ac227d2f3e7a2bf963a9a19329a6befe986ce01334e710fc585ac3e7b591c94af18d66811663f61820557503f01e53e9c58e25cbe43e214b8f530e001d7eb0f908dc1a7f2f0ea2d9c611a0163fcbc2e36b85b042e448e0c687e703209387ee8215413de087b532d8a738e1ed6c370d"}) 2018/04/13 23:37:30 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) set_robust_list(&(0x7f0000000240)={&(0x7f00000001c0), 0x401, &(0x7f0000000200)}, 0x18) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x3, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f00000000c0)=""/50, 0x32, 0xe79, &(0x7f0000000140)={r2, r3+10000000}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000180)={0x3, 0x7}) 2018/04/13 23:37:30 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 319.377655] FAT-fs (loop0): Directory bread(block 2) failed [ 319.387984] FAT-fs (loop0): Directory bread(block 3) failed [ 319.402586] binder: 24285:24291 ioctl c0306201 2001bfd0 returned -14 [ 319.422195] FAT-fs (loop7): bogus number of reserved sectors [ 319.428166] FAT-fs (loop7): Can't find a valid FAT filesystem [ 319.434297] FAT-fs (loop0): Directory bread(block 4) failed [ 319.446499] FAT-fs (loop0): Directory bread(block 5) failed [ 319.453551] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:37:30 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000002ef88)={0x1, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1f, 0x2) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={r3, r4}) 2018/04/13 23:37:30 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x2f00000000000000]}}, 0x1c) 2018/04/13 23:37:30 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) [ 319.483262] FAT-fs (loop0): Directory bread(block 7) failed [ 319.495933] FAT-fs (loop0): Directory bread(block 8) failed [ 319.502610] FAT-fs (loop0): Directory bread(block 9) failed [ 319.517731] FAT-fs (loop7): bogus number of reserved sectors [ 319.523683] FAT-fs (loop7): Can't find a valid FAT filesystem 2018/04/13 23:37:30 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x2}) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$eventfd(r0, &(0x7f0000000000), 0x8) [ 319.530815] FAT-fs (loop0): Directory bread(block 10) failed [ 319.543298] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:37:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x7, 0x84100) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x20, 0x3]}, &(0x7f00000001c0)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockname$ipx(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) [ 319.594811] FAT-fs (loop7): bogus number of reserved sectors [ 319.600760] FAT-fs (loop7): Can't find a valid FAT filesystem 2018/04/13 23:37:30 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x400300]}}, 0x1c) 2018/04/13 23:37:30 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)=0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.sockprotoname\x00', &(0x7f0000000180)=""/4096, 0x1000) [ 319.657175] attempt to access beyond end of device [ 319.662287] loop0: rw=2049, want=246, limit=2 2018/04/13 23:37:30 executing program 3: r0 = socket(0xa, 0x2, 0x0) flock(0xffffffffffffffff, 0x6) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x21100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="010e28bd7000fedbdf250f0000000800060403000000680001000800050001000000080021000a00000008000b007369700008000b00736970000c000700100000002800000008582f000a00000404000700200000000300000008"], 0x1}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000008c0)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x100000002}, 0x1c) getsockname$packet(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000600)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000640)={@empty, 0x0, r1}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400), 0x3ba) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000540)=""/99, &(0x7f0000000780)=0x63) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) fchdir(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) fdatasync(r0) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000680)={r1, 0x1, 0x6, @random="523f469e1f92"}, 0x10) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x20004d2d) sendto$inet6(r0, &(0x7f0000000240)="6a14", 0x2, 0x40000, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x9}, 0x1c) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000800)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @local={0xfe, 0x80, [], 0xaa}, 0x0, 0x80000000, 0x0, 0x500, 0x10001}) fstat(r0, &(0x7f00000002c0)) [ 319.703642] attempt to access beyond end of device [ 319.708768] loop0: rw=2049, want=247, limit=2 [ 319.773640] attempt to access beyond end of device [ 319.778809] loop0: rw=2049, want=248, limit=2 [ 319.810211] attempt to access beyond end of device [ 319.815344] loop0: rw=2049, want=249, limit=2 [ 319.863400] attempt to access beyond end of device [ 319.868505] loop0: rw=2049, want=262, limit=2 [ 319.886191] attempt to access beyond end of device [ 319.891287] loop0: rw=2049, want=263, limit=2 [ 319.896796] attempt to access beyond end of device [ 319.901956] loop0: rw=2049, want=264, limit=2 [ 319.906759] attempt to access beyond end of device [ 319.911805] loop0: rw=2049, want=265, limit=2 [ 319.960413] attempt to access beyond end of device [ 319.965481] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:39 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x7f, @remote={0xfe, 0x80, [], 0xbb}, 0x101}}, 0x3, 0x7}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e24, 0x1, @empty, 0x3}}, [0x8, 0x1, 0x4, 0x8, 0x1000, 0x2, 0x4, 0x2, 0x7247, 0x8, 0x7fff, 0xfff, 0x8000000000, 0x4, 0x2a000000]}, &(0x7f00000001c0)=0x100) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0x20, &(0x7f0000000200)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e20, @rand_addr=0x1}]}, &(0x7f0000000400)=0x10) 2018/04/13 23:37:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x342b, 0x8001, 0x1ff]}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000000c0)=0xfffffffffffffffc, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000640)={'filter\x00'}, &(0x7f00000006c0)=0x78) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/65, 