctl_preallocate+0x2e0/0x2e0 [ 364.728499] ? fget_raw+0x20/0x20 [ 364.731955] ? __sb_end_write+0xac/0xe0 [ 364.735930] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 364.741481] ? fput+0x130/0x1a0 [ 364.744760] ? ksys_write+0x1a6/0x250 [ 364.748573] ? security_file_ioctl+0x94/0xc0 [ 364.752981] ksys_ioctl+0xa9/0xd0 [ 364.756436] __x64_sys_ioctl+0x73/0xb0 [ 364.760325] do_syscall_64+0x1b1/0x800 [ 364.764211] ? finish_task_switch+0x1ca/0x840 [ 364.768705] ? syscall_return_slowpath+0x5c0/0x5c0 [ 364.773633] ? syscall_return_slowpath+0x30f/0x5c0 [ 364.778569] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 364.783938] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.788783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.793964] RIP: 0033:0x455a09 [ 364.797148] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.804859] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 364.812127] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 364.819389] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/21 21:42:57 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x17e, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) close(r1) socket$inet(0x2, 0x0, 0x5a4) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x2) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:42:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x9}, 0x0) 2018/05/21 21:42:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000292000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:57 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x4000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 364.826652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 364.833918] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000019 2018/05/21 21:42:57 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x800000000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f0f000000000042ed662912c5a9618a90046f3e000280"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x20d, &(0x7f0000000300)=""/187}, 0x48) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000180)={{0x3, 0x1, 0xf8, 0x3, 0x80000001}, 0xa5, 0xf5, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x858c, 0x8, 0x1}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0xc00000000, 0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:57 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:57 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) socketpair$inet6(0xa, 0x7, 0x3, &(0x7f0000000040)) 2018/05/21 21:42:57 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xe80, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:57 executing program 0 (fault-call:5 fault-nth:26): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:57 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00', 0x200}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000000000f0ffff01fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 365.097095] FAULT_INJECTION: forcing a failure. [ 365.097095] name failslab, interval 1, probability 0, space 0, times 0 [ 365.108453] CPU: 0 PID: 23075 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 365.115728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.125078] Call Trace: [ 365.127679] dump_stack+0x1b9/0x294 [ 365.131315] ? dump_stack_print_info.cold.2+0x52/0x52 [ 365.136520] should_fail.cold.4+0xa/0x1a [ 365.140590] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.145713] ? lock_downgrade+0x8e0/0x8e0 [ 365.149877] ? graph_lock+0x170/0x170 [ 365.153686] ? kasan_check_read+0x11/0x20 [ 365.157838] ? do_raw_spin_unlock+0x9e/0x2e0 [ 365.162252] ? find_held_lock+0x36/0x1c0 [ 365.166328] ? __lock_is_held+0xb5/0x140 [ 365.170412] ? check_same_owner+0x320/0x320 [ 365.174738] ? mark_held_locks+0xc9/0x160 [ 365.178898] ? rcu_note_context_switch+0x710/0x710 [ 365.183831] __should_failslab+0x124/0x180 [ 365.188071] should_failslab+0x9/0x14 [ 365.191875] kmem_cache_alloc_node_trace+0x26f/0x770 [ 365.196980] ? lock_downgrade+0x8e0/0x8e0 [ 365.201129] blk_throtl_init+0xc5/0x630 [ 365.205101] ? rcu_is_watching+0x85/0x140 [ 365.209252] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 365.213835] ? blk_throtl_drain+0x7e0/0x7e0 [ 365.218160] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 365.223183] blkcg_init_queue+0x1ef/0x480 [ 365.227340] blk_alloc_queue_node+0x8bd/0xe40 [ 365.231844] ? blk_init_allocated_queue+0x620/0x620 [ 365.236869] ? __mutex_init+0x1ef/0x280 [ 365.240863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.246401] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 365.251167] ? idr_alloc+0x145/0x1a0 [ 365.254885] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 365.260081] blk_mq_init_queue+0x4b/0xb0 [ 365.264144] loop_add+0x32b/0x9c0 [ 365.267604] ? loop_lookup+0x102/0x220 [ 365.271493] ? loop_queue_rq+0x640/0x640 [ 365.275565] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 365.280761] loop_control_ioctl+0x178/0x500 [ 365.285081] ? loop_add+0x9c0/0x9c0 [ 365.288708] ? expand_files.part.8+0x9a0/0x9a0 [ 365.293293] ? kasan_check_write+0x14/0x20 [ 365.297528] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 365.302463] ? wait_for_completion+0x870/0x870 [ 365.307066] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 365.312255] ? loop_add+0x9c0/0x9c0 [ 365.315885] do_vfs_ioctl+0x1cf/0x16a0 [ 365.319779] ? ioctl_preallocate+0x2e0/0x2e0 [ 365.324187] ? fget_raw+0x20/0x20 [ 365.327641] ? __sb_end_write+0xac/0xe0 [ 365.331620] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 365.337155] ? fput+0x130/0x1a0 [ 365.340436] ? ksys_write+0x1a6/0x250 [ 365.344241] ? security_file_ioctl+0x94/0xc0 [ 365.348656] ksys_ioctl+0xa9/0xd0 [ 365.352113] __x64_sys_ioctl+0x73/0xb0 [ 365.356001] do_syscall_64+0x1b1/0x800 [ 365.359886] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 365.364732] ? syscall_return_slowpath+0x5c0/0x5c0 [ 365.369662] ? syscall_return_slowpath+0x30f/0x5c0 [ 365.374598] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 365.379965] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.384813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.389996] RIP: 0033:0x455a09 [ 365.393178] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.400887] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 365.408152] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 365.415419] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 365.422703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 365.429984] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001a 2018/05/21 21:42:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x0) 2018/05/21 21:42:58 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x2000000000081, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200000000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:58 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=r2) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r3}) 2018/05/21 21:42:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000007fffffff01fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:58 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x543, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:58 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:58 executing program 0 (fault-call:5 fault-nth:27): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:58 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000280)={{0x728b706c, 0x0, 0x2, 0x7, "e207f898f8146b8c59b5b5327d0a370d8d59d5f63f725ea77d3bfec4e39b6752ec20138f937ad1645e2ecacc", 0x2}, 0x0, 0x0, 0x879, r1, 0xffff, 0x8, "839924a0ca0d537bcf409a3dd5b4374dbaf481c2ae20517409af2d073b7b4a16b2e7e19ad7050d520b59d3bde0647ff0d84060b230f3b21498823cb6814eed4d", &(0x7f0000000240)='/@:]-+system\x00', 0xd, [], [0x5, 0x9, 0x5, 0x7f]}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000400)=0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback=0x7f000001}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r4}, &(0x7f00000001c0)=0x8) 2018/05/21 21:42:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000000000fffff00001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 2018/05/21 21:42:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8080, 0x148) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) [ 365.633424] FAULT_INJECTION: forcing a failure. [ 365.633424] name failslab, interval 1, probability 0, space 0, times 0 [ 365.644723] CPU: 1 PID: 23100 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 365.652008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.661370] Call Trace: [ 365.663968] dump_stack+0x1b9/0x294 [ 365.667606] ? dump_stack_print_info.cold.2+0x52/0x52 [ 365.672814] ? save_stack+0x43/0xd0 [ 365.676633] ? __kasan_slab_free+0x11a/0x170 [ 365.681044] ? kasan_slab_free+0xe/0x10 [ 365.685021] ? kfree+0xd9/0x260 [ 365.688302] ? throtl_pd_free+0x21/0x30 [ 365.692282] should_fail.cold.4+0xa/0x1a [ 365.696344] ? __x64_sys_ioctl+0x73/0xb0 [ 365.700408] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.705511] ? print_usage_bug+0xc0/0xc0 [ 365.709574] ? do_raw_spin_lock+0xc1/0x200 [ 365.713808] ? graph_lock+0x170/0x170 [ 365.717607] ? trace_hardirqs_off+0xd/0x10 [ 365.721838] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 365.726940] ? find_held_lock+0x36/0x1c0 [ 365.731005] ? __lock_is_held+0xb5/0x140 [ 365.735077] ? check_same_owner+0x320/0x320 [ 365.739399] ? rcu_note_context_switch+0x710/0x710 [ 365.744330] ? blkcg_activate_policy+0x3db/0x580 [ 365.749084] __should_failslab+0x124/0x180 [ 365.753320] should_failslab+0x9/0x14 [ 365.757117] kmem_cache_alloc_trace+0x2cb/0x780 [ 365.761786] ? blk_throtl_init+0x3e6/0x630 [ 365.766018] ? blk_throtl_drain+0x7e0/0x7e0 [ 365.770347] ? blk_mq_can_queue+0x50/0x50 [ 365.774493] ? plug_ctx_cmp+0x110/0x110 [ 365.778466] blk_stat_alloc_callback+0x5b/0x280 [ 365.783138] blk_mq_init_allocated_queue+0x125/0x1580 [ 365.788331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.793865] ? blk_alloc_queue_node+0x8d3/0xe40 [ 365.798540] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 365.803039] ? __mutex_init+0x1ef/0x280 [ 365.807031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.812576] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 365.817339] ? idr_alloc+0x145/0x1a0 [ 365.821057] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 365.826250] blk_mq_init_queue+0x63/0xb0 [ 365.830313] loop_add+0x32b/0x9c0 [ 365.833764] ? loop_lookup+0x102/0x220 [ 365.837647] ? loop_queue_rq+0x640/0x640 [ 365.841712] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 365.846900] loop_control_ioctl+0x178/0x500 [ 365.851218] ? loop_add+0x9c0/0x9c0 [ 365.854843] ? expand_files.part.8+0x9a0/0x9a0 [ 365.859423] ? kasan_check_write+0x14/0x20 [ 365.863656] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 365.868588] ? wait_for_completion+0x870/0x870 [ 365.873169] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 365.878359] ? loop_add+0x9c0/0x9c0 [ 365.881990] do_vfs_ioctl+0x1cf/0x16a0 [ 365.885971] ? ioctl_preallocate+0x2e0/0x2e0 [ 365.890384] ? fget_raw+0x20/0x20 [ 365.893843] ? __sb_end_write+0xac/0xe0 [ 365.897824] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 365.903362] ? fput+0x130/0x1a0 [ 365.906639] ? ksys_write+0x1a6/0x250 [ 365.910444] ? security_file_ioctl+0x94/0xc0 [ 365.914859] ksys_ioctl+0xa9/0xd0 [ 365.918316] __x64_sys_ioctl+0x73/0xb0 [ 365.922208] do_syscall_64+0x1b1/0x800 [ 365.926099] ? finish_task_switch+0x1ca/0x840 [ 365.930598] ? syscall_return_slowpath+0x5c0/0x5c0 [ 365.935530] ? syscall_return_slowpath+0x30f/0x5c0 [ 365.940467] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 365.945834] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.950681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.955863] RIP: 0033:0x455a09 [ 365.959047] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.966764] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 365.974032] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/21 21:42:58 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xb00000000000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:58 executing program 6: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0), 0x230) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x4e4c, 0x6, 0x439f}, 0xc) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x4, 0x1, 0x10000, 0x4, 0x1}, 0xc) modify_ldt$read_default(0x2, &(0x7f0000000040), 0x0) [ 365.981298] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 365.988566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 365.995831] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001b 2018/05/21 21:42:58 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:58 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0xcf) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, 0x0}) r3 = getpgid(r2) ptrace$setregset(0x4205, r3, 0x200, &(0x7f0000000240)={&(0x7f0000000180)="7433443258cc2b84649a2a78050667ddadddf374bcbf77886a29a0842208e7bf0860c7680f29c8225bedc973c581c6f75909a640b5773f749a96bdf3366156802dc12752399398e96909407c2379c66dcba9c2c454efc652eece64fe66aa02d33c31474255d610378c3d314a6040125fead9d763e11e09dbf4aadc6e81c25f127e12eaefef964ecb7c067a96a165dca89bab97d3", 0x94}) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x9) ioctl$sock_bt_hci(r1, 0xc00448f7, &(0x7f0000000100)="73436b63881b01804688f26034ccc8a937a1008bbd89fbd0f24089e590e5a1cc14082ea337fbff2ab634a2531831870bfac83eb08aa29c6647e1367f12f28fc768042de55399e0cc52356dbbd1d1f32c2390ec0386ef") setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280)={0x80000000}, 0x4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:58 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xc0ffffff00000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000002000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:58 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x110) 2018/05/21 21:42:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) clock_nanosleep(0x7, 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) r2 = accept$netrom(r1, &(0x7f0000000000)=@full, &(0x7f0000000100)=0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:58 executing program 0 (fault-call:5 fault-nth:28): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff0200000000000000000000f0000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:58 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x4305000000000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 366.170660] FAULT_INJECTION: forcing a failure. [ 366.170660] name failslab, interval 1, probability 0, space 0, times 0 [ 366.181954] CPU: 1 PID: 23129 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 366.189234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.198591] Call Trace: [ 366.201193] dump_stack+0x1b9/0x294 [ 366.204841] ? dump_stack_print_info.cold.2+0x52/0x52 [ 366.210051] ? __save_stack_trace+0x7e/0xd0 [ 366.214397] should_fail.cold.4+0xa/0x1a [ 366.218488] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 366.223609] ? save_stack+0x43/0xd0 [ 366.227256] ? kasan_kmalloc+0xc4/0xe0 [ 366.231153] ? kmem_cache_alloc_trace+0x152/0x780 [ 366.235991] ? blk_stat_alloc_callback+0x5b/0x280 [ 366.240821] ? blk_mq_init_allocated_queue+0x125/0x1580 [ 366.246173] ? graph_lock+0x170/0x170 [ 366.249972] ? ksys_ioctl+0xa9/0xd0 [ 366.253601] ? __x64_sys_ioctl+0x73/0xb0 [ 366.257661] ? do_syscall_64+0x1b1/0x800 [ 366.261728] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.267088] ? find_held_lock+0x36/0x1c0 [ 366.271150] ? __lock_is_held+0xb5/0x140 [ 366.275213] ? check_same_owner+0x320/0x320 [ 366.279538] ? rcu_note_context_switch+0x710/0x710 [ 366.284468] __should_failslab+0x124/0x180 [ 366.288709] should_failslab+0x9/0x14 [ 366.292503] __kmalloc+0x2c8/0x760 [ 366.296032] ? kmem_cache_alloc_trace+0x616/0x780 [ 366.300871] ? blk_throtl_init+0x3e6/0x630 [ 366.305103] ? blk_stat_alloc_callback+0x84/0x280 [ 366.309931] ? blk_mq_can_queue+0x50/0x50 [ 366.314074] ? plug_ctx_cmp+0x110/0x110 [ 366.318036] blk_stat_alloc_callback+0x84/0x280 [ 366.322697] blk_mq_init_allocated_queue+0x125/0x1580 [ 366.327897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.333419] ? blk_alloc_queue_node+0x8d3/0xe40 [ 366.338086] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 366.342569] ? __mutex_init+0x1ef/0x280 [ 366.346538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.352058] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 366.356802] ? idr_alloc+0x145/0x1a0 [ 366.360511] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 366.365687] blk_mq_init_queue+0x63/0xb0 [ 366.369742] loop_add+0x32b/0x9c0 [ 366.373187] ? loop_lookup+0x102/0x220 [ 366.377054] ? loop_queue_rq+0x640/0x640 [ 366.381103] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 366.386297] loop_control_ioctl+0x178/0x500 [ 366.390608] ? loop_add+0x9c0/0x9c0 [ 366.394231] ? expand_files.part.8+0x9a0/0x9a0 [ 366.398811] ? kasan_check_write+0x14/0x20 [ 366.403039] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 366.407975] ? wait_for_completion+0x870/0x870 [ 366.412551] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 366.417732] ? loop_add+0x9c0/0x9c0 [ 366.421362] do_vfs_ioctl+0x1cf/0x16a0 [ 366.425244] ? ioctl_preallocate+0x2e0/0x2e0 [ 366.429653] ? fget_raw+0x20/0x20 [ 366.433097] ? __sb_end_write+0xac/0xe0 [ 366.437069] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 366.442608] ? fput+0x130/0x1a0 [ 366.445891] ? ksys_write+0x1a6/0x250 [ 366.449684] ? security_file_ioctl+0x94/0xc0 [ 366.454078] ksys_ioctl+0xa9/0xd0 [ 366.457518] __x64_sys_ioctl+0x73/0xb0 [ 366.461401] do_syscall_64+0x1b1/0x800 [ 366.465286] ? finish_task_switch+0x1ca/0x840 [ 366.469768] ? syscall_return_slowpath+0x5c0/0x5c0 [ 366.474710] ? syscall_return_slowpath+0x30f/0x5c0 [ 366.479635] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 366.484987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.489816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.495013] RIP: 0033:0x455a09 [ 366.498200] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.505891] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 366.513150] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/21 21:42:59 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 366.520406] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 366.527666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 366.534923] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001c 2018/05/21 21:42:59 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x8000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000002920001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:59 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7d7, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x400000000010000}) 2018/05/21 21:42:59 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:59 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:42:59 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:59 executing program 6: socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000180)=0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:59 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xb000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000008fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:59 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) getgroups(0x7, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0]) fchown(r1, r2, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) write$eventfd(r1, &(0x7f0000000040)=0x1, 0x8) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r4}) 2018/05/21 21:42:59 executing program 0 (fault-call:5 fault-nth:29): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:42:59 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:42:59 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:42:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000400fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:42:59 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x3000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:42:59 executing program 7: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) fallocate(r0, 0x1, 0x7fff, 0x5) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x10000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x1, r1}) 2018/05/21 21:42:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x218f) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:42:59 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000100), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000080)={0x1}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:42:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000002fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 367.272344] FAULT_INJECTION: forcing a failure. [ 367.272344] name failslab, interval 1, probability 0, space 0, times 0 [ 367.283684] CPU: 0 PID: 23193 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 367.290952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.300296] Call Trace: [ 367.302887] dump_stack+0x1b9/0x294 [ 367.306517] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.311711] ? __save_stack_trace+0x7e/0xd0 [ 367.316039] should_fail.cold.4+0xa/0x1a [ 367.320104] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 367.325211] ? save_stack+0x43/0xd0 [ 367.328837] ? kasan_kmalloc+0xc4/0xe0 [ 367.332726] ? kmem_cache_alloc_trace+0x152/0x780 [ 367.337568] ? blk_stat_alloc_callback+0x5b/0x280 [ 367.342416] ? blk_mq_init_allocated_queue+0x125/0x1580 [ 367.347779] ? graph_lock+0x170/0x170 [ 367.351583] ? ksys_ioctl+0xa9/0xd0 [ 367.355207] ? __x64_sys_ioctl+0x73/0xb0 [ 367.359267] ? do_syscall_64+0x1b1/0x800 [ 367.363330] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.368696] ? find_held_lock+0x36/0x1c0 [ 367.372760] ? __lock_is_held+0xb5/0x140 [ 367.376832] ? check_same_owner+0x320/0x320 [ 367.381160] ? rcu_note_context_switch+0x710/0x710 [ 367.386093] __should_failslab+0x124/0x180 [ 367.390331] should_failslab+0x9/0x14 [ 367.394135] __kmalloc+0x2c8/0x760 [ 367.397674] ? kmem_cache_alloc_trace+0x616/0x780 [ 367.402513] ? blk_throtl_init+0x3e6/0x630 [ 367.406750] ? blk_stat_alloc_callback+0x84/0x280 [ 367.411595] ? blk_mq_can_queue+0x50/0x50 [ 367.415740] ? plug_ctx_cmp+0x110/0x110 [ 367.419718] blk_stat_alloc_callback+0x84/0x280 [ 367.424402] blk_mq_init_allocated_queue+0x125/0x1580 [ 367.429597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.435137] ? blk_alloc_queue_node+0x8d3/0xe40 [ 367.439811] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 367.444310] ? __mutex_init+0x1ef/0x280 [ 367.448304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.453841] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 367.458697] ? idr_alloc+0x145/0x1a0 [ 367.462419] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 367.467706] blk_mq_init_queue+0x63/0xb0 [ 367.471778] loop_add+0x32b/0x9c0 [ 367.475250] ? loop_lookup+0x102/0x220 [ 367.479138] ? loop_queue_rq+0x640/0x640 [ 367.483203] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 367.488421] loop_control_ioctl+0x178/0x500 [ 367.492741] ? loop_add+0x9c0/0x9c0 [ 367.496368] ? expand_files.part.8+0x9a0/0x9a0 [ 367.500953] ? kasan_check_write+0x14/0x20 [ 367.505191] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 367.510131] ? wait_for_completion+0x870/0x870 [ 367.514715] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 367.519904] ? loop_add+0x9c0/0x9c0 [ 367.523535] do_vfs_ioctl+0x1cf/0x16a0 [ 367.527425] ? ioctl_preallocate+0x2e0/0x2e0 [ 367.531836] ? fget_raw+0x20/0x20 [ 367.535290] ? __sb_end_write+0xac/0xe0 [ 367.539270] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 367.544803] ? fput+0x130/0x1a0 [ 367.548082] ? ksys_write+0x1a6/0x250 [ 367.551885] ? security_file_ioctl+0x94/0xc0 [ 367.556299] ksys_ioctl+0xa9/0xd0 [ 367.559755] __x64_sys_ioctl+0x73/0xb0 [ 367.563644] do_syscall_64+0x1b1/0x800 [ 367.567533] ? finish_task_switch+0x1ca/0x840 [ 367.572033] ? syscall_return_slowpath+0x5c0/0x5c0 [ 367.576965] ? syscall_return_slowpath+0x30f/0x5c0 [ 367.581896] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 367.587260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.592107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.597292] RIP: 0033:0x455a09 [ 367.600480] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.608216] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 367.615485] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/21 21:43:00 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:00 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xf0ffff, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:00 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:00 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:43:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000f00001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:00 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:00 executing program 0 (fault-call:5 fault-nth:30): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x8001, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000180)={{0x1, 0x3, 0x3f, 0x660, "a5a18e631bb8ab5d1882ebe87649d349dfbb4642e8d9b9f0224f9348e92f4299293f898299023d674384e66a", 0x4}, 0x0, 0x0, 0xd0, r2, 0x3f, 0x400, "5c2918a922840cb65f143702f0ad9c1ea67ef1443559743a7ea65743dacd1787d5bd75cc17a76604cf434816dc5d057832f4cf9220c86663c2d525f9c2fc1417", &(0x7f0000000100)='\x00', 0x1, [], [0x9, 0x0, 0x5, 0x1]}) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000000)={0x0, 0x0, 0x80000000, 0x2}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x400000000000000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) [ 367.622749] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 367.630014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 367.637281] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001d 2018/05/21 21:43:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000092020001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:00 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:00 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000180)={0x100, {{0xa, 0x4e20, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x8}}, {{0xa, 0x4e20, 0x4, @loopback={0x0, 0x1}, 0x9}}}, 0x108) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000040)={0x1, 0x6, 0x2, 0x2, 0x2}) 2018/05/21 21:43:00 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x86ddffff, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:00 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1000, 0x200) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000180)=""/148) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:00 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 367.809812] FAULT_INJECTION: forcing a failure. [ 367.809812] name failslab, interval 1, probability 0, space 0, times 0 [ 367.821093] CPU: 0 PID: 23213 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 367.828363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.837704] Call Trace: [ 367.840283] dump_stack+0x1b9/0x294 [ 367.843907] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.849091] ? save_stack+0x43/0xd0 [ 367.852709] ? __kasan_slab_free+0x11a/0x170 [ 367.857107] ? kasan_slab_free+0xe/0x10 [ 367.861068] ? kfree+0xd9/0x260 [ 367.864337] ? throtl_pd_free+0x21/0x30 [ 367.868313] should_fail.cold.4+0xa/0x1a [ 367.872369] ? __x64_sys_ioctl+0x73/0xb0 [ 367.876428] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 367.881526] ? print_usage_bug+0xc0/0xc0 [ 367.885592] ? do_raw_spin_lock+0xc1/0x200 [ 367.889841] ? graph_lock+0x170/0x170 [ 367.893635] ? trace_hardirqs_off+0xd/0x10 [ 367.897867] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 367.902968] ? find_held_lock+0x36/0x1c0 [ 367.907025] ? __lock_is_held+0xb5/0x140 [ 367.911080] ? check_same_owner+0x320/0x320 [ 367.915393] ? rcu_note_context_switch+0x710/0x710 [ 367.920317] ? blkcg_activate_policy+0x3db/0x580 [ 367.925111] __should_failslab+0x124/0x180 [ 367.929361] should_failslab+0x9/0x14 [ 367.933165] kmem_cache_alloc_trace+0x2cb/0x780 [ 367.937853] ? blk_throtl_init+0x3e6/0x630 [ 367.942097] ? blk_throtl_drain+0x7e0/0x7e0 [ 367.946433] ? blk_mq_can_queue+0x50/0x50 [ 367.950585] ? plug_ctx_cmp+0x110/0x110 [ 367.954558] blk_stat_alloc_callback+0x5b/0x280 [ 367.959229] blk_mq_init_allocated_queue+0x125/0x1580 [ 367.964426] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.969957] ? blk_alloc_queue_node+0x8d3/0xe40 [ 367.974652] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 367.979151] ? __mutex_init+0x1ef/0x280 [ 367.983145] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.988770] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 367.993530] ? idr_alloc+0x145/0x1a0 [ 367.997244] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 368.002435] blk_mq_init_queue+0x63/0xb0 [ 368.006499] loop_add+0x32b/0x9c0 [ 368.009949] ? loop_lookup+0x102/0x220 [ 368.013828] ? loop_queue_rq+0x640/0x640 [ 368.017881] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 368.023070] loop_control_ioctl+0x178/0x500 [ 368.027395] ? loop_add+0x9c0/0x9c0 [ 368.031032] ? expand_files.part.8+0x9a0/0x9a0 [ 368.035617] ? kasan_check_write+0x14/0x20 [ 368.039856] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 368.044781] ? wait_for_completion+0x870/0x870 [ 368.049356] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 368.054543] ? loop_add+0x9c0/0x9c0 [ 368.058180] do_vfs_ioctl+0x1cf/0x16a0 [ 368.062059] ? ioctl_preallocate+0x2e0/0x2e0 [ 368.066462] ? fget_raw+0x20/0x20 [ 368.069911] ? __sb_end_write+0xac/0xe0 [ 368.073876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 368.079408] ? fput+0x130/0x1a0 [ 368.082689] ? ksys_write+0x1a6/0x250 [ 368.086490] ? security_file_ioctl+0x94/0xc0 [ 368.090906] ksys_ioctl+0xa9/0xd0 [ 368.094365] __x64_sys_ioctl+0x73/0xb0 [ 368.098259] do_syscall_64+0x1b1/0x800 [ 368.102140] ? finish_task_switch+0x1ca/0x840 [ 368.106623] ? syscall_return_slowpath+0x5c0/0x5c0 [ 368.111540] ? syscall_return_slowpath+0x30f/0x5c0 [ 368.116479] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 368.121835] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.126677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.131865] RIP: 0033:0x455a09 [ 368.135047] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.142746] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 368.150008] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/21 21:43:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000020001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:00 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) [ 368.157275] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 368.164534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 368.171793] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001e 2018/05/21 21:43:00 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:00 executing program 0 (fault-call:5 fault-nth:31): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:00 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) connect$nfc_raw(r0, &(0x7f0000000200)={0x27, 0x1, 0x2}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0x6f14}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) sched_getparam(r3, &(0x7f0000000180)) 2018/05/21 21:43:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000f00001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:00 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000200)=""/4096) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x3}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x1a75, 0x4) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000180)={0xa0003, 0x0, [0x3, 0x1, 0x7f, 0x4, 0x3, 0x8, 0x3df, 0x2]}) 2018/05/21 21:43:00 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:00 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x806, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x82040, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) [ 368.360977] FAULT_INJECTION: forcing a failure. [ 368.360977] name failslab, interval 1, probability 0, space 0, times 0 [ 368.372397] CPU: 1 PID: 23248 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 368.379693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.389048] Call Trace: [ 368.391644] dump_stack+0x1b9/0x294 [ 368.395276] ? dump_stack_print_info.cold.2+0x52/0x52 [ 368.400472] ? __save_stack_trace+0x7e/0xd0 [ 368.404799] should_fail.cold.4+0xa/0x1a [ 368.408872] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 368.413981] ? save_stack+0x43/0xd0 [ 368.417614] ? kasan_kmalloc+0xc4/0xe0 [ 368.421505] ? kmem_cache_alloc_trace+0x152/0x780 [ 368.426350] ? blk_stat_alloc_callback+0x5b/0x280 [ 368.431197] ? blk_mq_init_allocated_queue+0x125/0x1580 [ 368.436560] ? graph_lock+0x170/0x170 [ 368.440363] ? ksys_ioctl+0xa9/0xd0 [ 368.443989] ? __x64_sys_ioctl+0x73/0xb0 [ 368.448053] ? do_syscall_64+0x1b1/0x800 [ 368.452114] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.457481] ? find_held_lock+0x36/0x1c0 [ 368.461546] ? __lock_is_held+0xb5/0x140 [ 368.465620] ? check_same_owner+0x320/0x320 [ 368.469945] ? rcu_note_context_switch+0x710/0x710 [ 368.474878] __should_failslab+0x124/0x180 [ 368.479119] should_failslab+0x9/0x14 [ 368.482925] __kmalloc+0x2c8/0x760 [ 368.486464] ? kmem_cache_alloc_trace+0x616/0x780 [ 368.491309] ? blk_throtl_init+0x3e6/0x630 [ 368.495550] ? blk_stat_alloc_callback+0x84/0x280 [ 368.500396] ? blk_mq_can_queue+0x50/0x50 [ 368.504542] ? plug_ctx_cmp+0x110/0x110 [ 368.508518] blk_stat_alloc_callback+0x84/0x280 [ 368.513197] blk_mq_init_allocated_queue+0x125/0x1580 [ 368.518391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.523945] ? blk_alloc_queue_node+0x8d3/0xe40 [ 368.528619] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 368.533117] ? __mutex_init+0x1ef/0x280 [ 368.537109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.542647] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 368.547425] ? idr_alloc+0x145/0x1a0 [ 368.551143] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 368.556338] blk_mq_init_queue+0x63/0xb0 [ 368.560402] loop_add+0x32b/0x9c0 [ 368.563865] ? loop_lookup+0x102/0x220 [ 368.567750] ? loop_queue_rq+0x640/0x640 [ 368.571821] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 368.577015] loop_control_ioctl+0x178/0x500 [ 368.581338] ? loop_add+0x9c0/0x9c0 [ 368.584968] ? expand_files.part.8+0x9a0/0x9a0 [ 368.589553] ? kasan_check_write+0x14/0x20 [ 368.593795] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 368.598729] ? wait_for_completion+0x870/0x870 [ 368.603314] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 368.608503] ? loop_add+0x9c0/0x9c0 [ 368.612134] do_vfs_ioctl+0x1cf/0x16a0 [ 368.616029] ? ioctl_preallocate+0x2e0/0x2e0 [ 368.620439] ? fget_raw+0x20/0x20 [ 368.623892] ? __sb_end_write+0xac/0xe0 [ 368.627870] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 368.633408] ? fput+0x130/0x1a0 [ 368.636690] ? ksys_write+0x1a6/0x250 [ 368.640495] ? security_file_ioctl+0x94/0xc0 [ 368.644908] ksys_ioctl+0xa9/0xd0 [ 368.648366] __x64_sys_ioctl+0x73/0xb0 [ 368.652255] do_syscall_64+0x1b1/0x800 [ 368.656144] ? finish_task_switch+0x1ca/0x840 [ 368.660644] ? syscall_return_slowpath+0x5c0/0x5c0 [ 368.665593] ? syscall_return_slowpath+0x30f/0x5c0 [ 368.670526] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 368.675893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.680750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.685939] RIP: 0033:0x455a09 [ 368.689128] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.696840] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 368.704108] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/21 21:43:01 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x4, r1}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 2018/05/21 21:43:01 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000029201fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 368.711374] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 368.718643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 368.725911] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001f 2018/05/21 21:43:01 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000180)="921de592604ff84b2bb831676118cc4b8e07187f94dcced3749de84f476ffee81e46a40c7702fc6bb558871cd8aa263d9e4e5a58563e3dddadda72a27e7b80e01a3cc890a367114c3fa998c210dffed685d75d06e8176623bf2268cc48c8da88c408eeadaad750e032d1831af7ade44700ba80d59c19e45061b9d72c2f9718a59608c01d42232e02610a32c45a648c19c9d5ff56ed", 0x95}, {&(0x7f0000000000)="96c698feea87d36a89e6ea21071777a8e3f7785438e88fd10e60ee3184096d6abfe01cde47286ed904fe64c8de81b982159a17b8", 0x34}, {&(0x7f0000000040)}, {&(0x7f0000000300)="b4b291dc27b3e2f491fd22f4463384e07d051949b1fd690debbc1f23bde8a165194d668ce1ec255e3b2d766ab284cc1a03494d3df9f6b1c8557f40428de27d2031f2bc368eb4", 0x46}, {&(0x7f0000000380)="aeab3fef34580fb4eaf20df95db4ee5108521bf52b2a148786bddbbc70241f69013af9a09ef835b09f6f931eed781ea4a0a083006c647b9097a68d3d43b1d253b33397c27492f2c69d6f95b9a8a1357da4dca0281af9115c286af1e6", 0x5c}], 0x5) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) getpeername$netrom(r1, &(0x7f0000000540)=@full, &(0x7f00000005c0)=0x48) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x2, 0x3, 0x800, 0x3, 0xffff, 0x4, 0x8, {0x0, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, 0x4, 0x4, 0x7, 0x4, 0x6}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, &(0x7f0000000240)=0x4) pwrite64(r1, &(0x7f0000000280)="e0213c1e9f5ff4f7fd1108f848f45d10cc0be6293171887c5698972675cfef744a7d02471b44772b36c4500fa06660d3b639e465186b13d234a73b465ab72c4346eb18b89f6eb382f290dfda282099092bd7aa46829298a623a93dbb0993a07adf9e453d282e717b6de6e79b223cf356675cefb9a045c039d06adf47fd", 0xfffffffffffffe69, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:01 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xb00, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:01 executing program 0 (fault-call:5 fault-nth:32): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:01 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xea, 0x355a9e7ddf71c0a2) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000040)={0x240000000000000, 0xfffffffffffffe01, 0x1000, 0x2}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:01 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) [ 368.915196] FAULT_INJECTION: forcing a failure. [ 368.915196] name failslab, interval 1, probability 0, space 0, times 0 [ 368.926533] CPU: 1 PID: 23272 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 368.933812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.943163] Call Trace: [ 368.945755] dump_stack+0x1b9/0x294 [ 368.949413] ? dump_stack_print_info.cold.2+0x52/0x52 [ 368.954606] ? save_stack+0x43/0xd0 [ 368.958235] ? __kasan_slab_free+0x11a/0x170 [ 368.962646] ? kasan_slab_free+0xe/0x10 [ 368.966618] ? kfree+0xd9/0x260 [ 368.969898] ? throtl_pd_free+0x21/0x30 [ 368.973878] should_fail.cold.4+0xa/0x1a [ 368.977940] ? __x64_sys_ioctl+0x73/0xb0 [ 368.982008] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 368.987112] ? print_usage_bug+0xc0/0xc0 [ 368.991175] ? do_raw_spin_lock+0xc1/0x200 [ 368.995409] ? graph_lock+0x170/0x170 [ 368.999207] ? trace_hardirqs_off+0xd/0x10 [ 369.003442] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 369.008549] ? find_held_lock+0x36/0x1c0 [ 369.012615] ? __lock_is_held+0xb5/0x140 [ 369.016687] ? check_same_owner+0x320/0x320 [ 369.021022] ? rcu_note_context_switch+0x710/0x710 [ 369.025961] ? blkcg_activate_policy+0x3db/0x580 [ 369.030723] __should_failslab+0x124/0x180 [ 369.034983] should_failslab+0x9/0x14 [ 369.038798] kmem_cache_alloc_trace+0x2cb/0x780 [ 369.043468] ? blk_throtl_init+0x3e6/0x630 [ 369.047702] ? blk_throtl_drain+0x7e0/0x7e0 [ 369.052025] ? blk_mq_can_queue+0x50/0x50 [ 369.056171] ? plug_ctx_cmp+0x110/0x110 [ 369.060146] blk_stat_alloc_callback+0x5b/0x280 [ 369.064820] blk_mq_init_allocated_queue+0x125/0x1580 [ 369.070015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.075552] ? blk_alloc_queue_node+0x8d3/0xe40 [ 369.080225] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 369.084724] ? __mutex_init+0x1ef/0x280 [ 369.088720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.094259] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 369.099027] ? idr_alloc+0x145/0x1a0 [ 369.102757] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 369.107956] blk_mq_init_queue+0x63/0xb0 [ 369.112021] loop_add+0x32b/0x9c0 [ 369.115474] ? loop_lookup+0x102/0x220 [ 369.119361] ? loop_queue_rq+0x640/0x640 [ 369.123426] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 369.128615] loop_control_ioctl+0x178/0x500 [ 369.132936] ? loop_add+0x9c0/0x9c0 [ 369.136594] ? expand_files.part.8+0x9a0/0x9a0 [ 369.141182] ? kasan_check_write+0x14/0x20 [ 369.145416] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 369.150347] ? wait_for_completion+0x870/0x870 [ 369.155378] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 369.160576] ? loop_add+0x9c0/0x9c0 [ 369.164205] do_vfs_ioctl+0x1cf/0x16a0 [ 369.168098] ? ioctl_preallocate+0x2e0/0x2e0 [ 369.172508] ? fget_raw+0x20/0x20 [ 369.175965] ? __sb_end_write+0xac/0xe0 [ 369.179946] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 369.185479] ? fput+0x130/0x1a0 [ 369.188759] ? ksys_write+0x1a6/0x250 [ 369.192563] ? security_file_ioctl+0x94/0xc0 [ 369.196975] ksys_ioctl+0xa9/0xd0 [ 369.200433] __x64_sys_ioctl+0x73/0xb0 [ 369.204324] do_syscall_64+0x1b1/0x800 [ 369.208213] ? syscall_return_slowpath+0x5c0/0x5c0 [ 369.213144] ? syscall_return_slowpath+0x30f/0x5c0 [ 369.218075] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 369.223444] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.228291] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.233475] RIP: 0033:0x455a09 [ 369.236661] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.244372] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 369.251640] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 369.258906] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/21 21:43:01 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:01 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:43:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff02000000000000000000000000f001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:01 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) [ 369.266172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 369.273439] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000020 2018/05/21 21:43:01 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x14, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:01 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:01 executing program 6: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:01 executing program 0 (fault-call:5 fault-nth:33): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 369.403041] FAULT_INJECTION: forcing a failure. [ 369.403041] name failslab, interval 1, probability 