0x41}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/141, 0x8d}, {&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f00000004c0)=""/221, 0xdd}], 0x7) 2018/04/13 23:37:39 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}, 'bridge0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x203, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, "6970365f760442e83300"}}) 2018/04/13 23:37:39 executing program 2 (fault-call:10 fault-nth:0): r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:39 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='vmnet1GPLkeyring\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) ftruncate(r0, 0xffff) write(r0, &(0x7f0000cbd000)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlinkat(&(0x7f0000001000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 2018/04/13 23:37:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x200, 0x8, [0x0, 0x9]}) 2018/04/13 23:37:39 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x2f]}}, 0x1c) 2018/04/13 23:37:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x800000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:39 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0x1000000000017, &(0x7f00007e1ffc)=0x110000037, 0x4) setsockopt$inet_int(r0, 0x0, 0x200000017, &(0x7f0000000000), 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) [ 328.413716] FAT-fs (loop0): Directory bread(block 2) failed [ 328.432440] FAT-fs (loop0): Directory bread(block 3) failed [ 328.449115] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:37:39 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000013) 2018/04/13 23:37:39 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xff000000]}}, 0x1c) 2018/04/13 23:37:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x0, 0x6}) accept4$ipx(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0x10, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080)}, 0x20) chroot(&(0x7f0000000140)='./file0\x00') socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)=0x6, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 328.464179] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:37:39 executing program 7: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x10001, 0x78c6070d}) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getpeername$netrom(r0, &(0x7f0000000080), &(0x7f00000001c0)=0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x63c880, 0x0) mmap(&(0x7f0000509000/0x4000)=nil, 0x4000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r1, 0x40047211, &(0x7f0000000180)) [ 328.519762] FAT-fs (loop0): Directory bread(block 6) failed [ 328.542943] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:37:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0xffffff56) [ 328.568517] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:37:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) 2018/04/13 23:37:39 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x2f00]}}, 0x1c) [ 328.592526] FAT-fs (loop0): Directory bread(block 9) failed [ 328.620200] FAT-fs (loop0): Directory bread(block 10) failed [ 328.678576] FAT-fs (loop0): Directory bread(block 11) failed [ 328.766431] attempt to access beyond end of device [ 328.771571] loop0: rw=2049, want=246, limit=2 [ 328.776124] buffer_io_error: 17 callbacks suppressed [ 328.776135] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 328.838081] attempt to access beyond end of device [ 328.843239] loop0: rw=2049, want=247, limit=2 [ 328.847805] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 328.856901] attempt to access beyond end of device [ 328.862090] loop0: rw=2049, want=248, limit=2 [ 328.866640] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 328.875172] attempt to access beyond end of device [ 328.880254] loop0: rw=2049, want=249, limit=2 [ 328.884920] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 328.892913] attempt to access beyond end of device [ 328.897912] loop0: rw=2049, want=262, limit=2 [ 328.902500] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 328.910505] attempt to access beyond end of device [ 328.915496] loop0: rw=2049, want=263, limit=2 [ 328.920074] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 328.927970] attempt to access beyond end of device [ 328.932978] loop0: rw=2049, want=264, limit=2 [ 328.937517] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 328.946334] attempt to access beyond end of device [ 328.951311] loop0: rw=2049, want=265, limit=2 [ 328.955858] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 329.000492] attempt to access beyond end of device [ 329.005573] loop0: rw=1, want=329, limit=2 [ 329.204821] FAULT_INJECTION: forcing a failure. [ 329.204821] name failslab, interval 1, probability 0, space 0, times 0 [ 329.216181] CPU: 0 PID: 24436 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 329.223022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.232367] Call Trace: [ 329.234973] dump_stack+0x1b9/0x294 [ 329.238607] ? dump_stack_print_info.cold.2+0x52/0x52 [ 329.243809] should_fail.cold.4+0xa/0x1a [ 329.247877] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 329.252969] ? zap_class+0x720/0x720 [ 329.256675] ? find_held_lock+0x36/0x1c0 [ 329.260734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.266274] ? graph_lock+0x170/0x170 [ 329.270071] ? find_held_lock+0x36/0x1c0 [ 329.274154] ? check_same_owner+0x320/0x320 [ 329.278469] ? rcu_note_context_switch+0x710/0x710 [ 329.283436] __should_failslab+0x124/0x180 [ 329.287692] should_failslab+0x9/0x14 [ 329.291490] kmem_cache_alloc+0x2af/0x760 [ 329.295632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.301159] ? cap_capable+0x1f9/0x260 [ 329.305050] getname_flags+0xd0/0x5a0 [ 329.308846] user_path_mountpoint_at+0x27/0x40 [ 329.313432] ksys_umount+0x1be/0x1280 [ 329.317224] ? find_held_lock+0x36/0x1c0 [ 329.321274] ? kasan_check_write+0x14/0x20 [ 329.325502] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 329.330442] ? __detach_mounts+0x410/0x410 [ 329.334676] ? wait_for_completion+0x870/0x870 [ 329.339260] ? __sb_end_write+0xac/0xe0 [ 329.343223] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 329.348752] ? fput+0x130/0x1a0 [ 329.352043] ? ksys_write+0x1a6/0x250 [ 329.355846] ? SyS_read+0x30/0x30 [ 329.359286] ? mm_fault_error+0x380/0x380 [ 329.363437] ? ksys_ioctl+0x81/0xd0 [ 329.367067] ? do_syscall_64+0xb7/0x9d0 [ 329.371043] SyS_umount+0x1d/0x30 [ 329.374483] ? ksys_umount+0x1280/0x1280 [ 329.378532] do_syscall_64+0x29e/0x9d0 [ 329.382415] ? vmalloc_sync_all+0x30/0x30 [ 329.386559] ? kasan_check_write+0x14/0x20 [ 329.390794] ? syscall_return_slowpath+0x5c0/0x5c0 [ 329.395715] ? syscall_return_slowpath+0x30f/0x5c0 [ 329.400663] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 329.406032] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.410877] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.416058] RIP: 0033:0x455319 [ 329.419230] RSP: 002b:00007ffa706d4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 329.426936] RAX: ffffffffffffffda RBX: 00007ffa706d56d4 RCX: 0000000000455319 [ 329.434197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 329.441463] RBP: 000000000072c010 R08: 0000000000000000 R09: 0000000000000000 [ 329.448748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2018/04/13 23:37:40 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x6e, &(0x7f00006c6ff0), 0x0, &(0x7f0000000240)=[@rights={0x10, 0x1, 0x1}], 0x10}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000180), 0xc) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) recvmsg$netrom(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000780)=@ax25={0x3, {"3c1b7251c1894a"}}, 0x10, &(0x7f0000000fc0), 0x0, &(0x7f0000000ac0)}, 0x0) sendto(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80) execve(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000002c0)='\x00', &(0x7f0000000380)='vboxnet0]\x00'], &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='lo+cgroup}wlan1nodev&:eth0$$.em0\x00', &(0x7f00000004c0)="045b898f73", &(0x7f0000000500)='=em0(-GPL?GPL#security!]em0nodev-bdevmime_type\x00', &(0x7f0000000540)="83282b47504c6574683100", &(0x7f0000000580)='\x00']) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) mlockall(0x3) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa460cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65da") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000a80)={0x16722aae90f71a53, &(0x7f0000000600)}, 0x1b221aba06688203) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000a40)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000980)) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000a00)=0x439d0444) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/13 23:37:40 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7fe, 0x24000) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x103fe, 0x0, &(0x7f0000ffc000/0x1000)=nil}) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x1, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1e) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x80}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in6={0xa, 0x4e21, 0x8dc3, @mcast1={0xff, 0x1, [], 0x1}, 0xb8}, @in={0x2, 0x4e20, @rand_addr=0xb2ff}, @in6={0xa, 0x4e20, 0x9, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xfff}], 0x74) getpeername$inet(r0, &(0x7f0000000180)={0x0, 0x0, @rand_addr}, &(0x7f00000001c0)=0x10) 2018/04/13 23:37:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="7b00005c38ef37fcc51b080000000000"]) r1 = dup3(r0, r0, 0x80000) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000100)={0x3a, @multicast2=0xe0000002, 0x4e24, 0x1, 'ovf\x00', 0x8, 0x0, 0x1e}, 0x2c) bind(r1, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x1, @rand_addr=0xffffffff}}, 0x80) 2018/04/13 23:37:40 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x18000000]}}, 0x1c) 2018/04/13 23:37:40 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r1, &(0x7f0000000380)='\x00', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000000)=0x1) ptrace(0x4207, r2) ptrace$getregset(0x4204, r2, 0x1, &(0x7f00000000c0)={&(0x7f00000003c0)=""/4096, 0x1000}) 2018/04/13 23:37:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x4800000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x97d, 0x87}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0xfffffffffffffffc, 0x4d4, &(0x7f00001a7f05)=""/251}, 0x48) [ 329.456025] R13: 00000000000006a8 R14: 00000000006fd060 R15: 0000000000000000 2018/04/13 23:37:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x400) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400080, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000080)={{0x80000000, 0x8, 0x99c, 0x10, 0x7, 0x6}, 0x8}) fchdir(r0) [ 329.542128] FAT-fs (loop0): Directory bread(block 2) failed [ 329.578224] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:37:40 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x31c]}}, 0x1c) 2018/04/13 23:37:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/49, &(0x7f00000000c0)=0x31) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:37:40 executing program 5: mkdir(&(0x7f0000a7fff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futimesat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {r1, r2/1000+30000}}) unshare(0x40600) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000040)}, 0x10) [ 329.591455] FAT-fs (loop0): Directory bread(block 4) failed [ 329.603180] FAT-fs (loop0): Directory bread(block 5) failed [ 329.626962] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:37:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x1c, 0x20, 0x1ff307543bf68163, 0x0, 0x0, {0x3}, [@typed={0x8, 0x1, @pid}]}, 0x1c}, 0x1}, 0x0) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000004c0)="b2f562cf42a666bd613b078cdb953db95da634f2bf1388ea37f13f2222b7f66eb67357dfe1404b8553c5cf3086d13869dd320c7ef9804ff4641b21d942025697c724905c768f8502934f0c8f65c30b2f8ed5c9325684032dd31aad7730a65bd8f30509bc5ee37e9f7fdd8fd5bef2b279edb547619b9db96ce18bbc9c39464a189e41348305926e17f5a76bb405eac61274d921313ac0e79c31e0754e1d07b9874c541d2833109e8c85ee293f1e8f93404806ce15d9153f80df3a3f87d53ff344f11b", 