0, space 0, times 0 [ 369.414728] CPU: 1 PID: 23293 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 369.422013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.431370] Call Trace: [ 369.433967] dump_stack+0x1b9/0x294 [ 369.437601] ? dump_stack_print_info.cold.2+0x52/0x52 [ 369.442793] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 369.447990] should_fail.cold.4+0xa/0x1a [ 369.452060] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 369.457177] ? unwind_get_return_address+0x61/0xa0 [ 369.462109] ? __save_stack_trace+0x7e/0xd0 [ 369.466431] ? graph_lock+0x170/0x170 [ 369.470237] ? find_held_lock+0x36/0x1c0 [ 369.474305] ? __lock_is_held+0xb5/0x140 [ 369.478381] ? check_same_owner+0x320/0x320 [ 369.482707] ? rcu_note_context_switch+0x710/0x710 [ 369.487650] __should_failslab+0x124/0x180 [ 369.491891] should_failslab+0x9/0x14 [ 369.495699] kmem_cache_alloc_node_trace+0x26f/0x770 [ 369.500807] ? __kmalloc_node+0x33/0x70 [ 369.504782] ? __kmalloc_node+0x33/0x70 [ 369.509539] ? rcu_read_lock_sched_held+0x108/0x120 [ 369.514568] __kmalloc_node+0x33/0x70 [ 369.518374] sbitmap_init_node+0x290/0x460 [ 369.522614] blk_mq_realloc_hw_ctxs+0x71f/0x1250 [ 369.527384] ? blk_mq_free_map_and_requests+0x160/0x160 [ 369.532750] ? __kmalloc_node+0x33/0x70 [ 369.536729] ? __kmalloc_node+0x33/0x70 [ 369.540709] ? rcu_read_lock_sched_held+0x108/0x120 [ 369.545732] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 369.551013] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 369.556031] ? kasan_unpoison_shadow+0x35/0x50 [ 369.560612] ? kasan_kmalloc+0xc4/0xe0 [ 369.564508] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 369.569701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.575244] ? blk_alloc_queue_node+0x8d3/0xe40 [ 369.579916] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 369.584414] ? __mutex_init+0x1ef/0x280 [ 369.588426] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.593969] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 369.598735] ? idr_alloc+0x145/0x1a0 [ 369.602453] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 369.607650] blk_mq_init_queue+0x63/0xb0 [ 369.611719] loop_add+0x32b/0x9c0 [ 369.615262] ? loop_lookup+0x102/0x220 [ 369.619148] ? loop_queue_rq+0x640/0x640 [ 369.623218] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 369.628409] loop_control_ioctl+0x178/0x500 [ 369.632729] ? loop_add+0x9c0/0x9c0 [ 369.636359] ? expand_files.part.8+0x9a0/0x9a0 [ 369.640942] ? kasan_check_write+0x14/0x20 [ 369.645178] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 369.650112] ? wait_for_completion+0x870/0x870 [ 369.654701] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 369.659889] ? loop_add+0x9c0/0x9c0 [ 369.663518] do_vfs_ioctl+0x1cf/0x16a0 [ 369.667411] ? ioctl_preallocate+0x2e0/0x2e0 [ 369.671821] ? fget_raw+0x20/0x20 [ 369.675279] ? __sb_end_write+0xac/0xe0 [ 369.679258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 369.684794] ? fput+0x130/0x1a0 [ 369.688103] ? ksys_write+0x1a6/0x250 [ 369.691908] ? security_file_ioctl+0x94/0xc0 [ 369.696333] ksys_ioctl+0xa9/0xd0 [ 369.699794] __x64_sys_ioctl+0x73/0xb0 [ 369.703684] do_syscall_64+0x1b1/0x800 [ 369.707575] ? finish_task_switch+0x1ca/0x840 [ 369.712071] ? syscall_return_slowpath+0x5c0/0x5c0 [ 369.717000] ? syscall_return_slowpath+0x30f/0x5c0 [ 369.721933] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 369.727302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.732148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.737334] RIP: 0033:0x455a09 [ 369.740520] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/05/21 21:43:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000920201fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:02 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x34883) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000180)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x313101, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000200)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:43:02 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:02 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x800e000000000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:02 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:02 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) bind$packet(r0, &(0x7f0000000040)={0x11, 0xf, r1, 0x1, 0x31, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) [ 369.748234] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 369.755502] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 369.762767] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 369.770035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 369.777300] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000021 2018/05/21 21:43:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000001300fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000400fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:02 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:02 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200001, 0x0) lseek(r0, 0x0, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) connect(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x3, 0x4, 0x4, 0x4}}, 0x80) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) tee(r2, r2, 0x400, 0xb) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:02 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x8035000000000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:02 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:02 executing program 0 (fault-call:5 fault-nth:34): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:02 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8080, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) [ 370.016505] FAULT_INJECTION: forcing a failure. [ 370.016505] name failslab, interval 1, probability 0, space 0, times 0 [ 370.027862] CPU: 1 PID: 23327 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 370.035140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.044498] Call Trace: [ 370.047101] dump_stack+0x1b9/0x294 [ 370.050738] ? dump_stack_print_info.cold.2+0x52/0x52 [ 370.055936] should_fail.cold.4+0xa/0x1a [ 370.060001] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 370.065107] ? debug_object_free+0x5f0/0x5f0 [ 370.069520] ? graph_lock+0x170/0x170 [ 370.073317] ? trace_hardirqs_on+0xd/0x10 [ 370.077469] ? find_held_lock+0x36/0x1c0 [ 370.081532] ? __lock_is_held+0xb5/0x140 [ 370.085612] ? check_same_owner+0x320/0x320 [ 370.089938] ? rcu_note_context_switch+0x710/0x710 [ 370.094871] ? lock_downgrade+0x8e0/0x8e0 [ 370.099020] __should_failslab+0x124/0x180 [ 370.103259] should_failslab+0x9/0x14 [ 370.107062] kmem_cache_alloc_node_trace+0x26f/0x770 [ 370.112176] __kmalloc_node+0x33/0x70 [ 370.115979] blk_mq_realloc_hw_ctxs+0x6a4/0x1250 [ 370.120744] ? blk_mq_free_map_and_requests+0x160/0x160 [ 370.126110] ? __kmalloc_node+0x33/0x70 [ 370.130082] ? __kmalloc_node+0x33/0x70 [ 370.134055] ? rcu_read_lock_sched_held+0x108/0x120 [ 370.139072] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 370.144348] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 370.149366] ? kasan_unpoison_shadow+0x35/0x50 [ 370.153950] ? kasan_kmalloc+0xc4/0xe0 [ 370.157849] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 370.163043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.168577] ? blk_alloc_queue_node+0x8d3/0xe40 [ 370.173250] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 370.177746] ? __mutex_init+0x1ef/0x280 [ 370.181746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.187294] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 370.192070] ? idr_alloc+0x145/0x1a0 [ 370.195789] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 370.200986] blk_mq_init_queue+0x63/0xb0 [ 370.205051] loop_add+0x32b/0x9c0 [ 370.208507] ? loop_lookup+0x102/0x220 [ 370.212397] ? loop_queue_rq+0x640/0x640 [ 370.216465] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 370.221658] loop_control_ioctl+0x178/0x500 [ 370.225981] ? loop_add+0x9c0/0x9c0 [ 370.229610] ? expand_files.part.8+0x9a0/0x9a0 [ 370.234202] ? kasan_check_write+0x14/0x20 [ 370.238440] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 370.243384] ? wait_for_completion+0x870/0x870 [ 370.247967] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 370.253153] ? loop_add+0x9c0/0x9c0 [ 370.256784] do_vfs_ioctl+0x1cf/0x16a0 [ 370.260683] ? ioctl_preallocate+0x2e0/0x2e0 [ 370.265091] ? fget_raw+0x20/0x20 [ 370.268545] ? __sb_end_write+0xac/0xe0 [ 370.272524] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 370.278058] ? fput+0x130/0x1a0 [ 370.281336] ? ksys_write+0x1a6/0x250 [ 370.285143] ? security_file_ioctl+0x94/0xc0 [ 370.289553] ksys_ioctl+0xa9/0xd0 [ 370.293023] __x64_sys_ioctl+0x73/0xb0 [ 370.296920] do_syscall_64+0x1b1/0x800 [ 370.300821] ? syscall_return_slowpath+0x5c0/0x5c0 [ 370.305751] ? syscall_return_slowpath+0x30f/0x5c0 [ 370.310684] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 370.316053] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.320904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.326087] RIP: 0033:0x455a09 [ 370.329270] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.336981] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 370.344247] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 370.351512] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 370.358777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 370.366042] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000022 2018/05/21 21:43:03 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000001240)=""/149, 0x95) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) sendmsg$unix(r3, &(0x7f00000009c0)={&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000480)="938194f7afc9f37a974e187a827c20cc69e6b4dad9fefb2b4cf351", 0x1b}, {&(0x7f00000004c0)="0734c4302d10e7bb8273a62d7834b4ba68faf5c599b36251795f357e63e37a3c9758ae2436fd7e7bed5b3a69d6481935b58c36f71ba4dabe047d0894694276bfef3ca0bd4cbfd49aa31b915003db0a60394a3f6496", 0x55}, {&(0x7f0000000540)="219fc4357948eee4757c8fef328116963d0bb44ecea9561a3628e5ed6b9d4f94c07c80a234aa1e90ea972f74d1d5a4fc78624b77bf10adf9ff93c1eb335e43cd9b893b0f59af87ce6c84514cfc4701bdd4464842ed8eee6db662104ff8c3732e48ebe61e8cb5066afae8d8a9f440ca73bd4c28318973e8d4611a749aec0f124b8a31c520b39af9d560bbba5e3ad1558a10be0d422ed10f95a80becf2e1779707920863d043bc6085d634ca8413", 0xad}, {&(0x7f0000000600)="5cafb145d8a3d095dd", 0x9}, {&(0x7f0000000640)="64be9a2f8b353b5e82afd0f65eb3c0003bd339b6ec20552693853e5d989a3abd025579bc2ffc80cae948b5a697b2c6e82b179c4a4fc4295a26f7021dbc8c901c9e97b9b56373e9d458c1046abab128224fb2de6b7bf3dc093af3c86dc07a5299468d2a29008b98f2113944da", 0x6c}, {&(0x7f00000006c0)="d387fa07a4d1fc5d355a068484e9846f2d52215880eeebefba0a0e63a3ed0d7ae8cf9800484683cfd316ab52869f5f1a9a000db75d39e5cbef5305d29bb10271c62f244fac1b92ccc0f5b5c5d5c705609d72f9d250207cdcd2404fcf7cc5fc9673b64a1daf5f9282679fd1881dbf4d045e8b96563186d24a61d05c57ee91b4635f37595617d4fd024a9815fe6311cb692156be0c8e8f6be2b065e29bc3767ef461d1567a9a522c79ba881a18a53c7362d1a6a8304bcc689f", 0xb8}, {&(0x7f0000000780)="37b0bb67fb673952d895d60db3dec574458097ce211a2fe6b494fe512529c3258672eb54d41293c4e0cfc5ca9c1ff65c7b85", 0x32}, {&(0x7f00000007c0)="1f741a2217144c91cdcc6d3c3fb857abe8fc11ab476ac327a77c79f42d7a108df3a56d60bef22348abbb61b3629aedc75f445e69f3dea53f", 0x38}, {&(0x7f0000000800)="92d59b5e667ff86eb4320ffc97d3f3a46e984c259a7484d4962aef403874d022d6a4a1d37bf1cb3999ac1d90edfbaf52494098ea6ff458f0f8cce7caa7f51df43f1db70edf2abffb2a34a17d7cf22d2d0ba2af2a37a48db989afd7929d3244a790a9124ae6ddff6bc57087511a8a0245ed31b7a2b36a7cc552faffb34c5803292ed8976b0fab", 0x86}], 0x9, &(0x7f0000000980)=[@rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x10, 0x1, 0x1}, @rights={0x18, 0x1, 0x1, [r1]}], 0x40, 0x8000}, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000040)="7710f9a72c3b125e8203a64a3c88ae9f5430a9147382701b149fc2fc0bb20a882bdb9bd24b00f5d7c09e49ab63e254c98f4e", &(0x7f0000000380)="f2856a42060d9a93ce0f099c808a41097b8fd953b63056ead2ae5e8396e915dbb8fcee84"}, 0x20) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000180)=""/243, 0xf3}, {&(0x7f0000000280)=""/140, 0x8c}], 0x3) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000340)={0x0, r2}) 2018/05/21 21:43:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000201fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:03 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x400) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x208b41, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:03 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x88470000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:03 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:03 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x3, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 2018/05/21 21:43:03 executing program 0 (fault-call:5 fault-nth:35): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 370.480054] FAULT_INJECTION: forcing a failure. [ 370.480054] name failslab, interval 1, probability 0, space 0, times 0 [ 370.491414] CPU: 1 PID: 23337 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 370.498692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.508051] Call Trace: [ 370.510658] dump_stack+0x1b9/0x294 [ 370.514303] ? dump_stack_print_info.cold.2+0x52/0x52 [ 370.519516] should_fail.cold.4+0xa/0x1a [ 370.523589] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 370.528708] ? zap_class+0x720/0x720 [ 370.532426] ? graph_lock+0x170/0x170 [ 370.536229] ? trace_hardirqs_on+0xd/0x10 [ 370.540385] ? find_held_lock+0x36/0x1c0 [ 370.544453] ? __lock_is_held+0xb5/0x140 [ 370.548531] ? check_same_owner+0x320/0x320 [ 370.552862] ? rcu_note_context_switch+0x710/0x710 [ 370.557797] ? lock_downgrade+0x8e0/0x8e0 [ 370.561949] __should_failslab+0x124/0x180 [ 370.566191] should_failslab+0x9/0x14 [ 370.570005] kmem_cache_alloc_node_trace+0x26f/0x770 [ 370.575121] __kmalloc_node+0x33/0x70 [ 370.578930] blk_mq_realloc_hw_ctxs+0x6a4/0x1250 [ 370.583705] ? blk_mq_free_map_and_requests+0x160/0x160 [ 370.589076] ? __kmalloc_node+0x33/0x70 [ 370.593052] ? __kmalloc_node+0x33/0x70 [ 370.597034] ? rcu_read_lock_sched_held+0x108/0x120 [ 370.602053] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 370.607334] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 370.612355] ? kasan_unpoison_shadow+0x35/0x50 [ 370.616941] ? kasan_kmalloc+0xc4/0xe0 [ 370.620843] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 370.626039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.631582] ? blk_alloc_queue_node+0x8d3/0xe40 [ 370.636260] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 370.640760] ? __mutex_init+0x1ef/0x280 [ 370.644759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.650298] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 370.655067] ? idr_alloc+0x145/0x1a0 [ 370.658790] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 370.663998] blk_mq_init_queue+0x63/0xb0 [ 370.668066] loop_add+0x32b/0x9c0 [ 370.671525] ? loop_lookup+0x102/0x220 [ 370.675415] ? loop_queue_rq+0x640/0x640 [ 370.679495] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 370.684689] loop_control_ioctl+0x178/0x500 [ 370.689013] ? loop_add+0x9c0/0x9c0 [ 370.692640] ? expand_files.part.8+0x9a0/0x9a0 [ 370.697225] ? kasan_check_write+0x14/0x20 [ 370.701461] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 370.706660] ? wait_for_completion+0x870/0x870 [ 370.711248] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 370.716440] ? loop_add+0x9c0/0x9c0 [ 370.720069] do_vfs_ioctl+0x1cf/0x16a0 [ 370.723963] ? ioctl_preallocate+0x2e0/0x2e0 [ 370.728374] ? fget_raw+0x20/0x20 [ 370.731832] ? __sb_end_write+0xac/0xe0 [ 370.735813] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 370.741349] ? fput+0x130/0x1a0 [ 370.744636] ? ksys_write+0x1a6/0x250 [ 370.748444] ? security_file_ioctl+0x94/0xc0 [ 370.752865] ksys_ioctl+0xa9/0xd0 [ 370.756327] __x64_sys_ioctl+0x73/0xb0 [ 370.760218] do_syscall_64+0x1b1/0x800 [ 370.764108] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 370.768953] ? syscall_return_slowpath+0x5c0/0x5c0 [ 370.773890] ? syscall_return_slowpath+0x30f/0x5c0 [ 370.778827] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 370.784200] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.789052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.794240] RIP: 0033:0x455a09 [ 370.797425] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.805136] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 370.812409] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 370.819676] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/21 21:43:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000002fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:03 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x81000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000008fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 370.826941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 370.834208] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000023 2018/05/21 21:43:03 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) write$vnet(r1, &(0x7f0000000280)={0x1, {&(0x7f0000000180)=""/212, 0xd4, &(0x7f0000000040)=""/53, 0x2, 0x4}}, 0x68) 2018/05/21 21:43:03 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x8000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x89) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x502, 0x70bd28, 0x25dfdbfc, {0x2}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0xc0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2018/05/21 21:43:03 executing program 7: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x1, 0x0) timerfd_gettime(r0, &(0x7f0000000680)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040), 0x10) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000000c0)={0x5, 0x0, [{0x80000001}, {0x1, 0x0, 0x8}, {0x800, 0x0, 0x9}, {0x7, 0x0, 0x8}, {0xa1c, 0x0, 0x5}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000180)={{0x3, 0x3, 0x1, 0x200, "54f060fc01ac9308b3ac5aea969fc92030209004e4ed6712c7cfada88b14925beed76dddb71a6939006915e7", 0x1ff}, 0x93, [0x9, 0xa9, 0x200, 0x3ff, 0x1d, 0x9, 0x20, 0x5ce9, 0x8, 0x9, 0x6, 0x3f, 0x4, 0xfffffffffffffffc, 0x31, 0x800, 0x8, 0xfffffffffffffff7, 0x5, 0x7, 0x69, 0xf1, 0x5, 0xffffffffffffffe0, 0x6, 0x2, 0xff0, 0x401, 0x4, 0x8, 0x380000, 0x3, 0x3ffc00000000000, 0x6, 0x4, 0x6, 0x40, 0x1ff, 0x5, 0x7fff, 0x1cfe, 0x81, 0x401, 0xe85, 0x10001, 0x7, 0x45c3, 0x1, 0x8000, 0xffffffffffff3eb7, 0x100, 0x0, 0x7, 0x1, 0x6, 0xfff, 0xffffffffffffffff, 0x2, 0xf0db, 0xfffffffffffff001, 0x58c7, 0x7fffffff, 0x0, 0x40, 0x3154, 0x8001, 0x1f, 0x800000000, 0x7, 0x1, 0x6, 0x2, 0x2, 0x2b6fae40, 0x0, 0x8, 0x4, 0xfff, 0x9, 0x280000000000000, 0x1, 0x3, 0x3, 0x4, 0x2, 0x1, 0x3d6, 0x267, 0x6, 0xa9, 0x3f, 0x3, 0x5, 0xc0, 0x90, 0xe355, 0x1, 0x41de, 0x80000001, 0x8000, 0x200, 0x1, 0x4, 0xffffffff, 0x2, 0x200, 0x0, 0xffffffffffffffff, 0xf18, 0x200, 0x400, 0x0, 0x81, 0x40, 0x5, 0x7f, 0x2, 0x9, 0x3b86, 0x7, 0x3, 0xed, 0x9, 0x3, 0x5, 0x7, 0x5, 0xb03]}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) 2018/05/21 21:43:03 executing program 0 (fault-call:5 fault-nth:36): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe0000000900000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:03 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x8, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:03 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000100)}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x4, 0xc0002) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:03 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:03 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x800000000000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 371.058209] FAULT_INJECTION: forcing a failure. [ 371.058209] name failslab, interval 1, probability 0, space 0, times 0 [ 371.069557] CPU: 1 PID: 23367 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 371.076843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.086204] Call Trace: [ 371.088813] dump_stack+0x1b9/0x294 [ 371.092545] ? dump_stack_print_info.cold.2+0x52/0x52 [ 371.097761] should_fail.cold.4+0xa/0x1a [ 371.101831] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 371.106949] ? debug_object_free+0x5f0/0x5f0 [ 371.111369] ? graph_lock+0x170/0x170 [ 371.115171] ? trace_hardirqs_on+0xd/0x10 [ 371.119327] ? find_held_lock+0x36/0x1c0 [ 371.123391] ? __lock_is_held+0xb5/0x140 [ 371.127454] ? program_multi_taps_filter+0x280/0x1180 [ 371.132658] ? check_same_owner+0x320/0x320 [ 371.136983] ? rcu_note_context_switch+0x710/0x710 [ 371.141912] ? lock_downgrade+0x8e0/0x8e0 [ 371.146065] __should_failslab+0x124/0x180 [ 371.150304] should_failslab+0x9/0x14 [ 371.154107] kmem_cache_alloc_node_trace+0x26f/0x770 [ 371.159219] __kmalloc_node+0x33/0x70 [ 371.163028] blk_mq_realloc_hw_ctxs+0x6a4/0x1250 [ 371.167795] ? blk_mq_free_map_and_requests+0x160/0x160 [ 371.173165] ? __kmalloc_node+0x33/0x70 [ 371.177137] ? __kmalloc_node+0x33/0x70 [ 371.181115] ? rcu_read_lock_sched_held+0x108/0x120 [ 371.186222] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 371.191502] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 371.196519] ? kasan_unpoison_shadow+0x35/0x50 [ 371.201104] ? kasan_kmalloc+0xc4/0xe0 [ 371.205003] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 371.210194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.215731] ? blk_alloc_queue_node+0x8d3/0xe40 [ 371.220404] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 371.224904] ? __mutex_init+0x1ef/0x280 [ 371.228897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.234434] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 371.239203] ? idr_alloc+0x145/0x1a0 [ 371.242925] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 371.248121] blk_mq_init_queue+0x63/0xb0 [ 371.252186] loop_add+0x32b/0x9c0 [ 371.255641] ? loop_lookup+0x102/0x220 [ 371.259526] ? loop_queue_rq+0x640/0x640 [ 371.263596] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 371.268786] loop_control_ioctl+0x178/0x500 [ 371.273106] ? loop_add+0x9c0/0x9c0 [ 371.276734] ? expand_files.part.8+0x9a0/0x9a0 [ 371.281319] ? kasan_check_write+0x14/0x20 [ 371.285558] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 371.290493] ? wait_for_completion+0x870/0x870 [ 371.295080] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 371.300266] ? loop_add+0x9c0/0x9c0 [ 371.303898] do_vfs_ioctl+0x1cf/0x16a0 [ 371.307795] ? ioctl_preallocate+0x2e0/0x2e0 [ 371.312204] ? fget_raw+0x20/0x20 [ 371.315662] ? __sb_end_write+0xac/0xe0 [ 371.319640] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 371.325178] ? fput+0x130/0x1a0 [ 371.328456] ? ksys_write+0x1a6/0x250 [ 371.332259] ? security_file_ioctl+0x94/0xc0 [ 371.336672] ksys_ioctl+0xa9/0xd0 [ 371.340129] __x64_sys_ioctl+0x73/0xb0 [ 371.344016] do_syscall_64+0x1b1/0x800 [ 371.347903] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 371.352747] ? syscall_return_slowpath+0x5c0/0x5c0 [ 371.357678] ? syscall_return_slowpath+0x30f/0x5c0 [ 371.362613] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 371.367979] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.372827] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.378012] RIP: 0033:0x455a09 [ 371.381195] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.388902] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 371.396169] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/21 21:43:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000001000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:04 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 371.403437] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 371.410703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 371.417969] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000024 2018/05/21 21:43:04 executing program 0 (fault-call:5 fault-nth:37): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:04 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:43:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x1, 0x0) io_setup(0x800000, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000180)="0c85ddb78efd27b175e812b00d24d84e54167e4add8a29290c4805ccb760412fece23fca7be45cf924d9007832234d1d35c1210abf257039d2337449934503dfeb1ad483ef58c9bd5b995733424a31639fe5c83bd6775c0e37f11983117fb7572c7f227c84fdc2ee98e8e60300c8ae4db3f2701029ad47b10723199ba7dc9cb3b00d6a8d4e8285e6ebde4105ff14bbce56f67f7311410f689db8ece71aea8c9251d7870e49c5c561983e86fa9ab973c74d4ad4443edf1be30c4d14d9accc947e09fa3f0ccf418eecf5b842faa34f5cfeb78af7baf5f56ce7d3243ef726061f26edf901ed2757cc75cd93162180a9236fecfa3597e5dd246f4c", 0xf9, 0x648, 0x0, 0x0, r1}]) r3 = semget(0x2, 0x1, 0x40) semctl$GETNCNT(r3, 0x4, 0xe, &(0x7f0000000280)) 2018/05/21 21:43:04 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) [ 371.557041] FAULT_INJECTION: forcing a failure. [ 371.557041] name failslab, interval 1, probability 0, space 0, times 0 [ 371.568371] CPU: 1 PID: 23389 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 371.575661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.585026] Call Trace: [ 371.587621] dump_stack+0x1b9/0x294 [ 371.591257] ? dump_stack_print_info.cold.2+0x52/0x52 [ 371.596456] should_fail.cold.4+0xa/0x1a [ 371.600519] ? debug_check_no_locks_freed+0x310/0x310 [ 371.605720] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 371.610826] ? __might_sleep+0x95/0x190 [ 371.614806] ? rcu_note_context_switch+0x710/0x710 [ 371.619736] ? kasan_check_write+0x14/0x20 [ 371.623969] ? graph_lock+0x170/0x170 [ 371.627772] ? __might_sleep+0x95/0x190 [ 371.631756] ? find_held_lock+0x36/0x1c0 [ 371.635823] ? __lock_is_held+0xb5/0x140 [ 371.639896] ? check_same_owner+0x320/0x320 [ 371.644226] ? lock_downgrade+0x8e0/0x8e0 [ 371.648379] ? rcu_note_context_switch+0x710/0x710 [ 371.653312] __should_failslab+0x124/0x180 [ 371.657553] should_failslab+0x9/0x14 [ 371.661356] kmem_cache_alloc_node_trace+0x26f/0x770 [ 371.666466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.672006] ? find_next_bit+0x104/0x130 [ 371.676074] blk_mq_init_tags+0x79/0x2b0 [ 371.680142] blk_mq_alloc_rq_map+0x9f/0x220 [ 371.684469] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 371.689840] blk_mq_init_sched+0x1e2/0x530 [ 371.694119] elevator_init+0x3c8/0x500 [ 371.698018] ? elevator_get+0x180/0x180 [ 371.701995] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 371.707014] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 371.711525] blk_mq_sched_init+0x2b/0x40 [ 371.715593] blk_mq_init_allocated_queue+0xf19/0x1580 [ 371.720795] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 371.725294] ? __mutex_init+0x1ef/0x280 [ 371.729288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.734828] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 371.739596] ? idr_alloc+0x145/0x1a0 [ 371.743313] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 371.748507] blk_mq_init_queue+0x63/0xb0 [ 371.752574] loop_add+0x32b/0x9c0 [ 371.756028] ? loop_lookup+0x102/0x220 [ 371.759915] ? loop_queue_rq+0x640/0x640 [ 371.763982] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 371.769175] loop_control_ioctl+0x178/0x500 [ 371.773497] ? loop_add+0x9c0/0x9c0 [ 371.777133] ? expand_files.part.8+0x9a0/0x9a0 [ 371.781716] ? kasan_check_write+0x14/0x20 [ 371.785953] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 371.790888] ? wait_for_completion+0x870/0x870 [ 371.795473] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 371.800662] ? loop_add+0x9c0/0x9c0 [ 371.804289] do_vfs_ioctl+0x1cf/0x16a0 [ 371.808187] ? ioctl_preallocate+0x2e0/0x2e0 [ 371.812598] ? fget_raw+0x20/0x20 [ 371.816058] ? __sb_end_write+0xac/0xe0 [ 371.820042] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 371.825575] ? fput+0x130/0x1a0 [ 371.828854] ? ksys_write+0x1a6/0x250 [ 371.832659] ? security_file_ioctl+0x94/0xc0 [ 371.837076] ksys_ioctl+0xa9/0xd0 [ 371.840537] __x64_sys_ioctl+0x73/0xb0 [ 371.844427] do_syscall_64+0x1b1/0x800 [ 371.848314] ? finish_task_switch+0x1ca/0x840 [ 371.852813] ? syscall_return_slowpath+0x5c0/0x5c0 [ 371.857749] ? syscall_return_slowpath+0x30f/0x5c0 [ 371.862685] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 371.868055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.872905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.878092] RIP: 0033:0x455a09 [ 371.881277] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.888985] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 371.896254] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 371.903522] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 371.910875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 371.918140] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000025 2018/05/21 21:43:04 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = semget(0x1, 0x7, 0x40) semctl$GETVAL(r2, 0x3, 0xc, &(0x7f0000000180)=""/4096) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x4, &(0x7f0000000100)=0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:04 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x1000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:04 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000100), 0x60) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:43:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8002920000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:04 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:04 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:04 executing program 0 (fault-call:5 fault-nth:38): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0x7530}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) [ 372.043193] FAULT_INJECTION: forcing a failure. [ 372.043193] name failslab, interval 1, probability 0, space 0, times 0 [ 372.054558] CPU: 1 PID: 23412 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 372.061841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.071210] Call Trace: [ 372.073821] dump_stack+0x1b9/0x294 [ 372.077457] ? dump_stack_print_info.cold.2+0x52/0x52 [ 372.082663] should_fail.cold.4+0xa/0x1a [ 372.086727] ? debug_check_no_locks_freed+0x310/0x310 [ 372.091919] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 372.097022] ? __might_sleep+0x95/0x190 [ 372.100998] ? rcu_note_context_switch+0x710/0x710 [ 372.105928] ? kasan_check_write+0x14/0x20 [ 372.110162] ? graph_lock+0x170/0x170 [ 372.113962] ? __might_sleep+0x95/0x190 [ 372.117938] ? find_held_lock+0x36/0x1c0 [ 372.122003] ? __lock_is_held+0xb5/0x140 [ 372.126079] ? check_same_owner+0x320/0x320 [ 372.130402] ? lock_downgrade+0x8e0/0x8e0 [ 372.134556] ? rcu_note_context_switch+0x710/0x710 [ 372.139501] __should_failslab+0x124/0x180 [ 372.143741] should_failslab+0x9/0x14 [ 372.147543] kmem_cache_alloc_node_trace+0x26f/0x770 [ 372.152648] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 372.158184] ? find_next_bit+0x104/0x130 [ 372.162251] blk_mq_init_tags+0x79/0x2b0 [ 372.166314] blk_mq_alloc_rq_map+0x9f/0x220 [ 372.170641] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 372.176008] blk_mq_init_sched+0x1e2/0x530 [ 372.180250] elevator_init+0x3c8/0x500 [ 372.184136] ? elevator_get+0x180/0x180 [ 372.188110] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 372.193123] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 372.197626] blk_mq_sched_init+0x2b/0x40 [ 372.201692] blk_mq_init_allocated_queue+0xf19/0x1580 [ 372.206885] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 372.211382] ? __mutex_init+0x1ef/0x280 [ 372.215378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.220914] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 372.225679] ? idr_alloc+0x145/0x1a0 [ 372.229401] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 372.234597] blk_mq_init_queue+0x63/0xb0 [ 372.238660] loop_add+0x32b/0x9c0 [ 372.242114] ? loop_lookup+0x102/0x220 [ 372.245999] ? loop_queue_rq+0x640/0x640 [ 372.250070] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 372.255261] loop_control_ioctl+0x178/0x500 [ 372.259583] ? loop_add+0x9c0/0x9c0 [ 372.263210] ? expand_files.part.8+0x9a0/0x9a0 [ 372.267790] ? kasan_check_write+0x14/0x20 [ 372.272028] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 372.276961] ? wait_for_completion+0x870/0x870 [ 372.281544] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 372.286746] ? loop_add+0x9c0/0x9c0 [ 372.290374] do_vfs_ioctl+0x1cf/0x16a0 [ 372.294266] ? ioctl_preallocate+0x2e0/0x2e0 [ 372.298679] ? fget_raw+0x20/0x20 [ 372.302135] ? __sb_end_write+0xac/0xe0 [ 372.306117] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 372.311653] ? fput+0x130/0x1a0 [ 372.314932] ? ksys_write+0x1a6/0x250 [ 372.318740] ? security_file_ioctl+0x94/0xc0 [ 372.323151] ksys_ioctl+0xa9/0xd0 [ 372.326620] __x64_sys_ioctl+0x73/0xb0 [ 372.330513] do_syscall_64+0x1b1/0x800 [ 372.334400] ? finish_task_switch+0x1ca/0x840 [ 372.338896] ? syscall_return_slowpath+0x5c0/0x5c0 [ 372.343826] ? syscall_return_slowpath+0x30f/0x5c0 [ 372.348760] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 372.354126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.358974] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.364157] RIP: 0033:0x455a09 [ 372.367342] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.375048] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 372.382316] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/21 21:43:05 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x40000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8092020000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 372.389581] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 372.396847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 372.404111] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000026 2018/05/21 21:43:05 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000200)={0x1, 0x8}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3e3c40620000, 0xfff}, &(0x7f0000000080)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r3, 0x5}, &(0x7f0000000180)=0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:05 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:43:05 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000180)=""/186) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:05 executing program 0 (fault-call:5 fault-nth:39): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x2000000) 2018/05/21 21:43:05 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x4888, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000000ffffff9e0000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:05 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) [ 372.609364] FAULT_INJECTION: forcing a failure. [ 372.609364] name failslab, interval 1, probability 0, space 0, times 0 [ 372.620646] CPU: 0 PID: 23430 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 372.627920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.637279] Call Trace: [ 372.639881] dump_stack+0x1b9/0x294 [ 372.643527] ? dump_stack_print_info.cold.2+0x52/0x52 [ 372.648727] ? find_next_zero_bit+0x111/0x140 [ 372.653236] should_fail.cold.4+0xa/0x1a [ 372.657312] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 372.662432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.667979] ? graph_lock+0x170/0x170 [ 372.671796] ? find_held_lock+0x36/0x1c0 [ 372.675875] ? __lock_is_held+0xb5/0x140 [ 372.680435] ? check_same_owner+0x320/0x320 [ 372.684768] ? __kmalloc_node+0x33/0x70 [ 372.688775] ? rcu_note_context_switch+0x710/0x710 [ 372.693719] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 372.699013] __should_failslab+0x124/0x180 [ 372.703264] should_failslab+0x9/0x14 [ 372.707078] kmem_cache_alloc_node_trace+0x26f/0x770 [ 372.712192] ? __kmalloc_node+0x47/0x70 [ 372.716181] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 372.721208] ? find_next_bit+0x104/0x130 [ 372.725281] sbitmap_queue_init_node+0x3bd/0x7d0 [ 372.730073] ? sbitmap_init_node+0x460/0x460 [ 372.734496] ? rcu_read_lock_sched_held+0x108/0x120 [ 372.739529] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 372.744827] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 372.750379] ? find_next_bit+0x104/0x130 [ 372.754461] blk_mq_init_tags+0x11b/0x2b0 [ 372.758627] blk_mq_alloc_rq_map+0x9f/0x220 [ 372.762966] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 372.768339] blk_mq_init_sched+0x1e2/0x530 [ 372.772588] elevator_init+0x3c8/0x500 [ 372.776480] ? elevator_get+0x180/0x180 [ 372.780460] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 372.785483] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 372.789991] blk_mq_sched_init+0x2b/0x40 [ 372.794056] blk_mq_init_allocated_queue+0xf19/0x1580 [ 372.799258] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 372.803762] ? __mutex_init+0x1ef/0x280 2018/05/21 21:43:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe80000000007fffffff0000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe80fffff000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe80ffffff9e000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:05 executing program 5: r0 = socket(0xc, 0x6, 0xa3) getsockopt$netlink(r0, 0x10e, 0x232181e2529c75b4, &(0x7f0000000180)=""/199, &(0x7f0000000000)=0xc7) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xfffffffffffffffd, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) 2018/05/21 21:43:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe80fffffff0000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 372.807764] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.813311] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 372.818084] ? idr_alloc+0x145/0x1a0 [ 372.821809] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 372.827010] blk_mq_init_queue+0x63/0xb0 [ 372.831079] loop_add+0x32b/0x9c0 [ 372.834538] ? loop_lookup+0x102/0x220 [ 372.838428] ? loop_queue_rq+0x640/0x640 [ 372.842500] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 372.847696] loop_control_ioctl+0x178/0x500 [ 372.852024] ? loop_add+0x9c0/0x9c0 [ 372.855657] ? expand_files.part.8+0x9a0/0x9a0 [ 372.860245] ? kasan_check_write+0x14/0x20 [ 372.864487] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 372.869430] ? wait_for_completion+0x870/0x870 [ 372.874021] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 372.879221] ? loop_add+0x9c0/0x9c0 [ 372.882865] do_vfs_ioctl+0x1cf/0x16a0 [ 372.886768] ? ioctl_preallocate+0x2e0/0x2e0 [ 372.891181] ? fget_raw+0x20/0x20 [ 372.894642] ? __sb_end_write+0xac/0xe0 [ 372.898628] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 372.904165] ? fput+0x130/0x1a0 [ 372.907449] ? ksys_write+0x1a6/0x250 [ 372.911262] ? security_file_ioctl+0x94/0xc0 [ 372.915683] ksys_ioctl+0xa9/0xd0 [ 372.919144] __x64_sys_ioctl+0x73/0xb0 [ 372.923038] do_syscall_64+0x1b1/0x800 [ 372.926929] ? finish_task_switch+0x1ca/0x840 [ 372.931426] ? syscall_return_slowpath+0x5c0/0x5c0 [ 372.936357] ? syscall_return_slowpath+0x30f/0x5c0 [ 372.941293] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 372.946660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.951514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.956703] RIP: 0033:0x455a09 [ 372.959889] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.967601] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 372.974868] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 372.982137] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 372.989404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 372.996670] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000027 2018/05/21 21:43:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000f00000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:05 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x1c, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x34000) 2018/05/21 21:43:05 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) set_mempolicy(0x8003, &(0x7f0000000040)=0x40, 0xd532) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) 2018/05/21 21:43:05 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = gettid() r7 = geteuid() lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgid(0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000a80)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0}, &(0x7f0000000b00)=0xc) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)=0x0) r15 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c00)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000d00)=0xe8) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000e00)=0x0) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r20 = getgid() r21 = gettid() stat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000fc0)=0x0, &(0x7f0000001000), &(0x7f0000001040)) r24 = gettid() lstat(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0, 0x0}, &(0x7f0000001180)=0xc) r27 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000011c0)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f00000012c0)=0xe8) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001680)=0x0) fstat(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r33 = getpid() getresuid(&(0x7f0000001800), &(0x7f0000001840)=0x0, &(0x7f0000001880)) getresgid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001980)=0x0) lstat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001a80), &(0x7f0000001ac0)=0x0, &(0x7f0000001b00)) sendmmsg$unix(r2, &(0x7f0000001c00)=[{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)="28267c1517404badfee74b5188298611a5be5943493e4ed688c16dd5c65823fd63deee8523e8e8dd553dd92e311a20d8d98bb65abbfa033249d013135d9e56599376ef475cc0b9933f3a0865eb42", 0x4e}, {&(0x7f0000000280)="8e7a8605528f2363fd1da5f5bb7662666100fd85e83b429bbddd7bd59591a83822d3d52d4b20a175576e5d567ed03d73adeef6e15113fe6920d02ce4c0417e961d9c2814b1a83bbb127dd7abc7bb772df6593ac6a645df575e8feda4ca3ea0182516b0e486d9fb24912466244bc51b9c70b2cb74896235193e97813c0dfe222c5a14ab2a1ad74c8f51f50b6f7f0e6b0bf2b1bafb6d1114d69251159dc7f7e1e8d7dec359be8280ee", 0xa8}, {&(0x7f0000000340)="2f2452a10ee5ca284e21f6d7536c75a2f719449e7cccd929ae6089c476d8788f1b93343df22bcbf2759f2868f560b89de138d902688d0a6e7d6cdf5a61c1d51b7bef19ce5600119656cdd1c49f25496abb7cd725a9f7938b5a5879b493", 0x5d}], 0x3, &(0x7f0000000740)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r1, r0, r2, r2, r2]}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x20, 0x1, 0x1, [r0, r2, r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x30, 0x1, 0x1, [r2, r2, r2, r0, r1, r0, r2]}], 0x100, 0x4}, {&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000008c0)="c628ae91fd4d5f6d5cf6a5ff3b4b4a98893bff39c19c155eb559a97bf9fde1257573dfe1eff218cd28b7edd3fbd9ea4032e2661b671044ae46953b0e50c149f89a950a2fb6b96732a618870a73cd874ee0ce37556c65a89a424d0b65528b86fe11d2f9d496cb963d8d827b7b964b675367204cac042edcd8121496e05a73d11e10a17299c46291d6acfb3a03f29af96b84483232b76213c16af76894cc16faf1cdc0e63186a84bc3b961b2f32e9104f3df5f1aa2", 