0xc2, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x80000) [ 329.663096] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:37:40 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x20, 0x10640) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x8001}, @in6={0xa, 0x4e21, 0xffffffff, @loopback={0x0, 0x1}, 0x6}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x10}, 0x2}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in={0x2, 0x4e23, @rand_addr=0x6}, @in6={0xa, 0x4e20, 0x100000000, @loopback={0x0, 0x1}, 0x4000000000000}, @in6={0xa, 0x4e21, 0x4, @loopback={0x0, 0x1}, 0x9}, @in6={0xa, 0x4e24, 0x7f, @empty, 0x3}, @in={0x2, 0x4e23, @rand_addr=0x9}, @in6={0xa, 0x4e24, 0xe16, @local={0xfe, 0x80, [], 0xaa}, 0x20}], 0xf4) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x417c7d81, 0x0) ioctl$KVM_NMI(r2, 0xae9a) [ 329.703930] FAT-fs (loop0): Directory bread(block 8) failed [ 329.726904] FAT-fs (loop0): Directory bread(block 9) failed 2018/04/13 23:37:40 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xff00000000000000]}}, 0x1c) 2018/04/13 23:37:40 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x101000) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) removexattr(&(0x7f0000000100)='./file0/file0/file0\x00', &(0x7f0000000140)=@random={'trusted.', 'proc\x00'}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='proc\x00', 0x0, &(0x7f00000005c0)) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 329.763260] FAT-fs (loop0): Directory bread(block 10) failed [ 329.795328] FAT-fs (loop0): Directory bread(block 11) failed [ 329.878048] attempt to access beyond end of device [ 329.883138] loop0: rw=2049, want=246, limit=2 [ 329.887725] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 329.918426] attempt to access beyond end of device [ 329.923571] loop0: rw=2049, want=247, limit=2 [ 329.928142] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 329.944807] attempt to access beyond end of device [ 329.949920] loop0: rw=2049, want=248, limit=2 [ 329.955968] attempt to access beyond end of device [ 329.961131] loop0: rw=2049, want=249, limit=2 [ 329.965894] attempt to access beyond end of device [ 329.970934] loop0: rw=2049, want=262, limit=2 [ 329.975632] attempt to access beyond end of device [ 329.980694] loop0: rw=2049, want=263, limit=2 [ 329.985416] attempt to access beyond end of device [ 329.990489] loop0: rw=2049, want=264, limit=2 [ 330.003960] attempt to access beyond end of device [ 330.009064] loop0: rw=2049, want=265, limit=2 [ 330.052363] attempt to access beyond end of device [ 330.057427] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:41 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x10000000000002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x30101, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000080)) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60d9d00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'security\x00'}, &(0x7f0000000080)=0x54) 2018/04/13 23:37:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup2(r2, r2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000005c0)) dup2(r0, r2) dup3(r0, r1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x20, 0x7, 0x4, 0x3, 0x2}, 0x10) 2018/04/13 23:37:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0xfffffffffffffff7, 0x2, 0x16, 0x10001}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x4, "c8d63fe9"}, &(0x7f0000000180)=0xc) 2018/04/13 23:37:41 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x1800000000000000]}}, 0x1c) 2018/04/13 23:37:41 executing program 7: r0 = socket(0x2, 0x1, 0x0) r1 = msgget$private(0x0, 0x200) msgrcv(r1, &(0x7f0000000100)={0x0, ""/24}, 0x20, 0x0, 0x0) listen(r0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) r2 = accept4$ax25(r0, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffffd7, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0), 0x371) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/04/13 23:37:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x7400, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:41 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='//control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x381000, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x8000, {{0x2, 0x3, @multicast1=0xe0000001}}}, 0x88) [ 330.609223] netlink: 'syz-executor3': attribute type 29 has an invalid length. [ 330.616787] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 330.635206] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:37:41 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'tunl0\x00', 0x2}, 0x18) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) sendto$ipx(r1, &(0x7f00000000c0)="88163fc8473ab4f91df135e51e", 0xd, 0x20000000, &(0x7f0000000100)={0x4, 0x7, 0x3ff, "c74a36934132", 0x1cb}, 0x10) sendto$ipx(r1, &(0x7f0000000140)="4cd2dfea83fa374b89c8f62a48a630ff88b35f74", 0x14, 0x10, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r2, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) [ 330.663753] FAT-fs (loop0): Directory bread(block 3) failed [ 330.681817] netlink: 'syz-executor3': attribute type 29 has an invalid length. [ 330.687541] FAT-fs (loop0): Directory bread(block 4) failed [ 330.689374] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 330.695448] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:37:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x8, 0xfffffffffffffffe, 0x200, 0x2, 0x100, 0x100, 0x74, {0x0, @in6={{0xa, 0x4e21, 0x98, @mcast2={0xff, 0x2, [], 0x1}}}, 0x6, 0x6, 0x7fff, 0x6390, 0xe5f9}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r2, 0x8}, &(0x7f0000000200)=0x8) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='{\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000240)={{0x2, 0x2}, 0x0, 0x3, 0x5, {0x100000001, 0x80}, 0xc8, 0xf9d}) 2018/04/13 23:37:41 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x6000000]}}, 0x1c) [ 330.718278] FAT-fs (loop0): Directory bread(block 6) failed [ 330.751458] FAT-fs (loop0): Directory bread(block 7) failed [ 330.770322] netlink: 'syz-executor3': attribute type 29 has an invalid length. [ 330.777888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/13 23:37:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x2000) dup3(r0, r1, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) [ 330.811297] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:37:41 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x1c03]}}, 0x1c) 2018/04/13 23:37:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x9, 0x40000) [ 330.862633] FAT-fs (loop0): Directory bread(block 9) failed [ 330.863823] netlink: 'syz-executor3': attribute type 29 has an invalid length. [ 330.875981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/13 23:37:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sync_file_range(r0, 0x10000, 0xd273, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 330.928580] FAT-fs (loop0): Directory bread(block 10) failed [ 330.967516] FAT-fs (loop0): Directory bread(block 11) failed [ 331.065546] attempt to access beyond end of device [ 331.070684] loop0: rw=2049, want=246, limit=2 [ 331.102499] attempt to access beyond end of device [ 331.107612] loop0: rw=2049, want=247, limit=2 [ 331.117286] attempt to access beyond end of device [ 331.122423] loop0: rw=2049, want=248, limit=2 [ 331.127895] attempt to access beyond end of device [ 331.133106] loop0: rw=2049, want=249, limit=2 [ 331.137887] attempt to access beyond end of device [ 331.142955] loop0: rw=2049, want=262, limit=2 [ 331.148606] attempt to access beyond end of device [ 331.153705] loop0: rw=2049, want=263, limit=2 [ 331.164651] attempt to access beyond end of device [ 331.169800] loop0: rw=2049, want=264, limit=2 [ 331.174516] attempt to access beyond end of device [ 331.179601] loop0: rw=2049, want=265, limit=2 [ 331.239383] attempt to access beyond end of device [ 331.244434] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:43 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfffffffe]}}, 0x1c) 2018/04/13 23:37:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="e27375a1f8cdc4a6f287c18f69083a8b8d1a3a602335e4c996b542626397b7b79bda09", 0x23}, {&(0x7f00000000c0)="8849869a6b524aec4d46646c57b8529ed37015052fea8e1672f807751ad001b06fa9a32b4c550570ac1a9e5986267b7c89334ebde61538d9c8c268f449c4554e7623959e3484f4122d0b9e6676759c2249041d83d9937fdc03bcf741dc328616fde287428942cea4693f7639f772d9378e71e3c09fc658551a1d205cedac564c356f3e915a7164ab75ff2880efa843aa70ff3830cc973a49e60d12ec9e07b20cd7c31e1d8c1e422a6e9a7ed54cddbb7e6aaa79a1981370e169794a", 0xbb}, {&(0x7f0000000180)="bfcb90904a301651101325993fa3ce367fe9306dd3ab0a1ccc7a0c2a71636254ea4c75956cbbb2a220ce664d94bb38f7850a50a048915820a27dc1d1af3ba5ce533f4b6c5005e58dcfe9b920c413e791cc86f477d79e9605b9724e9493001d052c13a82962b3fedf441c423bd250212d3505f6273616ce12d8434b36c81c883be640b6a692e2bcda2f9a7608060f9d866326627ef0df75a6aa63d8b5bae971a9a1075bfd1304227e59364c54e19894e501c8505dd2f97dea18ddfcb3f296ba0397304dd39a5cb694f178708653abdd", 0xcf}, {&(0x7f0000000280)="e43dd603e49ec80dd54b7d7149158300c164cab3b2f2be94af4695484fe484c7dcb1ded35f2db3be5592e117d95ffeba652a3ab20601f2b78e6cf55e9c07107096e8e347bacbf4ca08653764c74edbae612b01ef1a54154d29fcced1e2bc1ca6618b5e3750204560aad512bea5f8a6ad7047229250ffe2eaa69a4b0ccb51fe2d84041b0fcbd60d20f49f0f2c30f3e61c185b4320a1ba5b7c17efd43b91a7f330af32e781cda165491b77785eb4", 0xad}, {&(0x7f0000000340)="ce2ed2bacd289d90a1414c86c25637c29c0a759a6f2897fe3c92312ebfa2eaa7181eaeab048a4bc7f097b11f1926412afb3fdacb1219330d0c70a9455c56b364e6b238fa00fe45d3ef888a17524b1de07f14b981215843cccdcb4133ee47f4a19cfb5a616ba21923bc2002571bd8bf8a1f220a68e8378c853e71b3038d8a2c160bdeda946515e86f8162bfd15851d0d2d7f1f39c1e72a5", 0x97}, {&(0x7f0000000400)="0ca88a16bb8ab366bccb5721d9143c58767d6560e5b7f71e58d12b391fe7ec4f961009e1bd81c4ceb2394e7d54dd3e878a19709194f1d5612cdaf19b33e91353cc1014964c9a11cabe15", 0x4a}], 0x6, 0xa) 2018/04/13 23:37:43 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x3, 0x7f]}) 2018/04/13 23:37:43 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x15f45, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d0500000000000000001040000000000000", 0x59, 0x10000}], 0x0, &(0x7f0000014300)) r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f00000000c0)=0x54) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/213, 0xd5) 2018/04/13 23:37:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(pcbc(aes),ghash-generic)\x00'}, 0x58) r1 = semget(0x3, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000000)) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f00000000c0)=0x6) 2018/04/13 23:37:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:43 executing program 7: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x200000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x6612, 0x6f2000, &(0x7f00000003c0)) 2018/04/13 23:37:43 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./.ontrol/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 332.653327] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 0 transid 5 /dev/loop3 [ 332.674701] FAT-fs (loop0): Directory bread(block 2) failed [ 332.690552] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:37:43 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) 2018/04/13 23:37:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000c97ff8)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000001140)='/dev/audio\x00', 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fcntl$setpipe(r3, 0x407, 0x0) getpgid(0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)) r6 = getpgrp(0xffffffffffffffff) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000a40)) sendmsg$netlink(r2, &(0x7f0000000bc0)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000b00)=[{&(0x7f0000003700)=ANY=[@ANYBLOB="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"], 0x1}], 0x1, &(0x7f0000000b80)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="00000001"], 0x18, 0x20004800}, 0x5) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) ptrace$getenv(0x4201, r6, 0x9, &(0x7f00000000c0)) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3180}) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000280), 