0xb4}, {&(0x7f0000000980)="ddd2cca54105b8ec501122bc7396206ba411962b2c5a158eaa2a27e63091e11a6015178a52335895fff350f61e0d9144afae9c2486d9334b4c50fad931d7afc4ed2bf7642cad45594639bb759e4e42c411f9e25ec99ae3e79083dddbda56ccb860dd4507be61766942a3d24fe1451919fba54c5a23e71b1222f7d559f9b8dd14843c344d03b3ee98499d0ba66cc951804edc3082a339307d1b5ea4c4afe27b450b5d3e169895757f", 0xa8}], 0x2, &(0x7f00000013c0)=[@rights={0x18, 0x1, 0x1, [r2]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @cred={0x20, 0x1, 0x2, r27, r28, r29}], 0xf0, 0x1}, {&(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001540)="9991b9c32af57301fcecff69bcb3d8a49d8a37ea394a9593e536129836cedd8c68484e9aae92ea1054e84c395dddea46eac7ba7a36c7e588e8f4ac1832e1865355ac30dab36753e315d4e1bf1849740815fde57fa0ae535a5b0eff2860d8d7a04c816f6d5237ab5a84cff574bc487208a47e34441fea150b3aaaf5a61ee691d8a0e1f078cf803a794aa3467e6c46ba1879dc00d0b35dfeae0923f58258323b690f360d29840be9b92410ccb0820abb9559350e1e87035d2429d7da80cf917ddf15f989bbe6794afd758a50a92d3df6464d081f31a282791ee70180c45d41fb", 0xdf}], 0x1, &(0x7f0000001b40)=[@rights={0x20, 0x1, 0x1, [r2, r1, r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r30, r31, r32}, @cred={0x20, 0x1, 0x2, r33, r34, r35}, @cred={0x20, 0x1, 0x2, r36, r37, r38}], 0x98, 0x40000}], 0x3, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:43:05 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x8000000000000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:05 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:05 executing program 0 (fault-call:5 fault-nth:40): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 373.176786] FAULT_INJECTION: forcing a failure. [ 373.176786] name failslab, interval 1, probability 0, space 0, times 0 [ 373.188152] CPU: 1 PID: 23472 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 373.195435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.204825] Call Trace: [ 373.207426] dump_stack+0x1b9/0x294 [ 373.211067] ? dump_stack_print_info.cold.2+0x52/0x52 [ 373.216272] should_fail.cold.4+0xa/0x1a [ 373.220348] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/21 21:43:05 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x689, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe80f0000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 373.225474] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 373.230674] ? graph_lock+0x170/0x170 [ 373.234479] ? is_bpf_text_address+0xd7/0x170 [ 373.238982] ? find_held_lock+0x36/0x1c0 [ 373.243087] ? __lock_is_held+0xb5/0x140 [ 373.247171] ? check_same_owner+0x320/0x320 [ 373.251499] ? kasan_kmalloc+0xc4/0xe0 [ 373.255399] ? kmem_cache_alloc_node_trace+0x150/0x770 [ 373.260692] ? blk_mq_init_tags+0x79/0x2b0 [ 373.264931] ? rcu_note_context_switch+0x710/0x710 [ 373.269866] ? elevator_init+0x3c8/0x500 [ 373.273937] ? blk_mq_sched_init+0x2b/0x40 [ 373.278177] ? blk_mq_init_allocated_queue+0xf19/0x1580 [ 373.283547] __should_failslab+0x124/0x180 [ 373.287796] should_failslab+0x9/0x14 [ 373.291608] kmem_cache_alloc_node_trace+0x26f/0x770 [ 373.296724] ? print_usage_bug+0xc0/0xc0 [ 373.300789] __kmalloc_node+0x33/0x70 [ 373.304597] sbitmap_init_node+0x290/0x460 [ 373.308841] sbitmap_queue_init_node+0xaa/0x7d0 [ 373.313512] ? sbitmap_init_node+0x460/0x460 [ 373.317926] ? rcu_read_lock_sched_held+0x108/0x120 2018/05/21 21:43:05 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe80f0ffffff000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 373.322947] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 373.328232] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 373.333775] ? find_next_bit+0x104/0x130 [ 373.337854] blk_mq_init_tags+0x11b/0x2b0 [ 373.342019] blk_mq_alloc_rq_map+0x9f/0x220 [ 373.346351] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 373.351726] blk_mq_init_sched+0x1e2/0x530 [ 373.355989] elevator_init+0x3c8/0x500 [ 373.359878] ? elevator_get+0x180/0x180 [ 373.363866] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 373.368888] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 373.373399] blk_mq_sched_init+0x2b/0x40 2018/05/21 21:43:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000000000002920000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 373.377489] blk_mq_init_allocated_queue+0xf19/0x1580 [ 373.382691] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 373.387202] ? __mutex_init+0x1ef/0x280 [ 373.391196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.396763] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 373.401561] ? idr_alloc+0x145/0x1a0 [ 373.405281] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 373.410483] blk_mq_init_queue+0x63/0xb0 [ 373.414544] loop_add+0x32b/0x9c0 [ 373.418000] ? loop_lookup+0x102/0x220 [ 373.421887] ? loop_queue_rq+0x640/0x640 [ 373.425966] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 373.431163] loop_control_ioctl+0x178/0x500 [ 373.435488] ? loop_add+0x9c0/0x9c0 [ 373.439122] ? expand_files.part.8+0x9a0/0x9a0 [ 373.443708] ? kasan_check_write+0x14/0x20 [ 373.447963] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 373.452900] ? wait_for_completion+0x870/0x870 [ 373.457485] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 373.462672] ? loop_add+0x9c0/0x9c0 [ 373.466302] do_vfs_ioctl+0x1cf/0x16a0 [ 373.470199] ? ioctl_preallocate+0x2e0/0x2e0 [ 373.474616] ? fget_raw+0x20/0x20 [ 373.478073] ? __sb_end_write+0xac/0xe0 [ 373.482054] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 373.487596] ? fput+0x130/0x1a0 [ 373.490877] ? ksys_write+0x1a6/0x250 [ 373.494680] ? security_file_ioctl+0x94/0xc0 [ 373.499097] ksys_ioctl+0xa9/0xd0 [ 373.502569] __x64_sys_ioctl+0x73/0xb0 [ 373.506476] do_syscall_64+0x1b1/0x800 [ 373.510936] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 373.515787] ? syscall_return_slowpath+0x5c0/0x5c0 [ 373.520720] ? syscall_return_slowpath+0x30f/0x5c0 [ 373.525664] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 373.531039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.535897] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.541780] RIP: 0033:0x455a09 [ 373.544966] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.552676] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 373.559944] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 373.567216] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/21 21:43:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000f0ffff000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000002000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x2) [ 373.574483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 373.581757] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000028 2018/05/21 21:43:06 executing program 7: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000140)=0x3, 0x4) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r0}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000180)=""/69) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/236, &(0x7f0000000040)=0xec) 2018/05/21 21:43:06 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000040)}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/93, 0x5d}], 0x4, 0x0) 2018/05/21 21:43:06 executing program 0 (fault-call:5 fault-nth:41): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:06 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xfffff000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe809effffff000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 373.776880] FAULT_INJECTION: forcing a failure. [ 373.776880] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 373.788724] CPU: 0 PID: 23508 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 373.795980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.805316] Call Trace: [ 373.807900] dump_stack+0x1b9/0x294 [ 373.811512] ? dump_stack_print_info.cold.2+0x52/0x52 [ 373.816686] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 373.821869] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 373.827045] should_fail.cold.4+0xa/0x1a [ 373.831090] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 373.836176] ? __kernel_text_address+0xd/0x40 [ 373.840654] ? unwind_get_return_address+0x61/0xa0 [ 373.845572] ? save_stack+0xa9/0xd0 [ 373.849181] ? save_stack+0x43/0xd0 [ 373.852787] ? kasan_kmalloc+0xc4/0xe0 [ 373.856664] ? kmem_cache_alloc_node_trace+0x150/0x770 [ 373.861924] ? sbitmap_queue_init_node+0x3bd/0x7d0 [ 373.866839] ? blk_mq_init_tags+0x17c/0x2b0 [ 373.871145] ? blk_mq_alloc_rq_map+0x9f/0x220 [ 373.875631] ? blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 373.881153] ? blk_mq_init_sched+0x1e2/0x530 [ 373.885548] ? elevator_init+0x3c8/0x500 [ 373.889614] ? print_usage_bug+0xc0/0xc0 [ 373.893676] ? loop_control_ioctl+0x178/0x500 [ 373.898173] ? do_vfs_ioctl+0x1cf/0x16a0 [ 373.902216] ? ksys_ioctl+0xa9/0xd0 [ 373.905832] ? __x64_sys_ioctl+0x73/0xb0 [ 373.909885] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.915233] ? find_held_lock+0x36/0x1c0 [ 373.919279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.924800] ? should_fail+0x21b/0xbcd [ 373.928677] __alloc_pages_nodemask+0x34e/0xd70 [ 373.933330] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 373.938345] ? __raw_spin_lock_init+0x1c/0x100 [ 373.942908] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 373.947908] ? __lockdep_init_map+0x105/0x590 [ 373.952385] ? __lock_is_held+0xb5/0x140 [ 373.956427] ? __init_waitqueue_head+0x96/0x140 [ 373.961082] ? check_same_owner+0x320/0x320 [ 373.965391] ? sbitmap_queue_init_node+0xc6/0x7d0 [ 373.970216] cache_grow_begin+0x72/0x6c0 [ 373.974262] kmem_cache_alloc_node_trace+0x692/0x770 [ 373.979343] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 373.984864] __kmalloc_node+0x33/0x70 [ 373.988657] blk_mq_alloc_rq_map+0xcc/0x220 [ 373.992962] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 373.998307] blk_mq_init_sched+0x1e2/0x530 [ 374.002529] elevator_init+0x3c8/0x500 [ 374.006394] ? elevator_get+0x180/0x180 [ 374.010359] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 374.015355] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 374.019836] blk_mq_sched_init+0x2b/0x40 [ 374.023887] blk_mq_init_allocated_queue+0xf19/0x1580 [ 374.029059] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 374.033534] ? __mutex_init+0x1ef/0x280 [ 374.037499] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.043020] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 374.047760] ? idr_alloc+0x145/0x1a0 [ 374.051460] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 374.056635] blk_mq_init_queue+0x63/0xb0 [ 374.060679] loop_add+0x32b/0x9c0 [ 374.064113] ? loop_lookup+0x102/0x220 [ 374.067979] ? loop_queue_rq+0x640/0x640 [ 374.072027] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 374.077202] loop_control_ioctl+0x178/0x500 [ 374.081503] ? loop_add+0x9c0/0x9c0 [ 374.085110] ? expand_files.part.8+0x9a0/0x9a0 [ 374.089676] ? kasan_check_write+0x14/0x20 [ 374.093900] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 374.098814] ? wait_for_completion+0x870/0x870 [ 374.103380] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 374.108548] ? loop_add+0x9c0/0x9c0 [ 374.112156] do_vfs_ioctl+0x1cf/0x16a0 [ 374.116030] ? ioctl_preallocate+0x2e0/0x2e0 [ 374.120419] ? fget_raw+0x20/0x20 [ 374.123860] ? __sb_end_write+0xac/0xe0 [ 374.127821] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 374.133336] ? fput+0x130/0x1a0 [ 374.136604] ? ksys_write+0x1a6/0x250 [ 374.140403] ? security_file_ioctl+0x94/0xc0 [ 374.144794] ksys_ioctl+0xa9/0xd0 [ 374.148235] __x64_sys_ioctl+0x73/0xb0 [ 374.152105] do_syscall_64+0x1b1/0x800 [ 374.155981] ? finish_task_switch+0x1ca/0x840 [ 374.160465] ? syscall_return_slowpath+0x5c0/0x5c0 [ 374.165375] ? syscall_return_slowpath+0x30f/0x5c0 [ 374.170289] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 374.175636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.180460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.185630] RIP: 0033:0x455a09 [ 374.188806] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.196500] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 374.203748] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 374.210999] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 374.218251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 374.225504] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000029 2018/05/21 21:43:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0xffffff7f00000000) 2018/05/21 21:43:06 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x87d, 0x4, 0x24000000000000}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) prctl$seccomp(0x16, 0x2, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{0x100000000, 0x10000, 0x6, 0xc90b}, {0x8, 0x1f, 0x6, 0x5e}, {0x0, 0x4, 0x80000001, 0x3f}, {0x99, 0x7563822800000, 0xd6}, {0x0, 0x4, 0x3}]}) personality(0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x98) fcntl$getflags(r0, 0x401) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000001c0)=""/198) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:06 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000000000000020000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:06 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000100)={r2, r3/1000+30000}, 0x10) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:06 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0xbd15, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0xffffffffffffff21) 2018/05/21 21:43:06 executing program 0 (fault-call:5 fault-nth:42): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:06 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x88caffff, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x900000000000000) 2018/05/21 21:43:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000000fffffff00000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:07 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x88a8ffff, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:07 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x200, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0x7530}, 0x8b) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x5, 0x4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000100)={0x5, 0x9}) [ 374.374547] FAULT_INJECTION: forcing a failure. [ 374.374547] name failslab, interval 1, probability 0, space 0, times 0 [ 374.385866] CPU: 1 PID: 23527 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 374.393149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.402507] Call Trace: [ 374.405111] dump_stack+0x1b9/0x294 [ 374.408752] ? dump_stack_print_info.cold.2+0x52/0x52 [ 374.413951] ? find_next_zero_bit+0x111/0x140 [ 374.418463] should_fail.cold.4+0xa/0x1a [ 374.422544] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 374.427658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.433197] ? graph_lock+0x170/0x170 [ 374.437010] ? find_held_lock+0x36/0x1c0 [ 374.441078] ? __lock_is_held+0xb5/0x140 [ 374.445153] ? check_same_owner+0x320/0x320 [ 374.449476] ? __kmalloc_node+0x33/0x70 [ 374.453456] ? rcu_note_context_switch+0x710/0x710 [ 374.458389] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 374.463676] __should_failslab+0x124/0x180 [ 374.467919] should_failslab+0x9/0x14 2018/05/21 21:43:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) setsockopt$packet_int(r2, 0x107, 0xd, &(0x7f0000000000)=0x1, 0x4) [ 374.471722] kmem_cache_alloc_node_trace+0x26f/0x770 [ 374.476824] ? __kmalloc_node+0x47/0x70 [ 374.480800] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 374.485820] ? find_next_bit+0x104/0x130 [ 374.489897] sbitmap_queue_init_node+0x3bd/0x7d0 [ 374.494663] ? mirror_flush+0x630/0x630 [ 374.498658] ? sbitmap_init_node+0x460/0x460 [ 374.503082] ? rcu_read_lock_sched_held+0x108/0x120 [ 374.508113] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 374.513400] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.518946] ? find_next_bit+0x104/0x130 [ 374.523016] blk_mq_init_tags+0x11b/0x2b0 [ 374.527170] blk_mq_alloc_rq_map+0x9f/0x220 [ 374.531506] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 374.536880] blk_mq_init_sched+0x1e2/0x530 [ 374.541128] elevator_init+0x3c8/0x500 [ 374.545017] ? elevator_get+0x180/0x180 [ 374.548993] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 374.554012] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 374.558519] blk_mq_sched_init+0x2b/0x40 [ 374.562584] blk_mq_init_allocated_queue+0xf19/0x1580 [ 374.567780] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 374.572284] ? __mutex_init+0x1ef/0x280 [ 374.576283] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.581819] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 374.586582] ? idr_alloc+0x145/0x1a0 [ 374.590299] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 374.595492] blk_mq_init_queue+0x63/0xb0 [ 374.599555] loop_add+0x32b/0x9c0 [ 374.603012] ? loop_lookup+0x102/0x220 [ 374.606897] ? loop_queue_rq+0x640/0x640 [ 374.610967] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 374.616159] loop_control_ioctl+0x178/0x500 [ 374.620481] ? loop_add+0x9c0/0x9c0 [ 374.624110] ? expand_files.part.8+0x9a0/0x9a0 [ 374.628693] ? kasan_check_write+0x14/0x20 [ 374.632928] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 374.637879] ? wait_for_completion+0x870/0x870 [ 374.642463] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 374.647651] ? loop_add+0x9c0/0x9c0 [ 374.651282] do_vfs_ioctl+0x1cf/0x16a0 [ 374.655177] ? ioctl_preallocate+0x2e0/0x2e0 [ 374.659587] ? fget_raw+0x20/0x20 [ 374.663043] ? __sb_end_write+0xac/0xe0 [ 374.667025] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 374.672562] ? fput+0x130/0x1a0 [ 374.675838] ? ksys_write+0x1a6/0x250 [ 374.679644] ? security_file_ioctl+0x94/0xc0 [ 374.684056] ksys_ioctl+0xa9/0xd0 [ 374.687513] __x64_sys_ioctl+0x73/0xb0 [ 374.691402] do_syscall_64+0x1b1/0x800 [ 374.695289] ? finish_task_switch+0x1ca/0x840 [ 374.699790] ? syscall_return_slowpath+0x5c0/0x5c0 [ 374.704722] ? syscall_return_slowpath+0x30f/0x5c0 [ 374.709657] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 374.715027] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.719873] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/05/21 21:43:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe80fffffffffffff0000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x40030000000000) [ 374.725057] RIP: 0033:0x455a09 [ 374.728242] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.736478] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 374.743746] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 374.751022] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 374.758289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 374.765559] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002a 2018/05/21 21:43:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe807fffffff000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:07 executing program 0 (fault-call:5 fault-nth:43): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:07 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x100000000, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)=@ioapic={0x4, 0x1, 0x101, 0x2061, 0x0, [{0x7, 0xff, 0x100000001, [], 0xfffffffffffffe01}, {0x3ff, 0x7fff, 0x6, [], 0x7fffffff}, {0x8, 0x7, 0x2, [], 0x400000000000}, {0x80000000, 0x4e7, 0x6, [], 0x7}, {0x7ff, 0x401, 0x100, [], 0x2}, {0x200, 0x2, 0x3, [], 0x8}, {0x80, 0x7, 0xef1, [], 0x3460}, {0x1, 0x8, 0x684, [], 0x1}, {0x5, 0x64a, 0x3de1, [], 0xb5f}, {0x1, 0x585, 0x8, [], 0xa6a5}, {0x0, 0x2, 0x40, [], 0x1}, {0x9, 0x614c, 0xfffffffffffffffb, [], 0x8}, {0x3, 0x3f, 0x1, [], 0x6}, {0x1175c000000000, 0x5, 0xde}, {0x2, 0x4, 0x10000, [], 0x8f6}, {0x5, 0x0, 0x9, [], 0xb8}, {0x4, 0xffffffff, 0x2, [], 0x3f}, {0x6, 0x6076, 0x307b, [], 0x9}, {0x9, 0x5, 0x90000000000000, [], 0x7}, {0x0, 0x6, 0x3c42, [], 0x4}, {0x9cf, 0xff, 0x3, [], 0x6}, {0x100, 0x2, 0xe005, [], 0x7e9}, {0x2, 0xffffffff, 0x80000001, [], 0x240000000000}, {0x9, 0x9, 0x8, [], 0xf0c6}]}) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000280)={0x6, 0x6, 0x8, 'queue1\x00', 0x800}) [ 374.912254] Unknown ioctl -2113360285 [ 374.928446] Unknown ioctl 19586 [ 374.961741] Unknown ioctl -1064545483 [ 374.965824] FAULT_INJECTION: forcing a failure. [ 374.965824] name failslab, interval 1, probability 0, space 0, times 0 [ 374.977108] CPU: 0 PID: 23551 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 374.984387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.993738] Call Trace: [ 374.996337] dump_stack+0x1b9/0x294 [ 374.999977] ? dump_stack_print_info.cold.2+0x52/0x52 [ 375.001882] Unknown ioctl -2113360285 [ 375.005187] ? do_vfs_ioctl+0x1cf/0x16a0 [ 375.013056] ? ksys_ioctl+0xa9/0xd0 [ 375.016683] ? __x64_sys_ioctl+0x73/0xb0 [ 375.017317] Unknown ioctl 19586 [ 375.020748] ? do_syscall_64+0x1b1/0x800 [ 375.020773] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.033437] should_fail.cold.4+0xa/0x1a [ 375.037506] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 375.042608] ? mark_held_locks+0xc9/0x160 [ 375.044317] Unknown ioctl -1064545483 [ 375.046749] ? graph_lock+0x170/0x170 [ 375.046773] ? __raw_spin_lock_init+0x1c/0x100 [ 375.058904] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 