0x4) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000140)={0x1ff, 0x6f9, 0xfff, 0x7, 0x2, 0xfac7, 0x2, 0x5, 0x2, 0x4c}) ioctl$KVM_RUN(r8, 0xae80, 0x0) pread64(r1, &(0x7f00000014c0)=""/4096, 0x1000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x2, 0x7, 0x0, "9b8c052f6bf50af5612918237969660f4c78a36099300287b3a63d0591d7d1eb0718f1c279657ca7d47ad154", 0x7}, 0x0, 0x0, 0x9, 0x0, 0xffffffff80000000, 0x1, "7d69e79d9a9af59aff55b451f40129151c1e77a6373bc61b02660995543adc7811bdb2f0f6817b91e796d54eb7879fcd5c1741a93cd901c972069fde5c44c5aa", &(0x7f0000000c00)='/dev/vhost-net\x00', 0xf, [], [0x0, 0x400, 0x8, 0x5]}) write$vnet(r1, &(0x7f00000010c0)={0x1, {&(0x7f0000001140), 0x25d, &(0x7f0000001180)=""/162, 0x0, 0x2}}, 0x68) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f00000024c0)={{0xffffffff80000001, 0x2, 0x7fffffff, 0x2, "c1ef76d7ffe398a1aa33acff44316844138fdbd59cac3e8e96469efb128a6352ca44442e7f20a7a75bbbe4d0", 0x7}, 0x7, [0x26, 0x401, 0x382a, 0x2f5dd5c9, 0x1, 0x9, 0x401, 0x6, 0x8000, 0x2, 0x7, 0x9, 0xffffffffffffff81, 0xa, 0x9, 0x5d, 0x6, 0x5, 0x8, 0x4, 0x9, 0x4, 0x6, 0x101, 0x7, 0x8000, 0x9a5, 0x9, 0xffffffff, 0x2, 0x100, 0x1cb94503, 0x80000001, 0x8, 0xfffffffffffffff9, 0x7, 0x6, 0x4, 0x2b38, 0xbf711d, 0x800, 0x8, 0x6, 0x370b4434, 0x5, 0x1000, 0x7fff, 0xfffffffffffffff9, 0x1f, 0x8, 0x8, 0x10, 0x100000001, 0x9, 0xeb6, 0x8, 0x62eff455, 0x8001, 0x9, 0x5, 0x0, 0x1, 0x3, 0x396c, 0x4, 0x2, 0x8, 0x4, 0x58ea, 0x8, 0x7, 0x9, 0x8, 0x3, 0x5, 0x1de, 0xf2, 0xee, 0x4, 0x6c7e, 0x5, 0xa32, 0x8001, 0x7f25b1f0, 0x2, 0x1, 0xff, 0x0, 0x3, 0x4, 0x8, 0x7fffffff, 0x6, 0x5, 0x5, 0x3ee, 0xb03, 0x6, 0x7, 0x8001, 0xc842, 0x100000001, 0x30, 0x2, 0x742, 0x6, 0x800, 0x3, 0x3a, 0xfca, 0x9, 0xf9, 0xfff, 0x3f, 0x9, 0x1, 0x7fff, 0x9, 0x9dc8, 0x2, 0x401, 0x1f, 0x1f, 0x710, 0xffff, 0x7f, 0x1000, 0x4], {0x77359400}}) [ 332.710230] FAT-fs (loop0): Directory bread(block 4) failed [ 332.727757] FAT-fs (loop0): Directory bread(block 5) failed [ 332.747238] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:37:43 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x15f45, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d0500000000000000001040000000000000", 0x59, 0x10000}], 0x0, &(0x7f0000014300)) r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f00000000c0)=0x54) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/213, 0xd5) 2018/04/13 23:37:43 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfe800000]}}, 0x1c) [ 332.773195] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:37:43 executing program 7: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000029c0)={&(0x7f0000000380)={0x10}, 0xfffffffffffffdde, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x2}, 0x1}, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) setpriority(0x3, r2, 0x6) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x301200, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000080)={r1, 0x2}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x6, 0x3, 0x3ff, 0x0, 0x8001, 0x6, 0x3, {0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0xffffffff7fffffff, 0x7fff, 0xffffffffffff7fff, 0x8, 0x3b7}}, &(0x7f0000000200)=0xb0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000400)={{0x2, 0x4e21}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}}, 0x6, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 'rose0\x00'}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r4, 0x10000}, &(0x7f00000003c0)=0x8) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000480)="930c09d1e804edc1358f70be0cc41abbd89fceb0240d94b355b89477b36873a3c2d192bab7f48f6b7fddc34f5957fac7bd446c79c5168cf8d2c2b5b2fdede399efb27a5a9101349e5fd3c45ae9f3051b82af3b1cd37beeef12bfff0cd4cd4225e777e2c76646dbe9431150de445d905d44cfa06f58c8e4e21bd55d637ec1e817789838bc43940468443765e1da4971ffb346f2d0294c080b03e34ac38fe7f5f4", 0xa0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x4) [ 332.818601] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:37:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:37:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x8, 0x48100) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="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", 0xfe) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000400)={{0x11, @empty, 0x4e21, 0x2, 'lblc\x00', 0xf86dfac128d8771, 0x4bd0, 0x7e}, {@empty, 0x4e20, 0x5, 0xbd, 0xfffffffffffffff7, 0x1}}, 0x44) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000300)={@any=0xffffffff}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000100)={0x7, r0, 0x1}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000080)={0xff, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x3, 'wrr\x00', 0x0, 0xd6, 0x6a}, 0x2c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in6={0xa, 0x4e20, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0xea}, @in6={0xa, 0x4e22, 0x7fffffff, @mcast2={0xff, 0x2, [], 0x1}, 0x401}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}], 0x78) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x620180, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) [ 332.865008] FAT-fs (loop0): Directory bread(block 9) failed [ 332.875153] FAT-fs (loop0): Directory bread(block 10) failed [ 332.896470] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:37:44 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfeffffff]}}, 0x1c) 2018/04/13 23:37:44 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4000000000, r1, 0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x1000000004}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) 2018/04/13 23:37:44 executing program 7: r0 = socket$inet6(0xa, 0x80805, 0xbe) r1 = socket(0x200000000010, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000003c0)={{0xa, 0x4e23, 0x9, @loopback={0x0, 0x1}, 0x8}, {0xa, 0x4e24, 0x7fffffff, @mcast2={0xff, 0x2, [], 0x1}, 0xa263}, 0x3, [0x5, 0x2, 0x577, 0x1, 0x82, 0x7, 0x3ff, 0x7]}, 0x5c) recvfrom$inet6(r1, &(0x7f0000000280)=""/113, 0x71, 0x10001, &(0x7f0000000300)={0xa, 0x4e24, 0x8000, @loopback={0x0, 0x1}, 0x4}, 