375.063936] ? __lockdep_init_map+0x105/0x590 [ 375.068434] ? __lockdep_init_map+0x105/0x590 [ 375.072935] ? __lock_is_held+0xb5/0x140 [ 375.076993] ? __init_waitqueue_head+0x96/0x140 [ 375.081674] ? check_same_owner+0x320/0x320 [ 375.085997] ? sbitmap_queue_init_node+0xc6/0x7d0 [ 375.090837] ? amdgpu_atombios_dp_get_sinktype+0x160/0x290 [ 375.096464] ? rcu_note_context_switch+0x710/0x710 [ 375.101395] __should_failslab+0x124/0x180 [ 375.105636] should_failslab+0x9/0x14 [ 375.109455] kmem_cache_alloc_node_trace+0x26f/0x770 [ 375.114559] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.120097] ? find_next_bit+0x104/0x130 [ 375.124182] __kmalloc_node+0x33/0x70 [ 375.127982] blk_mq_alloc_rq_map+0xcc/0x220 [ 375.132310] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 375.137677] blk_mq_init_sched+0x1e2/0x530 [ 375.141919] elevator_init+0x3c8/0x500 [ 375.145808] ? elevator_get+0x180/0x180 [ 375.149800] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 375.154816] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 375.159320] blk_mq_sched_init+0x2b/0x40 [ 375.163387] blk_mq_init_allocated_queue+0xf19/0x1580 [ 375.168581] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 375.173077] ? __mutex_init+0x1ef/0x280 [ 375.177069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.182602] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 375.187364] ? idr_alloc+0x145/0x1a0 [ 375.191079] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 375.196274] blk_mq_init_queue+0x63/0xb0 [ 375.200334] loop_add+0x32b/0x9c0 [ 375.203788] ? loop_lookup+0x102/0x220 [ 375.207686] ? loop_queue_rq+0x640/0x640 [ 375.211762] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 375.216949] loop_control_ioctl+0x178/0x500 [ 375.221270] ? loop_add+0x9c0/0x9c0 [ 375.224898] ? expand_files.part.8+0x9a0/0x9a0 [ 375.229483] ? kasan_check_write+0x14/0x20 [ 375.233719] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 375.238650] ? wait_for_completion+0x870/0x870 [ 375.243236] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 375.248425] ? loop_add+0x9c0/0x9c0 [ 375.252062] do_vfs_ioctl+0x1cf/0x16a0 [ 375.255954] ? ioctl_preallocate+0x2e0/0x2e0 [ 375.260362] ? fget_raw+0x20/0x20 [ 375.263814] ? __sb_end_write+0xac/0xe0 [ 375.267793] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 375.273337] ? fput+0x130/0x1a0 [ 375.276614] ? ksys_write+0x1a6/0x250 [ 375.280425] ? security_file_ioctl+0x94/0xc0 [ 375.284838] ksys_ioctl+0xa9/0xd0 [ 375.288295] __x64_sys_ioctl+0x73/0xb0 [ 375.292186] do_syscall_64+0x1b1/0x800 [ 375.296070] ? finish_task_switch+0x1ca/0x840 [ 375.300565] ? syscall_return_slowpath+0x5c0/0x5c0 [ 375.305494] ? syscall_return_slowpath+0x30f/0x5c0 [ 375.310427] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 375.316486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.321331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.326515] RIP: 0033:0x455a09 [ 375.329716] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.337424] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 375.344688] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 375.351959] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/21 21:43:08 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x43050000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:08 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:08 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200002, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0x7530}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) eventfd(0x10000) 2018/05/21 21:43:08 executing program 0 (fault-call:5 fault-nth:44): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x21, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x9) 2018/05/21 21:43:08 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x3, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="4c0000003819ca16d3174a0a62ab3fcb2886f4766115d437069dc20aa8d911b304d3870a9aa0779bf2c4329ef4d440d07dfd4ac652f3de4153a4e90fae355dad011b4dbd84062e3691ed3cda8be3ec80e54882b8fff46e015a7b45822de703ec12f8654f8d02bce858"], &(0x7f0000000100)=0x54) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r2, 0x2}, &(0x7f0000000240)=0xc) pipe(&(0x7f00000002c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000f0ffffffffffff0000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 375.359223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 375.366491] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002b [ 375.478850] FAULT_INJECTION: forcing a failure. [ 375.478850] name failslab, interval 1, probability 0, space 0, times 0 [ 375.490184] CPU: 1 PID: 23568 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 375.497459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.506814] Call Trace: [ 375.509915] dump_stack+0x1b9/0x294 [ 375.513562] ? dump_stack_print_info.cold.2+0x52/0x52 [ 375.518768] ? is_bpf_text_address+0xd7/0x170 [ 375.523280] should_fail.cold.4+0xa/0x1a [ 375.527359] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 375.532478] ? graph_lock+0x170/0x170 [ 375.536288] ? save_stack+0xa9/0xd0 [ 375.539918] ? save_stack+0x43/0xd0 [ 375.543550] ? kasan_kmalloc+0xc4/0xe0 [ 375.547454] ? __kmalloc_node+0x47/0x70 [ 375.551431] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 375.555928] ? blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 375.561477] ? blk_mq_init_sched+0x1e2/0x530 [ 375.565892] ? elevator_init+0x3c8/0x500 [ 375.569962] ? blk_mq_sched_init+0x2b/0x40 [ 375.574217] ? blk_mq_init_allocated_queue+0xf19/0x1580 2018/05/21 21:43:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x687, 0x8, 0x80000000, 0x5}, {0xff, 0x0, 0x5, 0x8}, {0x3fe0ad7b, 0x3, 0x2, 0x9}, {0x7, 0x8, 0xc21b, 0x594e}, {0x0, 0xe41d, 0x40, 0x7}, {0x6, 0x4, 0xffffffff, 0xfffffffffffffffd}, {0x3, 0x4, 0x9998, 0x9}]}, 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8002000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:08 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xd000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000000000000010000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 375.579589] ? __lock_is_held+0xb5/0x140 [ 375.583663] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.589053] ? check_same_owner+0x320/0x320 [ 375.593391] ? rcu_note_context_switch+0x710/0x710 [ 375.598337] __should_failslab+0x124/0x180 [ 375.602578] should_failslab+0x9/0x14 [ 375.606387] kmem_cache_alloc_node_trace+0x26f/0x770 [ 375.611503] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.617053] ? kasan_unpoison_shadow+0x35/0x50 [ 375.621649] __kmalloc_node+0x33/0x70 [ 375.625459] blk_mq_alloc_rq_map+0x10d/0x220 [ 375.629875] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 375.635252] blk_mq_init_sched+0x1e2/0x530 [ 375.639506] elevator_init+0x3c8/0x500 [ 375.643397] ? elevator_get+0x180/0x180 [ 375.647376] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 375.652395] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 375.656898] blk_mq_sched_init+0x2b/0x40 [ 375.660965] blk_mq_init_allocated_queue+0xf19/0x1580 [ 375.666162] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 375.670665] ? __mutex_init+0x1ef/0x280 [ 375.674676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.680217] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 375.684983] ? idr_alloc+0x145/0x1a0 [ 375.688701] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 375.693897] blk_mq_init_queue+0x63/0xb0 [ 375.697964] loop_add+0x32b/0x9c0 [ 375.701420] ? loop_lookup+0x102/0x220 [ 375.705307] ? loop_queue_rq+0x640/0x640 [ 375.709379] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 375.714575] loop_control_ioctl+0x178/0x500 [ 375.718896] ? loop_add+0x9c0/0x9c0 [ 375.722523] ? expand_files.part.8+0x9a0/0x9a0 2018/05/21 21:43:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000292000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 375.727107] ? kasan_check_write+0x14/0x20 [ 375.731344] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 375.736286] ? wait_for_completion+0x870/0x870 [ 375.740872] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 375.746060] ? loop_add+0x9c0/0x9c0 [ 375.749693] do_vfs_ioctl+0x1cf/0x16a0 [ 375.753590] ? ioctl_preallocate+0x2e0/0x2e0 [ 375.758010] ? fget_raw+0x20/0x20 [ 375.761474] ? __sb_end_write+0xac/0xe0 [ 375.765462] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 375.771002] ? fput+0x130/0x1a0 [ 375.774283] ? ksys_write+0x1a6/0x250 [ 375.778095] ? security_file_ioctl+0x94/0xc0 [ 375.782520] ksys_ioctl+0xa9/0xd0 [ 375.785986] __x64_sys_ioctl+0x73/0xb0 [ 375.789884] do_syscall_64+0x1b1/0x800 [ 375.793778] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 375.798633] ? syscall_return_slowpath+0x5c0/0x5c0 [ 375.803568] ? syscall_return_slowpath+0x30f/0x5c0 [ 375.808507] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 375.813877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.818728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.823913] RIP: 0033:0x455a09 2018/05/21 21:43:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe800000000000fffffff000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x400000000000000) 2018/05/21 21:43:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000000020000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 375.827096] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.834808] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 375.842075] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 375.849350] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 375.856622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 375.863896] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002c 2018/05/21 21:43:08 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x2841827f]}, 0x6) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x14, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) sendto$unix(r2, &(0x7f0000000180)="6ae8513667bf74bda1068aa94e70fd41c7c50accf62935fe632af4243e22353d8d54ab51cc3dd99062a08e5ade82cf3b8ca54d04f70eaf2dc6347fdca96d8fc60bebd6ef946a31e72b5d4d0afcee660ec66f159d00ca539a713da8ad0a7f0993c11ac194c0a44b6d7635fec6bb1d6488280dc951fe831dd346b0b1c61eab606ad862eda8c54a677c4ce83b771967f99ab63a28563d9537d6081d5e28eae9b9ffa470", 0xa2, 0x1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:08 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x4000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:08 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x4000000) 2018/05/21 21:43:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000fffffff00000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:08 executing program 7: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$KDSETLED(r0, 0x4b32, 0x101) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000040)={0x6, 0x5}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:43:08 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001180)={r1, r1, 0x2, 0x6, &(0x7f0000000180)="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", 0x7ff, 0x7, 0x1, 0xd82d, 0x4, 0x1f, 0x7ff, "0e17d6817d4710b3488f89a933c7d4113cc6c8cf158a59da715f244a9cd07acf395a5d3bfeb9f9ffdabb7371318d5b5f0adf2197cf74c5ca8257093b6312d37bbb2cc609374eeadf4e5eec831b6df6c5a55d1a6a6d45dea849f867ec92184311239efb6cb446caac323d9d6bea50efb0ade0f2fbd935ecd9b17c3867922de09e3f6c9733a9bb0e036d2aca417d19c0f94a7f7eb53be7cd7e4993683eb33660b657410fcecc4ca0c8ee6ca88f3f16b9e0e8919fa4b0723431c35b98279be00c4f492a3c8ad8"}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:08 executing program 0 (fault-call:5 fault-nth:45): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 376.160326] FAULT_INJECTION: forcing a failure. [ 376.160326] name failslab, interval 1, probability 0, space 0, times 0 [ 376.171733] CPU: 0 PID: 23607 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 376.179013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.188366] Call Trace: [ 376.190970] dump_stack+0x1b9/0x294 [ 376.194617] ? dump_stack_print_info.cold.2+0x52/0x52 [ 376.199823] ? is_bpf_text_address+0xd7/0x170 [ 376.204346] should_fail.cold.4+0xa/0x1a [ 376.208411] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 376.213524] ? graph_lock+0x170/0x170 [ 376.217328] ? save_stack+0xa9/0xd0 [ 376.220957] ? save_stack+0x43/0xd0 [ 376.224670] ? kasan_kmalloc+0xc4/0xe0 [ 376.228554] ? __kmalloc_node+0x47/0x70 [ 376.232525] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 376.237020] ? blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 376.242557] ? blk_mq_init_sched+0x1e2/0x530 [ 376.246967] ? elevator_init+0x3c8/0x500 [ 376.251031] ? blk_mq_sched_init+0x2b/0x40 [ 376.255268] ? blk_mq_init_allocated_queue+0xf19/0x1580 [ 376.260637] ? __lock_is_held+0xb5/0x140 [ 376.264700] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.270079] ? check_same_owner+0x320/0x320 [ 376.274403] ? rcu_note_context_switch+0x710/0x710 [ 376.279345] __should_failslab+0x124/0x180 [ 376.283588] should_failslab+0x9/0x14 [ 376.287393] kmem_cache_alloc_node_trace+0x26f/0x770 [ 376.292498] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.298034] ? kasan_unpoison_shadow+0x35/0x50 [ 376.302625] __kmalloc_node+0x33/0x70 [ 376.306427] blk_mq_alloc_rq_map+0x10d/0x220 [ 376.310841] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 376.316206] blk_mq_init_sched+0x1e2/0x530 [ 376.320453] elevator_init+0x3c8/0x500 [ 376.324344] ? elevator_get+0x180/0x180 [ 376.328319] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 376.333338] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 376.337839] blk_mq_sched_init+0x2b/0x40 [ 376.341903] blk_mq_init_allocated_queue+0xf19/0x1580 [ 376.347098] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 376.351595] ? __mutex_init+0x1ef/0x280 [ 376.355593] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.361133] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 376.365897] ? idr_alloc+0x145/0x1a0 [ 376.369623] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 376.374824] blk_mq_init_queue+0x63/0xb0 [ 376.378884] loop_add+0x32b/0x9c0 [ 376.382337] ? loop_lookup+0x102/0x220 [ 376.386229] ? loop_queue_rq+0x640/0x640 [ 376.390312] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 376.395515] loop_control_ioctl+0x178/0x500 [ 376.399836] ? loop_add+0x9c0/0x9c0 [ 376.403469] ? expand_files.part.8+0x9a0/0x9a0 [ 376.408053] ? kasan_check_write+0x14/0x20 [ 376.412288] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 376.417220] ? wait_for_completion+0x870/0x870 [ 376.421804] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 376.426994] ? loop_add+0x9c0/0x9c0 [ 376.430630] do_vfs_ioctl+0x1cf/0x16a0 [ 376.434524] ? ioctl_preallocate+0x2e0/0x2e0 [ 376.438933] ? fget_raw+0x20/0x20 [ 376.442386] ? __sb_end_write+0xac/0xe0 [ 376.446366] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 376.451901] ? fput+0x130/0x1a0 [ 376.455182] ? ksys_write+0x1a6/0x250 [ 376.458985] ? security_file_ioctl+0x94/0xc0 [ 376.463399] ksys_ioctl+0xa9/0xd0 [ 376.466856] __x64_sys_ioctl+0x73/0xb0 [ 376.470744] do_syscall_64+0x1b1/0x800 [ 376.474635] ? syscall_return_slowpath+0x5c0/0x5c0 [ 376.479566] ? syscall_return_slowpath+0x30f/0x5c0 [ 376.484502] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 376.489872] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.494722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.499907] RIP: 0033:0x455a09 [ 376.503092] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/05/21 21:43:09 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x8848, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x900) 2018/05/21 21:43:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000fffff0000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x4000, 0x0) r2 = semget(0x3, 0x3, 0x0) semctl$SETVAL(r2, 0x16da0ca6b1fef92f, 0x10, &(0x7f0000000000)=0x401) close(r0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) [ 376.510800] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 376.518068] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 376.525336] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 376.532606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 376.539875] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002d 2018/05/21 21:43:09 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x4000, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:43:09 executing program 0 (fault-call:5 fault-nth:46): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:09 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000000000, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @broadcast=0xffffffff}}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/215, 0xd7}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f00000003c0)=""/31, 0x1f}], 0x4, &(0x7f0000000440)=""/174, 0xae, 0x200}, 0x9}], 0x1, 0x0, &(0x7f0000000580)={r2, r3+10000000}) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7fff, 0x4) socket$alg(0x26, 0x5, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe80009effffff0000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:09 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xd00000000000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x4) 2018/05/21 21:43:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)={'syz1', "f4ae7b363abc9652cb91d38c55901158a9f79b08f2ffecfc8f60169a7d01d96b2bd940616a60e05a500fe3ecca86f518e7836dd89e4e31841860b8a4c486e368b823e89ec8491a7e2af7be132a4996962bd4fa34f8554a7d75ce09eb336709374d5aeb99748af4621129b9582190f0216776ba02411a5b9ac2b885a3bcff6d9007dc3661ce644db25f35500ca4c514d3fee0b995bff2d0ae5c55b84b05b1395ab6ce34eca4287a4c3629d9d89c7acf2a37c4fe27a460fcc1d53f46d8f097ee"}, 0xc3) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:09 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) r0 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(0xffffffffffffffff, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:09 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) sendto$ipx(r1, &(0x7f0000000180)="7093c71d1063495902a3be021ce78c1c26e41e93166fadddd5a541823a9ccfb6c7c52458213da07c55a09f580a029a3fcaa51d7884a35ac444ab899b9922fe710e6c708f0ae51ae53129bc394af56a9f1986c74a0afd5f4faf2baa30fce371d3f19eadb2191e1787f7ca744425263c5cd8f96dc4f47492c510cd8182865779055e5b24016858c7678dbedba5a9ca63b00ca006e1adbcd67da1c5b409ccfdfeb9c081e76a52f68415bc3183ee171ca271081a265ca2deb0cda063114dbe7e24eaa1819795b3c5fb6de580d32a7ce982a3c6764d01a9b5da8d96626037d8", 0xdd, 0x8000, &(0x7f0000000280)={0x4, 0x2, 0x400, "815b2792816a", 0xfffffffffffffffc}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000002c0)={0x58d0939e, 0x3ff, 0x7fffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000100)={0x7, &(0x7f0000000040)=[0x3, 0x2, 0x5, 0xfe8, 0xff, 0x5, 0x100000000]}) 2018/05/21 21:43:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000000)={0x515, 0xe0f1, 0x1f}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) [ 377.306338] FAULT_INJECTION: forcing a failure. [ 377.306338] name failslab, interval 1, probability 0, space 0, times 0 [ 377.317670] CPU: 1 PID: 23641 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 377.324952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.334312] Call Trace: [ 377.336922] dump_stack+0x1b9/0x294 [ 377.340567] ? dump_stack_print_info.cold.2+0x52/0x52 [ 377.345775] ? do_vfs_ioctl+0x1cf/0x16a0 [ 377.349852] ? ksys_ioctl+0xa9/0xd0 2018/05/21 21:43:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000ffffff9e0000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 377.353497] ? __x64_sys_ioctl+0x73/0xb0 [ 377.357566] ? do_syscall_64+0x1b1/0x800 [ 377.361633] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.367004] should_fail.cold.4+0xa/0x1a [ 377.371076] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 377.376206] ? mark_held_locks+0xc9/0x160 [ 377.380354] ? graph_lock+0x170/0x170 [ 377.384155] ? __raw_spin_lock_init+0x1c/0x100 [ 377.388751] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 377.393778] ? __lockdep_init_map+0x105/0x590 [ 377.398283] ? __lockdep_init_map+0x105/0x590 [ 377.402790] ? __lock_is_held+0xb5/0x140 [ 377.406858] ? __init_waitqueue_head+0x96/0x140 [ 377.411550] ? check_same_owner+0x320/0x320 [ 377.415882] ? sbitmap_queue_init_node+0xc6/0x7d0 [ 377.420731] ? rcu_note_context_switch+0x710/0x710 [ 377.425666] __should_failslab+0x124/0x180 [ 377.429909] should_failslab+0x9/0x14 [ 377.433723] kmem_cache_alloc_node_trace+0x26f/0x770 [ 377.438861] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 377.444405] ? find_next_bit+0x104/0x130 [ 377.448476] __kmalloc_node+0x33/0x70 [ 377.452295] blk_mq_alloc_rq_map+0xcc/0x220 [ 377.456627] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 377.461996] blk_mq_init_sched+0x1e2/0x530 [ 377.466246] elevator_init+0x3c8/0x500 [ 377.470139] ? elevator_get+0x180/0x180 [ 377.474120] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 377.479139] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 377.483643] blk_mq_sched_init+0x2b/0x40 [ 377.487712] blk_mq_init_allocated_queue+0xf19/0x1580 [ 377.492918] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 377.497415] ? __mutex_init+0x1ef/0x280 [ 377.501416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.506953] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 377.512329] ? idr_alloc+0x145/0x1a0 [ 377.516049] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 377.521248] blk_mq_init_queue+0x63/0xb0 [ 377.525316] loop_add+0x32b/0x9c0 [ 377.528771] ? loop_lookup+0x102/0x220 [ 377.532662] ? loop_queue_rq+0x640/0x640 [ 377.536733] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 377.541926] loop_control_ioctl+0x178/0x500 [ 377.546248] ? loop_add+0x9c0/0x9c0 [ 377.549876] ? expand_files.part.8+0x9a0/0x9a0 [ 377.554460] ? kasan_check_write+0x14/0x20 [ 377.558698] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 377.563631] ? wait_for_completion+0x870/0x870 [ 377.568228] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 377.573418] ? loop_add+0x9c0/0x9c0 [ 377.577049] do_vfs_ioctl+0x1cf/0x16a0 [ 377.580954] ? ioctl_preallocate+0x2e0/0x2e0 [ 377.585369] ? fget_raw+0x20/0x20 [ 377.588830] ? __sb_end_write+0xac/0xe0 [ 377.592810] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 377.598345] ? fput+0x130/0x1a0 [ 377.601624] ? ksys_write+0x1a6/0x250 [ 377.605430] ? security_file_ioctl+0x94/0xc0 [ 377.609842] ksys_ioctl+0xa9/0xd0 [ 377.613303] __x64_sys_ioctl+0x73/0xb0 [ 377.617201] do_syscall_64+0x1b1/0x800 [ 377.621092] ? finish_task_switch+0x1ca/0x840 [ 377.625591] ? syscall_return_slowpath+0x5c0/0x5c0 [ 377.630523] ? syscall_return_slowpath+0x30f/0x5c0 [ 377.635464] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 377.640836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 377.645688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.650874] RIP: 0033:0x455a09 2018/05/21 21:43:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x200000000000000) 2018/05/21 21:43:10 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x100000000000000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000002920000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 377.654059] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.661769] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 377.669036] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 377.676304] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 377.683570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 377.690836] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002e 2018/05/21 21:43:10 executing program 0 (fault-call:5 fault-nth:47): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:10 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0xfffffffffffffffc, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:43:10 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) [ 377.874345] FAULT_INJECTION: forcing a failure. [ 377.874345] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 377.886257] CPU: 1 PID: 23661 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 377.893530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.902878] Call Trace: [ 377.905462] dump_stack+0x1b9/0x294 [ 377.909093] ? dump_stack_print_info.cold.2+0x52/0x52 [ 377.914286] ? find_held_lock+0x36/0x1c0 [ 377.918353] should_fail.cold.4+0xa/0x1a [ 377.922424] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 377.927529] ? graph_lock+0x170/0x170 [ 377.931428] ? lock_downgrade+0x8e0/0x8e0 [ 377.935590] ? __lock_is_held+0xb5/0x140 [ 377.939665] ? check_same_owner+0x320/0x320 [ 377.943995] ? rcu_note_context_switch+0x710/0x710 [ 377.948931] ? __might_sleep+0x95/0x190 [ 377.952918] __alloc_pages_nodemask+0x34e/0xd70 [ 377.957595] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 377.962613] ? memset+0x31/0x40 [ 377.965892] ? loop_init_request+0x7b/0x170 [ 377.970219] ? loop_info64_from_compat+0x940/0x940 [ 377.975150] ? do_vfs_ioctl+0x1cf/0x16a0 [ 377.979470] ? __x64_sys_ioctl+0x73/0xb0 [ 377.983530] ? do_syscall_64+0x1b1/0x800 [ 377.987592] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.992955] ? __lockdep_init_map+0x105/0x590 [ 377.997453] ? lockdep_init_map+0x9/0x10 [ 378.001513] ? blk_mq_init_request+0x1be/0x240 [ 378.006110] ? loop_info64_from_compat+0x940/0x940 [ 378.011040] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 378.016055] ? blk_mq_hw_queue_to_node+0xd9/0x180 [ 378.020901] blk_mq_alloc_rqs+0x333/0x8b0 [ 378.025052] ? blk_mq_alloc_rq_map+0x220/0x220 [ 378.029636] ? __kmalloc_node+0x47/0x70 [ 378.033615] ? blk_mq_alloc_rq_map+0x142/0x220 [ 378.038193] blk_mq_sched_alloc_tags.isra.13+0xd8/0x160 [ 378.043556] blk_mq_init_sched+0x1e2/0x530 [ 378.047798] elevator_init+0x3c8/0x500 [ 378.051682] ? elevator_get+0x180/0x180 [ 378.055650] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 378.060666] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 378.065165] blk_mq_sched_init+0x2b/0x40 [ 378.069224] blk_mq_init_allocated_queue+0xf19/0x1580 [ 378.074415] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 378.078920] ? __mutex_init+0x1ef/0x280 [ 378.082916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.088456] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 378.093212] ? idr_alloc+0x145/0x1a0 [ 378.096929] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 378.102121] blk_mq_init_queue+0x63/0xb0 [ 378.106178] loop_add+0x32b/0x9c0 [ 378.109632] ? loop_lookup+0x102/0x220 [ 378.113513] ? loop_queue_rq+0x640/0x640 [ 378.117572] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 378.122762] loop_control_ioctl+0x178/0x500 [ 378.127080] ? loop_add+0x9c0/0x9c0 [ 378.130701] ? expand_files.part.8+0x9a0/0x9a0 [ 378.135284] ? kasan_check_write+0x14/0x20 [ 378.139520] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 378.144456] ? wait_for_completion+0x870/0x870 [ 378.149040] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 378.154228] ? loop_add+0x9c0/0x9c0 [ 378.157850] do_vfs_ioctl+0x1cf/0x16a0 [ 378.161749] ? ioctl_preallocate+0x2e0/0x2e0 [ 378.166147] ? fget_raw+0x20/0x20 [ 378.169590] ? __sb_end_write+0xac/0xe0 [ 378.173559] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 378.179089] ? fput+0x130/0x1a0 [ 378.182369] ? ksys_write+0x1a6/0x250 [ 378.186173] ? security_file_ioctl+0x94/0xc0 [ 378.190584] ksys_ioctl+0xa9/0xd0 [ 378.194045] __x64_sys_ioctl+0x73/0xb0 [ 378.197938] do_syscall_64+0x1b1/0x800 [ 378.201835] ? finish_task_switch+0x1ca/0x840 [ 378.206326] ? syscall_return_slowpath+0x5c0/0x5c0 [ 378.211262] ? syscall_return_slowpath+0x30f/0x5c0 [ 378.216198] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 378.221559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 378.226400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.231586] RIP: 0033:0x455a09 [ 378.234774] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.242485] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 378.249753] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 378.257017] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 378.264277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 378.271543] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002f 2018/05/21 21:43:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0xffffff7f) 2018/05/21 21:43:11 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x8035, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:11 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) r0 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(0xffffffffffffffff, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c81, r3) 2018/05/21 21:43:11 executing program 0 (fault-call:5 fault-nth:48): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe800000f000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:11 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) getsockname$ipx(r1, &(0x7f0000000100), &(0x7f0000000180)=0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:11 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x4000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x3, 'bond_slave_0\x00', 0x1}, 0x18) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x8401, 0x0) dup3(r1, r2, 0x80000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r3}) 2018/05/21 21:43:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe800000f0ffff0000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 378.409111] FAULT_INJECTION: forcing a failure. [ 378.409111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 378.420969] CPU: 1 PID: 23682 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 378.428247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.437598] Call Trace: [ 378.440205] dump_stack+0x1b9/0x294 [ 378.443846] ? dump_stack_print_info.cold.2+0x52/0x52 [ 378.449054] should_fail.cold.4+0xa/0x1a [ 378.453132] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/21 21:43:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000920200000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 378.458246] ? graph_lock+0x170/0x170 [ 378.462062] ? debug_check_no_locks_freed+0x310/0x310 [ 378.467268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.472809] ? should_fail+0x21b/0xbcd [ 378.476708] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 378.481824] ? graph_lock+0x170/0x170 [ 378.485640] ? lock_downgrade+0x8e0/0x8e0 [ 378.489805] ? graph_lock+0x170/0x170 [ 378.493616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.499164] ? should_fail+0x21b/0xbcd [ 378.503069] __alloc_pages_nodemask+0x34e/0xd70 2018/05/21 21:43:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000000000000029200000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 378.507754] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 378.512787] ? find_held_lock+0x36/0x1c0 [ 378.516859] ? __lock_is_held+0xb5/0x140 [ 378.520946] ? check_same_owner+0x320/0x320 [ 378.525275] ? loop_info64_from_compat+0x940/0x940 [ 378.530209] ? do_vfs_ioctl+0x1cf/0x16a0 [ 378.534287] cache_grow_begin+0x72/0x6c0 [ 378.538372] kmem_cache_alloc_node_trace+0x692/0x770 [ 378.543502] elevator_alloc+0x82/0x200 [ 378.547402] dd_init_queue+0x97/0x5e0 [ 378.551214] ? dd_exit_queue+0x240/0x240 [ 378.555289] ? __kmalloc_node+0x47/0x70 [ 378.559272] ? blk_mq_alloc_rq_map+0x142/0x220 [ 378.563865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.569413] ? blk_mq_sched_alloc_tags.isra.13+0xee/0x160 [ 378.574967] blk_mq_init_sched+0x27c/0x530 [ 378.579219] elevator_init+0x3c8/0x500 [ 378.583123] ? elevator_get+0x180/0x180 [ 378.587110] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 378.592131] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 378.596637] blk_mq_sched_init+0x2b/0x40 [ 378.600703] blk_mq_init_allocated_queue+0xf19/0x1580 [ 378.605901] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 378.610411] ? __mutex_init+0x1ef/0x280 [ 378.614409] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.619950] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 378.624715] ? idr_alloc+0x145/0x1a0 [ 378.628434] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 378.633631] blk_mq_init_queue+0x63/0xb0 [ 378.637696] loop_add+0x32b/0x9c0 [ 378.641157] ? loop_lookup+0x102/0x220 [ 378.645048] ? loop_queue_rq+0x640/0x640 [ 378.649120] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 378.654312] loop_control_ioctl+0x178/0x500 [ 378.658632] ? loop_add+0x9c0/0x9c0 [ 378.662264] ? expand_files.part.8+0x9a0/0x9a0 [ 378.666850] ? kasan_check_write+0x14/0x20 [ 378.671103] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 378.676038] ? wait_for_completion+0x870/0x870 [ 378.680627] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 378.685819] ? loop_add+0x9c0/0x9c0 [ 378.689452] do_vfs_ioctl+0x1cf/0x16a0 [ 378.693358] ? ioctl_preallocate+0x2e0/0x2e0 [ 378.697768] ? fget_raw+0x20/0x20 [ 378.701226] ? __sb_end_write+0xac/0xe0 [ 378.705216] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 378.710756] ? fput+0x130/0x1a0 [ 378.714045] ? ksys_write+0x1a6/0x250 [ 378.717854] ? security_file_ioctl+0x94/0xc0 [ 378.722269] ksys_ioctl+0xa9/0xd0 [ 378.725734] __x64_sys_ioctl+0x73/0xb0 [ 378.729626] do_syscall_64+0x1b1/0x800 [ 378.733519] ? finish_task_switch+0x1ca/0x840 [ 378.738018] ? syscall_return_slowpath+0x5c0/0x5c0 [ 378.742956] ? syscall_return_slowpath+0x30f/0x5c0 [ 378.747900] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 378.753276] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 378.758129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.763316] RIP: 0033:0x455a09 [ 378.766501] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.774213] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 378.781477] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 378.788746] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 378.796013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 378.803282] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000030 2018/05/21 21:43:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000000007fffffff00000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:11 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x3, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:11 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) r0 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(0xffffffffffffffff, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:11 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0xfffffffffffffffc, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000040)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:43:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x1000000) 2018/05/21 21:43:11 executing program 0 (fault-call:5 fault-nth:49): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:11 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)={0x3}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xec7c, 0x6, 0x0, 0xa, 0x4, 0x1d, "5d1885f6ba080c0a12f02af9a0e2289e19df13fef6290d8f7e7485823ec1536f8c554d87ba34b53c425c0f1509e4f7cedb7e82d8a2c40305639b2f04395e53cd", "8b49ace90e6bbd06f8b020952228f1f12e78ef05d2f71d9f15584f733cb98570c8fef1ad0231a61da3e732519f7bbceca62edb60ad5bd5d36c3fb64f3b1c60fc", "652457cc40b77675e3803068b91ca4a92f1ca4f5d37c56942a639019b0f1b2f9", [0x2, 0xf5e]}) 2018/05/21 21:43:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) pipe(&(0x7f0000000040)) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:11 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:11 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xf0ffffffffffff, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 378.946710] FAULT_INJECTION: forcing a failure. [ 378.946710] name failslab, interval 1, probability 0, space 0, times 0 [ 378.958061] CPU: 1 PID: 23711 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 378.965340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.974695] Call Trace: [ 378.977298] dump_stack+0x1b9/0x294 [ 378.980938] ? dump_stack_print_info.cold.2+0x52/0x52 [ 378.986146] should_fail.cold.4+0xa/0x1a [ 378.990303] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 378.995412] ? lock_downgrade+0x8e0/0x8e0 [ 378.999997] ? unwind_get_return_address+0x61/0xa0 [ 379.004933] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 379.010477] ? graph_lock+0x170/0x170 [ 379.014285] ? find_held_lock+0x36/0x1c0 [ 379.018351] ? __lock_is_held+0xb5/0x140 [ 379.022427] ? check_same_owner+0x320/0x320 [ 379.026760] ? rcu_note_context_switch+0x710/0x710 [ 379.031698] __should_failslab+0x124/0x180 [ 379.035942] should_failslab+0x9/0x14 [ 379.039749] kmem_cache_alloc_node_trace+0x26f/0x770 [ 379.044858] ? lockdep_init_map+0x9/0x10 [ 379.048933] __kmalloc_node+0x33/0x70 [ 379.052738] disk_expand_part_tbl+0x236/0x3c0 [ 379.057233] ? rcu_read_lock_sched_held+0x108/0x120 [ 379.062252] ? blk_free_devt+0x60/0x60 [ 379.066150] __alloc_disk_node+0x16f/0x500 [ 379.070393] ? disk_expand_part_tbl+0x3c0/0x3c0 [ 379.075066] ? trace_hardirqs_on+0xd/0x10 [ 379.079220] ? blk_queue_flag_set+0xf6/0x160 [ 379.083633] loop_add+0x40e/0x9c0 [ 379.087092] ? loop_queue_rq+0x640/0x640 [ 379.091159] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 379.096354] loop_control_ioctl+0x178/0x500 [ 379.100677] ? loop_add+0x9c0/0x9c0 [ 379.104308] ? expand_files.part.8+0x9a0/0x9a0 [ 379.108908] ? kasan_check_write+0x14/0x20 [ 379.113150] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 379.118095] ? wait_for_completion+0x870/0x870 [ 379.122683] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 379.127881] ? loop_add+0x9c0/0x9c0 [ 379.131513] do_vfs_ioctl+0x1cf/0x16a0 [ 379.136627] ? ioctl_preallocate+0x2e0/0x2e0 [ 379.141037] ? fget_raw+0x20/0x20 2018/05/21 21:43:11 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) clock_gettime(0x0, &(0x7f0000000180)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000100)={0x0, 0x7530}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) [ 379.144494] ? __sb_end_write+0xac/0xe0 [ 379.148473] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 379.154008] ? fput+0x130/0x1a0 [ 379.157288] ? ksys_write+0x1a6/0x250 [ 379.161096] ? security_file_ioctl+0x94/0xc0 [ 379.165528] ksys_ioctl+0xa9/0xd0 [ 379.168985] __x64_sys_ioctl+0x73/0xb0 [ 379.172887] do_syscall_64+0x1b1/0x800 [ 379.176784] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 379.181632] ? syscall_return_slowpath+0x5c0/0x5c0 [ 379.186565] ? syscall_return_slowpath+0x30f/0x5c0 [ 379.191502] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe 2018/05/21 21:43:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000fffffffffffff00000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 379.196874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 379.201725] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.206910] RIP: 0033:0x455a09 [ 379.210097] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.217806] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 379.225074] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 379.232342] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 379.239612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2018/05/21 21:43:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x100000000000000) [ 379.246885] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000031 2018/05/21 21:43:11 executing program 0 (fault-call:5 fault-nth:50): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x90, {{0xa, 0x4e21, 0x1453, @dev={0xfe, 0x80, [], 0x12}, 0x451}}, 0x1, 0x1, [{{0xa, 0x4e23, 0xffff, @empty, 0xb0b}}]}, 0x110) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000440)={0x9, {{0x2, 0x4e24, @loopback=0x7f000001}}}, 0x88) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x7, 0x0, [{0x8000000f, 0x3, 0x4, 0x6e6d, 0x6, 0x200, 0x100}, {0x0, 0x200, 0x2, 0x2, 0x7aa, 0x100000001, 0x530}, {0x4000000d, 0x40, 0x0, 0x8001, 0x1, 0x5, 0x2}, {0xf, 0xffffffffffffff8d, 0x0, 0x100, 0x6, 0x3, 0x10001}, {0x6, 0x2, 0x4, 0x7fffffff, 0x7fffffff, 0x9, 0x1}, {0xc0000000, 0x8, 0x1, 0x7, 0x0, 0x9, 0x7f}, {0xc0000004, 0x7, 0x7, 0x0, 0x6, 0x3f, 0x1}]}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r3, 0x8000}, &(0x7f0000000180)=0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:11 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) r2 = semget(0x1, 0x0, 0x200) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) getgroups(0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0x0]) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000380)={{0x0, r3, r4, r5, r6, 0x176477765be3961a, 0xde}, 0xfff, 0x1, 0x3}) 2018/05/21 21:43:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000000000000000100000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:12 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x88640000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:12 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000280)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:43:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x9000000) [ 379.402752] FAULT_INJECTION: forcing a failure. [ 379.402752] name failslab, interval 1, probability 0, space 0, times 0 [ 379.414058] CPU: 1 PID: 23737 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 379.421343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.430699] Call Trace: [ 379.433299] dump_stack+0x1b9/0x294 [ 379.436943] ? dump_stack_print_info.cold.2+0x52/0x52 [ 379.442149] ? kasan_check_write+0x14/0x20 [ 379.446395] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 379.451341] should_fail.cold.4+0xa/0x1a [ 379.455412] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 379.460530] ? graph_lock+0x170/0x170 [ 379.464335] ? elevator_init+0x293/0x500 [ 379.468402] ? find_held_lock+0x36/0x1c0 [ 379.472470] ? __lock_is_held+0xb5/0x140 [ 379.476542] ? check_same_owner+0x320/0x320 [ 379.480864] ? print_usage_bug+0xc0/0xc0 [ 379.484938] ? rcu_note_context_switch+0x710/0x710 [ 379.489878] __should_failslab+0x124/0x180 [ 379.494123] should_failslab+0x9/0x14 [ 379.497927] kmem_cache_alloc_node_trace+0x26f/0x770 [ 379.503049] __alloc_disk_node+0xc1/0x500 [ 379.507202] ? disk_expand_part_tbl+0x3c0/0x3c0 [ 379.512455] ? trace_hardirqs_on+0xd/0x10 [ 379.516610] ? blk_queue_flag_set+0xf6/0x160 [ 379.521023] loop_add+0x40e/0x9c0 [ 379.524477] ? loop_queue_rq+0x640/0x640 [ 379.528546] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 379.533737] loop_control_ioctl+0x178/0x500 [ 379.538057] ? loop_add+0x9c0/0x9c0 [ 379.541686] ? expand_files.part.8+0x9a0/0x9a0 [ 379.546270] ? kasan_check_write+0x14/0x20 [ 379.550511] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 379.555452] ? wait_for_completion+0x870/0x870 [ 379.560050] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 379.565247] ? loop_add+0x9c0/0x9c0 [ 379.568885] do_vfs_ioctl+0x1cf/0x16a0 [ 379.572783] ? ioctl_preallocate+0x2e0/0x2e0 [ 379.577202] ? fget_raw+0x20/0x20 [ 379.580662] ? __sb_end_write+0xac/0xe0 [ 379.584645] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 379.590185] ? fput+0x130/0x1a0 [ 379.593473] ? ksys_write+0x1a6/0x250 [ 379.597283] ? security_file_ioctl+0x94/0xc0 [ 379.601701] ksys_ioctl+0xa9/0xd0 [ 379.605166] __x64_sys_ioctl+0x73/0xb0 [ 379.609057] do_syscall_64+0x1b1/0x800 [ 379.612946] ? syscall_return_slowpath+0x5c0/0x5c0 [ 379.617884] ? syscall_return_slowpath+0x30f/0x5c0 [ 379.622831] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 379.628207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 379.633056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.638242] RIP: 0033:0x455a09 [ 379.641429] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/05/21 21:43:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x9) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) [ 379.649138] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 379.656408] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 379.663675] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 379.670939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 379.678207] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000032 2018/05/21 21:43:12 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 2018/05/21 21:43:12 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x80ffffff, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000029200000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:12 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x7}, 0x8) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:43:12 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x400300) 2018/05/21 21:43:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x10000, 0x1be, 0x0, 0xfffffffffffffff7, 0x3, 0x3f, 0x0, 0x12e, 0x40, 0x22b, 0x80, 0xffff, 0x38, 0x2, 0x9951, 0x8001, 0xd981}, [{0x0, 0x81, 0x100000000, 0x100000000, 0x8, 0x0, 0x20, 0xc6}], "05053dd2e6001be2d6be69fa81d4b683e973ca32b5785b4f48", [[], []]}, 0x291) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:12 executing program 0 (fault-call:5 fault-nth:51): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 379.797654] FAULT_INJECTION: forcing a failure. [ 379.797654] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 379.809512] CPU: 0 PID: 23764 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 379.816790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.826145] Call Trace: [ 379.828747] dump_stack+0x1b9/0x294 [ 379.832390] ? dump_stack_print_info.cold.2+0x52/0x52 [ 379.837594] ? graph_lock+0x170/0x170 [ 379.841416] should_fail.cold.4+0xa/0x1a [ 379.845492] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 379.850614] ? debug_check_no_locks_freed+0x310/0x310 [ 379.855821] ? __lock_acquire+0x7f5/0x5140 [ 379.860068] ? lockdep_init_map+0x9/0x10 [ 379.864130] ? __raw_spin_lock_init+0x2d/0x100 [ 379.868715] ? dd_init_queue+0x414/0x5e0 [ 379.872781] ? debug_check_no_locks_freed+0x310/0x310 [ 379.877975] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 379.882904] ? blk_mq_alloc_rq_map+0x142/0x220 [ 379.887491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.893026] ? should_fail+0x21b/0xbcd [ 379.896919] __alloc_pages_nodemask+0x34e/0xd70 [ 379.901602] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 379.906616] ? elevator_init+0x293/0x500 [ 379.910683] ? find_held_lock+0x36/0x1c0 [ 379.914746] ? __lock_is_held+0xb5/0x140 [ 379.918817] ? check_same_owner+0x320/0x320 [ 379.923137] ? print_usage_bug+0xc0/0xc0 [ 379.927203] cache_grow_begin+0x72/0x6c0 [ 379.931278] kmem_cache_alloc_node_trace+0x692/0x770 [ 379.936393] __alloc_disk_node+0xc1/0x500 [ 379.940544] ? disk_expand_part_tbl+0x3c0/0x3c0 [ 379.945211] ? trace_hardirqs_on+0xd/0x10 [ 379.949364] ? blk_queue_flag_set+0xf6/0x160 [ 379.953777] loop_add+0x40e/0x9c0 [ 379.957228] ? loop_queue_rq+0x640/0x640 [ 379.961300] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 379.966492] loop_control_ioctl+0x178/0x500 [ 379.970816] ? loop_add+0x9c0/0x9c0 [ 379.974445] ? expand_files.part.8+0x9a0/0x9a0 [ 379.979029] ? kasan_check_write+0x14/0x20 [ 379.983268] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 379.988204] ? wait_for_completion+0x870/0x870 [ 379.992790] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 379.997978] ? loop_add+0x9c0/0x9c0 [ 380.001605] do_vfs_ioctl+0x1cf/0x16a0 [ 380.005498] ? ioctl_preallocate+0x2e0/0x2e0 [ 380.009906] ? fget_raw+0x20/0x20 [ 380.013359] ? __sb_end_write+0xac/0xe0 [ 380.017340] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.022881] ? fput+0x130/0x1a0 [ 380.026160] ? ksys_write+0x1a6/0x250 [ 380.029962] ? security_file_ioctl+0x94/0xc0 [ 380.034371] ksys_ioctl+0xa9/0xd0 [ 380.037827] __x64_sys_ioctl+0x73/0xb0 [ 380.041715] do_syscall_64+0x1b1/0x800 [ 380.045603] ? finish_task_switch+0x1ca/0x840 [ 380.050099] ? syscall_return_slowpath+0x5c0/0x5c0 [ 380.055032] ? syscall_return_slowpath+0x30f/0x5c0 [ 380.059962] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 380.065327] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.070173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.075357] RIP: 0033:0x455a09 [ 380.078544] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.086255] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 2018/05/21 21:43:12 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000000c0), 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x10003, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bind$vsock_dgram(r0, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) 2018/05/21 21:43:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000f00000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020900c7a49dbee1666a600000"], 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), 0x4) 2018/05/21 21:43:12 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) [ 380.093525] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 380.100791] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 380.108054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 380.115320] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000033 2018/05/21 21:43:12 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x8100, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe800000f0ffffffffffff00000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:12 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000180)) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 2018/05/21 21:43:12 executing program 0 (fault-call:5 fault-nth:52): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:12 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) readlinkat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/4096, 0x1000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) finit_module(r1, &(0x7f0000000100)='/dev/loop-control\x00', 0x2) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) timer_create(0x5, &(0x7f00000012c0)={0x0, 0x15, 0x4, @thr={&(0x7f0000001200)="85eff21b7fcfd336142df6fc6a6233cce080485b5f82d53c5f1448c8a8e99aa594992614bdc87d9eef93071af6380295f62fd4efafd1f2c03aa1869643bd7c09999bcf279306de48e317638de7c589e514f98742e65f8a", &(0x7f0000001280)="83975c497fc00ba46894efb319644120d0e66ce7d4"}}, &(0x7f0000001300)=0x0) timer_getoverrun(r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003500)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000003600)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000003640)={@mcast2={0xff, 0x2, [], 0x1}, 0x73, r4}) connect$unix(r1, &(0x7f0000001340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000013c0)={0x0, r0}) [ 380.274994] FAULT_INJECTION: forcing a failure. [ 380.274994] name failslab, interval 1, probability 0, space 0, times 0 [ 380.286313] CPU: 0 PID: 23787 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 380.293596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.302961] Call Trace: [ 380.305566] dump_stack+0x1b9/0x294 [ 380.309201] ? dump_stack_print_info.cold.2+0x52/0x52 [ 380.314401] should_fail.cold.4+0xa/0x1a [ 380.318481] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 380.323603] ? lock_downgrade+0x8e0/0x8e0 [ 380.327765] ? unwind_get_return_address+0x61/0xa0 [ 380.332704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.338243] ? graph_lock+0x170/0x170 [ 380.342057] ? find_held_lock+0x36/0x1c0 [ 380.346123] ? __lock_is_held+0xb5/0x140 [ 380.350198] ? check_same_owner+0x320/0x320 [ 380.354522] ? rcu_note_context_switch+0x710/0x710 [ 380.359457] __should_failslab+0x124/0x180 [ 380.363695] should_failslab+0x9/0x14 [ 380.367497] kmem_cache_alloc_node_trace+0x26f/0x770 [ 380.372603] ? lockdep_init_map+0x9/0x10 [ 380.376672] __kmalloc_node+0x33/0x70 [ 380.380474] disk_expand_part_tbl+0x236/0x3c0 [ 380.384973] ? rcu_read_lock_sched_held+0x108/0x120 [ 380.389996] ? blk_free_devt+0x60/0x60 [ 380.393893] __alloc_disk_node+0x16f/0x500 [ 380.398139] ? disk_expand_part_tbl+0x3c0/0x3c0 [ 380.402814] ? trace_hardirqs_on+0xd/0x10 [ 380.406964] ? blk_queue_flag_set+0xf6/0x160 [ 380.411373] loop_add+0x40e/0x9c0 [ 380.414829] ? loop_queue_rq+0x640/0x640 [ 380.418908] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 380.424103] loop_control_ioctl+0x178/0x500 [ 380.428424] ? loop_add+0x9c0/0x9c0 [ 380.432052] ? expand_files.part.8+0x9a0/0x9a0 [ 380.436648] ? kasan_check_write+0x14/0x20 [ 380.440888] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 380.445820] ? wait_for_completion+0x870/0x870 [ 380.450408] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 380.455598] ? loop_add+0x9c0/0x9c0 [ 380.459231] do_vfs_ioctl+0x1cf/0x16a0 [ 380.463129] ? ioctl_preallocate+0x2e0/0x2e0 [ 380.467542] ? fget_raw+0x20/0x20 [ 380.470997] ? __sb_end_write+0xac/0xe0 [ 380.474979] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.480516] ? fput+0x130/0x1a0 [ 380.483795] ? ksys_write+0x1a6/0x250 [ 380.487599] ? security_file_ioctl+0x94/0xc0 [ 380.492011] ksys_ioctl+0xa9/0xd0 [ 380.495469] __x64_sys_ioctl+0x73/0xb0 [ 380.499358] do_syscall_64+0x1b1/0x800 [ 380.503248] ? finish_task_switch+0x1ca/0x840 [ 380.507744] ? syscall_return_slowpath+0x5c0/0x5c0 [ 380.512675] ? syscall_return_slowpath+0x30f/0x5c0 [ 380.517606] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 380.522979] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.527830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.533014] RIP: 0033:0x455a09 [ 380.536221] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.543938] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 380.551202] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 380.558469] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 380.565737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 380.573015] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000034 2018/05/21 21:43:13 executing program 2: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x581) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 21:43:13 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/21 21:43:13 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0xfffffffffffff000, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/21 21:43:13 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000f0ffffff0000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:13 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='eth0\x00', 0x2) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="5fea0b48493baa9e23264272aa080ccea9745874196c955a61c557c99358c90a04d6e153276731b18fbfad28b70e67f5537b508f0a9d9be6efde5c2e8aeb0f0035c11d1dddf001b441eee2fa2e38d11c65a5545303319ff7902ae5fbfdc34a570246586eb7decc77fa9f40065c88bcffff40caa499834165de057aa624a20a2c73cbd80f3db999509eccde6f273afd1a707754bc1e48cc171810f8ab9cda10d708e0d1b43238919e4894d8922567556ef420") openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x4, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2018/05/21 21:43:13 executing program 0 (fault-call:5 fault-nth:53): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/21 21:43:13 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) getdents64(r1, &(0x7f0000000280)=""/180, 0xffffffffffffff63) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x210) 2018/05/21 21:43:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000000000000000200000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:13 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x6, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 380.731928] FAULT_INJECTION: forcing a failure. [ 380.731928] name failslab, interval 1, probability 0, space 0, times 0 [ 380.743261] CPU: 1 PID: 23813 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 380.750532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.759877] Call Trace: [ 380.762470] dump_stack+0x1b9/0x294 [ 380.766106] ? dump_stack_print_info.cold.2+0x52/0x52 [ 380.771299] ? print_usage_bug+0xc0/0xc0 [ 380.775366] should_fail.cold.4+0xa/0x1a [ 380.779436] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 380.784549] ? graph_lock+0x170/0x170 [ 380.788353] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 380.792939] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 380.798047] ? find_held_lock+0x36/0x1c0 [ 380.802114] ? __lock_is_held+0xb5/0x140 [ 380.806177] ? __xfs_dir3_free_read+0x390/0x660 [ 380.810857] ? check_same_owner+0x320/0x320 [ 380.815182] ? rcu_note_context_switch+0x710/0x710 [ 380.820110] ? print_usage_bug+0xc0/0xc0 [ 380.824174] __should_failslab+0x124/0x180 [ 380.828415] should_failslab+0x9/0x14 2018/05/21 21:43:13 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xd75, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)="f1", 0x1) 2018/05/21 21:43:13 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x4c0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0), 0x10) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) r1 = getpgid(0x0) sched_getparam(r1, &(0x7f0000000040)) 2018/05/21 21:43:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe800000000000ffffff9e00000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) [ 380.832215] kmem_cache_alloc_trace+0x2cb/0x780 [ 380.836888] ? graph_lock+0x170/0x170 [ 380.840697] ? print_usage_bug+0xc0/0xc0 [ 380.844779] device_create_groups_vargs+0xa7/0x270 [ 380.849726] device_create_vargs+0x46/0x60 [ 380.853976] bdi_register_va.part.10+0xbb/0x9b0 [ 380.858654] ? __lockdep_init_map+0x105/0x590 [ 380.863159] ? cgwb_kill+0x630/0x630 [ 380.866883] ? lockdep_init_map+0x9/0x10 [ 380.870955] ? __init_waitqueue_head+0x96/0x140 [ 380.875627] ? init_wait_entry+0x1b0/0x1b0 2018/05/21 21:43:13 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000001400)=@nl=@unspec, &(0x7f0000001480)=0x80) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000014c0)={0xea5}, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200040, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r4}) [ 380.879873] ? __lockdep_init_map+0x105/0x590 [ 380.884384] ? pm_runtime_init+0x451/0x540 [ 380.888633] ? update_pm_runtime_accounting+0x1b0/0x1b0 [ 380.894011] bdi_register+0x101/0x110 [ 380.897818] ? bdi_register_va+0x80/0x80 [ 380.901887] ? graph_lock+0x170/0x170 [ 380.905707] bdi_register_owner+0x5e/0x100 [ 380.909949] __device_add_disk+0xf07/0x1340 [ 380.914275] ? blk_alloc_devt+0x2a0/0x2a0 [ 380.918428] ? vsnprintf+0x242/0x1b40 [ 380.922241] ? pointer+0xa10/0xa10 [ 380.925785] ? __mutex_init+0x1ef/0x280 2018/05/21 21:43:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe80007fffffff0000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800000000e3"], 0x3}, 0x1}, 0x0) 2018/05/21 21:43:13 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0xfff7fffffffffffb, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x44040) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000180)) [ 380.929769] ? sprintf+0xa7/0xd0 [ 380.933135] ? scnprintf+0x120/0x120 [ 380.936851] ? __lockdep_init_map+0x105/0x590 [ 380.941352] device_add_disk+0x22/0x30 [ 380.945248] loop_add+0x70b/0x9c0 [ 380.948712] ? loop_queue_rq+0x640/0x640 [ 380.952786] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 380.957981] loop_control_ioctl+0x178/0x500 [ 380.962304] ? loop_add+0x9c0/0x9c0 [ 380.965935] ? expand_files.part.8+0x9a0/0x9a0 [ 380.970523] ? kasan_check_write+0x14/0x20 [ 380.974767] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 380.979710] ? wait_for_completion+0x870/0x870 [ 380.984303] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 380.989509] ? loop_add+0x9c0/0x9c0 [ 380.993142] do_vfs_ioctl+0x1cf/0x16a0 [ 380.997042] ? ioctl_preallocate+0x2e0/0x2e0 [ 381.001456] ? fget_raw+0x20/0x20 [ 381.004919] ? __sb_end_write+0xac/0xe0 [ 381.008907] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 381.014446] ? fput+0x130/0x1a0 [ 381.017728] ? ksys_write+0x1a6/0x250 [ 381.021533] ? security_file_ioctl+0x94/0xc0 [ 381.025947] ksys_ioctl+0xa9/0xd0 [ 381.029404] __x64_sys_ioctl+0x73/0xb0 [ 381.033297] do_syscall_64+0x1b1/0x800 [ 381.037184] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 381.042030] ? syscall_return_slowpath+0x5c0/0x5c0 [ 381.046965] ? syscall_return_slowpath+0x30f/0x5c0 [ 381.051900] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 381.057272] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.062123] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.067313] RIP: 0033:0x455a09 [ 381.070510] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.078223] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 381.085487] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 381.092754] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 381.100021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 381.107287] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000035 [ 381.114942] WARNING: CPU: 1 PID: 23813 at block/genhd.c:697 __device_add_disk+0x104a/0x1340 [ 381.123432] Kernel panic - not syncing: panic_on_warn set ... [ 381.123432] [ 381.130803] CPU: 1 PID: 23813 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #62 [ 381.138069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.147424] Call Trace: [ 381.150019] dump_stack+0x1b9/0x294 [ 381.153651] ? dump_stack_print_info.cold.2+0x52/0x52 [ 381.158849] ? __device_add_disk+0xf50/0x1340 [ 381.163343] panic+0x22f/0x4de [ 381.166535] ? add_taint.cold.5+0x16/0x16 [ 381.170689] ? __warn.cold.8+0x148/0x1b3 [ 381.174750] ? __device_add_disk+0x104a/0x1340 [ 381.179331] __warn.cold.8+0x163/0x1b3 [ 381.183219] ? __device_add_disk+0x104a/0x1340 [ 381.187801] report_bug+0x252/0x2d0 [ 381.191432] do_error_trap+0x1de/0x490 [ 381.195325] ? math_error+0x420/0x420 [ 381.199122] ? __lockdep_init_map+0x105/0x590 [ 381.203619] ? pm_runtime_init+0x451/0x540 [ 381.207854] ? update_pm_runtime_accounting+0x1b0/0x1b0 [ 381.213224] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.218071] do_invalid_op+0x1b/0x20 [ 381.221786] invalid_op+0x14/0x20 [ 381.225239] RIP: 0010:__device_add_disk+0x104a/0x1340 [ 381.230421] RSP: 0018:ffff8801cc2a78a8 EFLAGS: 00010246 [ 381.235784] RAX: 0000000000040000 RBX: ffff8801b3804ac0 RCX: ffffc90001e20000 [ 381.243048] RDX: 0000000000040000 RSI: ffffffff834383fa RDI: 0000000000000005 [ 381.250324] RBP: ffff8801cc2a7a78 R08: ffff880182838180 R09: ffffed003b5e46c2 [ 381.257590] R10: ffffed003b5e46c2 R11: ffff8801daf23613 R12: 00000000fffffff4 [ 381.264859] R13: ffff8801cc2a7a50 R14: ffff8801b3805020 R15: ffff8801b3804ac4 [ 381.272143] ? __device_add_disk+0x104a/0x1340 [ 381.276729] ? __device_add_disk+0x104a/0x1340 [ 381.281314] ? blk_alloc_devt+0x2a0/0x2a0 [ 381.285462] ? vsnprintf+0x242/0x1b40 [ 381.289268] ? pointer+0xa10/0xa10 [ 381.292811] ? __mutex_init+0x1ef/0x280 [ 381.296793] ? sprintf+0xa7/0xd0 [ 381.300156] ? scnprintf+0x120/0x120 [ 381.303871] ? __lockdep_init_map+0x105/0x590 [ 381.308371] device_add_disk+0x22/0x30 [ 381.312259] loop_add+0x70b/0x9c0 [ 381.315712] ? loop_queue_rq+0x640/0x640 [ 381.319780] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 381.325062] loop_control_ioctl+0x178/0x500 [ 381.329382] ? loop_add+0x9c0/0x9c0 [ 381.333032] ? expand_files.part.8+0x9a0/0x9a0 [ 381.337616] ? kasan_check_write+0x14/0x20 [ 381.341852] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 381.346786] ? wait_for_completion+0x870/0x870 [ 381.351371] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 381.356562] ? loop_add+0x9c0/0x9c0 [ 381.360196] do_vfs_ioctl+0x1cf/0x16a0 [ 381.364089] ? ioctl_preallocate+0x2e0/0x2e0 [ 381.368500] ? fget_raw+0x20/0x20 [ 381.371957] ? __sb_end_write+0xac/0xe0 [ 381.375935] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 381.381468] ? fput+0x130/0x1a0 [ 381.384749] ? ksys_write+0x1a6/0x250 [ 381.388569] ? security_file_ioctl+0x94/0xc0 [ 381.392983] ksys_ioctl+0xa9/0xd0 [ 381.396439] __x64_sys_ioctl+0x73/0xb0 [ 381.400337] do_syscall_64+0x1b1/0x800 [ 381.404226] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 381.409070] ? syscall_return_slowpath+0x5c0/0x5c0 [ 381.414003] ? syscall_return_slowpath+0x30f/0x5c0 [ 381.418939] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 381.424305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.429175] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.434358] RIP: 0033:0x455a09 [ 381.437541] RSP: 002b:00007f11b331bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.445249] RAX: ffffffffffffffda RBX: 00007f11b331c6d4 RCX: 0000000000455a09 [ 381.452514] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 381.459783] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 381.467090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 381.474358] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000035 [ 381.482261] Dumping ftrace buffer: [ 381.485974] (ftrace buffer empty) [ 381.489668] Kernel Offset: disabled [ 381.493285] Rebooting in 86400 seconds..