0x1c) write(r1, &(0x7f0000000000)="2400000024007ffc0000120000000100000ff6ff010000000000f300f1ffffff1300ff10", 0x24) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000001780)) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="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", 0x1000}], 0x1, &(0x7f00000016c0), 0x0, 0x20000000}, 0x40000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@broadcast, @in=@rand_addr}}, {{@in=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000200)=0xe8) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000040)={"66693a77adb30000000000000000590000000000001b35c604a6ef43bc790400"}, &(0x7f0000000380)=0xffffffffffffff0b) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000240)=0x6, 0x4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000016c0)=[{&(0x7f00000017c0)="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", 0x1000}], 0x1, 0x5) [ 333.039201] attempt to access beyond end of device [ 333.044300] loop0: rw=2049, want=246, limit=2 [ 333.086341] attempt to access beyond end of device [ 333.091490] loop0: rw=2049, want=247, limit=2 [ 333.107838] attempt to access beyond end of device [ 333.113076] loop0: rw=2049, want=248, limit=2 [ 333.147209] attempt to access beyond end of device [ 333.152408] loop0: rw=2049, want=249, limit=2 [ 333.157754] attempt to access beyond end of device [ 333.162797] loop0: rw=2049, want=262, limit=2 [ 333.168067] attempt to access beyond end of device [ 333.173124] loop0: rw=2049, want=263, limit=2 [ 333.178655] attempt to access beyond end of device [ 333.183716] loop0: rw=2049, want=264, limit=2 [ 333.188337] attempt to access beyond end of device [ 333.193346] loop0: rw=2049, want=265, limit=2 [ 333.240361] attempt to access beyond end of device [ 333.245417] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x35) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101002, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f00000000c0)={0x85, 0x2, 0x8, 0x2}) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000400)={@ipv4={[], [0xff, 0xff], @rand_addr}, 0x7e, r2}) 2018/04/13 23:37:44 executing program 3: r0 = socket(0xa, 0x2, 0x0) getsockname$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000100)=@ethtool_eeprom={0xc}}) r1 = fcntl$getown(r0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80000000002000, 0x2) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000002c0)=r1) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0xa5e, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0xc}}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}], 0x2c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) 2018/04/13 23:37:44 executing program 4: socketpair(0x0, 0xf, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x3, 0x5, 0x1, 0x1, 0x6, 0x4f, 0x2b3c0000000000, 0x1, 0x80000001, 0x0, 0x400, 0x4}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000140)={0x2, 0x7811, [0x0, 0xfffffffffffffffd]}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2018/04/13 23:37:44 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x1800]}}, 0x1c) 2018/04/13 23:37:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x364d0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:44 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r0, 0x80000) ioctl$TCSETSF(r1, 0x540e, &(0x7f0000000000)) 2018/04/13 23:37:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001680)='/dev/binder#\x00', 0x0, 0x802) fadvise64(r0, 0x0, 0x6, 0x3) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) r3 = geteuid() r4 = getpid() r5 = getpid() sendmsg$nl_netfilter(r2, &(0x7f0000001380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5012000006f5ff0428bd7000ffdbdf2503000007ec10440008002400", @ANYRES32=r3, @ANYBLOB="e96addd96e10cf101d173bbf5333da87032135ba4c64de32736644d348438cce58c8ff7a4b41e048c48695d5bc418d8161917b201d6d0ab5e6bc8ac6949c216f2edf5b3cad8de3ff004d7e15b1681255680225c48ef9d4079640bb92fc35f3033798a493cf3cbfa12211a3f3efaf7568b7b8822384dd2cde7c9b952c5859c64249a17f900caeaa079b94196c3149f092ab3a8b678df89c26a0a1c0c26eb09d5c0aa7b2a15d081619e8f0877df3a702d516d4fa4e744a43400bb0d3561244f5b98cf4cc047cefc279d06c09c228b02b3d59b9e941626c4c0833e6a8af1fc71367520f060286917662d65b8805df26358d50cf8951b72703f60c1c2a1367d7c72b5d1d708aea0a21764293a1c70a305a1552183d98a796ae60b25f63c281a96b9c230e96cf2974fcdd6e05977393ea2e33e77777aa7fd58ca8395b38b4eee382b77da06c463237a018c25665d022ea4f8656e017553cabd2b6ef89d79568fd85f3d47cbca7e6e63ca1d56282ef81442995a033f306fe7255e25d4214fb0fc76f0088dac2eb0bbc6ab11ced4e99b9e386dc4d277b14f621971989fd54ebc4821ac26a9c2e2885ff9d6571ac4a4ad82a3a51c3c7730ac3361d53715e6dedded85ef9f36ea5268894312f90a2c1dd38cfc6b9873f2d1b82d1cc01015b867a54bca1019e8594dbdc9655605b00f6bc456b6225311124544dacae5e831ce968b8da8ea85c9c54b940e3e58acd955d8c4c04bd596b03620f2d1e7be3aaf2fdadfaa1dca4b771e758e4cddfef6e16725f84eacef59e0b855d6f7d2a63c564b98db53a1ee561f40dfcf41a6691e377877ed32510eff42109a9c6433018421101e166a06e39f133b985660cbcf0cd2b482bc9428489140936080bc418af071936ca330d12825d9fad3e48dfba1969f217d13c9d49d09104fae0581672506ea7b3e236db52b4bca96428a1d921986608130553d7d782c58f60bc215a0634a62d3f477fcb2d72e9675a434783d73f6515525d9c544016b176912a03b473adcb25ce1a36fe120f5a07d03aca2cd867951bc8b7c4454f4d3c2aec21d379bcf5021bc2656de3c86dcde4b3815d64c6964e0b9adc0fbaafa47d57ebc9038323f13ba0ec70d041be4a4d3808dffff0974c50b4b5255e26de355ea0b349c430d613d517c5922797512105a50d0ceee6df01be4d6a99b3ebc76eb4eb45c524f81173ad0d8bef559b506d0d64acf3b4e7ba72abe4d90c11c0b5c1512ecb611c156c6f4f31edcad534dea897abd95f7c07a187b59f8dc9b56141f9f9d44a2c13d488f475a2a606b4be54c770fd4b2d17f82e35a7d477d6cd8562a994d4ffa0d3748f10213e9d7b02d9cbabfe813646a35dfbdc96281dc08ba960cda5dc6e59b59c663482791061250b54c9f074619ce66e66909b19bf88fdbdda5f37d51cc65c61456265e9068d39de08b9e96b52722170de2ea24c659a90a8348b3540ef77b77bb838f5bcf879b46eb4a312227d745d35b3b393fc7d244097fb46897b538ab0ccf198a7d62e09e200287dbbf37b8fdf19903214ccd40afe89bd833329fa5bb89d44631ea7b622734194240b08a485a80a83de080b9ad8f312f4bc717074da112fcb6565a992d3aeed656c333887b02ffc04db85c29071b4a32a7db31d0848dda76a66ec6f2c4204d346a2ee06d13e477a666b6cfc207a2cc4ae49e879a7117148117147a9b5dd773cbf53dc4e5a65ad8f645d3c6a6967bd8762e0b53589420bbb0d02f6cdf350ce9e2bbe6d531ab63970b6d027994a4cfe6edbe5cdeb55b9b359bfd5384ffcf563507197089bfdbe9f7df9ac6a78ef5a641161cd494a2873cc27a4845ce194e565be1a1df38f8436fa8fbb1d4d471994cdf5846619a44c8129d1e37ed96116b42252a6554e5ab51db7893487b36f8df34e314d64a7a8144f089c0f924dd63141eec6f78a67e7ab57c07f34926eb884c5dd22e6117cf6d1a809ccfbbf7ff47c6b19b25d42f47a4f74caa87b1b1a1acef0fa8c23c40de6824be00510daf34a55b80906c52f22c12af72ebda829b45608e02dcb41fb8d33cbf63759ed1479f7eb75157d32bbae956d5bf92cbbbd5520b5c79e2cfd1081a8af777b1afeb48e29343e9b9c30fa8b8e94054aac43c3a18396a8b20f982493b7802e8bc1642b72cea0ff0b53364ce318186db2e18e66a9af26c97bc5f9056c073bd1322f8e1bea08f4f23330bc604e8090cbd0c8043bad79a2208fc68cc0fa61e939d260c33d965ea93ea021bf75da7a4133f08f617e9899ea1471fdb1dd2b6a20117ffcec9971bafdc7d156ea36d0f91b36bfe7cab1dfb370c1ea22522ccb565e62d378b7294e6632393392c5f833f96b2fddbc808ebbfc19bc0214f8e7bd48040040bc4123f24924b1f1220adfb788766165713724a6c7555341c689f9581c1de3947321c7d16a797b22c1f04c0331b87400ba37f52013cfdf880a3aa32c226f7e8ac4912066e7f463b4049931490958de7380f584771f9ae8e2c519e41893d672adb4132f32cec69a7bf9b1862b64f6c7a8f12dd0279348ccc4b99c1fc58a2a89b5c352d50f5e8d9d053b18d554c66de961978cca85536fb17a95107295d7c29c87decafa08a0ca70beba84f913151822aa8930ebd7e1aba8ad7b068c602f34f48caf6499ce948f4d64e294ba782928c08f79a85612601461d832233380f86ce75d646c27937499d67f054045bb4f8c58f18e95057068fbff2eb8f8df9d807b9401c13b59f0d2b13b0fa86a46417366bc8a7443f593803c72e23e87b188ccd77ffe740485fad709431a3850f1e10374dd62c8068f805530569e08d36c43d5dac240fb79b6ea9c7ee992e64d2e1d7c973a2706dfac3b35d8eef0d8c8a618cc5439e4845ae8ceccd7a4efa7f43ca5428a053055dec8853aaef366bdf43fbaf75a2d209605a6c813095e4af6754bb432e523b67080a8f6c5252cca034b9a7d033de903604c1bf4b9910b4eaa909b002add0c48caa16c7d9f487d7f57df17b09343a3e40eb4a2b977e0b7fbe3c8eaa5799ce6d61b150e49f45e0a135de800c1b4fa5bf01d94935f06534792959272b411c33daf629f19a03594289d0bc53ba7a5895fb9b5cb2c631aa79b20ed2dd25adfb46b246240d4f3dae62238c18695b06284e5b8760eb5af90470dc9cd7557aaa3029766c926e3396b99f3666c641c473f6647561af155f6b28e64e964010766ae05b77fc08a35b3045980fd8acd0b77227cd7f66829d2f55fe6c911fab77f2f8e2dbaaa1ca801b02320196a78a14d59c3251f78511caf33feb6d0b5570af870726b5be7588c26ba98f39269849aa26d24b170e74790e68fea28da31633595a3d6e2b169f8e4c43a8ea274d0688ea82fd69c8ac15cf9d33b433ac47631dd0a7ca65aec9411dfdc360244a47198028e74d00352aa28f1256dd79164452b333cc72f9d5cf37de81ae6cfb8cddda207284a76ad4a1b7a5ca7ba6ba653e32205d850bfc833e8e9a1a30d0fc25417277a8e028ed3411a88fb0e6882274b05cd7bfebfd922145e61cd2015c3f11f40ed01f54f168b60fbd3f0ba57d34219f8a6b1206bd49858d5ec1f62bdf1b1bd1ce1439e88e1430679ba1a7a07643f682968d10f7eddde064c395dbc5231d2c80898ab404b060e2c2faea1a3d8b9673a52bb698251cda188e77ee09c05635554d889c44ecd4b35ab56600f76c238818578b6b3b81e045ed977c7f3cc1c68d919b2f90a4d61f80fc635c4e1b2901233911cc5a434eabadccde09f247e0ee937a1826a709702d7d37b829ab7a8f03f608f9be6e3b7c15af3b9c22ad0e7ea92035b6891c6b1400418a1bc3f98dcd378da06776d3d07522783f615bde7d94703e825aac33ab56b9362ac429c8c5a1aedc6be38df1120079f75a95c30974502c68d3ba8edce3db3b9341232f3f42c26690b84b5d35fb50713543bc29aec91f0ecfbdf25bee158c6f434510ea118837c648dd1ab49b39e7d3c4d6769b98e0d54ee86782aaffd817103c2977d5aee0d4c993f9b967def56e34d9e75f55592db0f72adcda6b6d7b1c2b815f7a2d9d3d74f94c73eb8d9902afdd302b46be095c27b1bb97f1046c12adb9adc5442a099e92b0232ea146a7939dc8fb2b9e3ddc591d6b02b9d0abd13fdf710d9551efd4f577dc4baedf88d62e10a6d32bbd40ec07240e3d1ca13358851db72cbda00531160d1136d35bf9d27698723b5819aa003d36b76ecab6e06156ddeefb244520e91221d81c75e5788cdb65cc680f7bd2279c25d5f9237573b6d86f00af120d24d56041c932bd366dc2a956d5015278f1a0ddbfcdf36e826bdfba92cb55d6fb51e42a7fc963fdf012a9632188e281c3baf4425923fb9a4f925d7b62c517e68f065c7f7907c398c46a6adbc5a941721f94a7a04d03eb9808897733f6c6eae9948e510eaae518ba57457d743855a10eae3c13b91c80051e31ffb78180c40da7b6f855a9d27bb84e2e7e1563f08b9a1288ea05deb1afdcb3a82c0aac540eabbe16884819d4b3deb7d59744065cb9999c1d4ff9a54bbd3189376bcdb302c4019891ce38583aac1694a80c6eea7563a4b43a2f41f2dc9ab2c202ec9eb896296eaea457b5294e59e080971133b0027babc92e4778da00c54224ac9c720d08e3042029175ca6902beee2d1e3af22ee1e4c3b44ba335409720ef93642d8d6b9a85f1d16728f7e154d6e5ae5664c44ed1afab732d9df889aae5bbeaa23be002c57a3a6ab9c70a5f1259fdf1830a46df56a2fbdb9987aac9be1db7e27a15e360768fa74914ed77a16edcc26f54e84c7a52c0aa7034357600d6aa30b06455b09e38b9ac1f8cfb45b8f555d1fc2dd399f6555aa74334fd93af8cad34ae91e563c743cb511e827cadaa855a9961b772168e13de60b137fa609010f80a91343125021de0913b9aa8d6e9e88311d16d07e7d8032ff48469b2a6009f63417a9141f1c941328e8ee33bde4b30fb95408ba803c7191450cdc80a0d2845113c13c6841132110110da8f34cf0b64c7421ad72ca82b3dc0ec161152e70a4dd4880263a78ccea1adbec4075d0407530455af308c97148e50078c726afb6357418153b56cd1a33d83f4fd81bec0150a7244127370f23dc94671f88c328a68bfa490542cf19137e948c3ce28ef8bc75de9f01ebea4aa50b18cb6376421c97380a4c5e82c5091782fb030608e77dc7396168931dbfa88c82c60d6e8cfd021d7f7aefaca22058ac647d3c297a8fcf5232cc53a7a543fa2be5c5aec4a69fd817ee93fda21f92bb283fdc178a89647e50ee19b9e7ee90c75ab5d2ecb75fdd6399fe93a6731cde51ff319ddab630ac44fcdbb2446285ce781f983e35b1c2e4127f848fb351801366d44b2d4f6b8524aa85866308f958707e9dcccabc2e4d929898ade7d5ab9d7b25cd56b564908fa97d692ccb61e08c8514ee208edf061b9278acdb2802484791c15f9aa783b4d07c4fee101604af267f06df95efa15d8750f5fcd6a2dbc0dda9340806d0c49036e579b8c26add2ae8f1f20731badfc0e715e2f22e74d7c554b4b1045d6a35e1d605b021d4966531b4df19e6228db235efd8601875852002c6dbbfd4d4367cb90b0da303330f4a07ed569e5e06942ae5b1e52c5b340e4a8b48f38a0184d04a40138e09fef5aabae2f0946a50444a731adde0d47bbb8124c02d49aaaad650a4d5771428e2ff5bb36940567db754dc021e0619e74db7bf0d3d80ebfafc4c4d402dd99dbebad53e15ded8b17c4812312852db3b2dab95170c1c3c7ac0906bd5de65d8cb012710df04ec8c0be8b60b3baa09775f60e31b04ab91b9015977bd49c9772bbc847c1af2d7de42e0efa46035815ed44f33d73117778237efb6ed4a50d441ac394ad47943a83bf7e4059225a565562e861aeb036561beec120da72046b766583263dfcade1e2609e95dd2fd0885cbf5a5ecbba08881e94dce61cd9a51dbd9c0cf99c65749c5ff8c794b55f58c23a42efd8c149cd6f67a0cf292c10d74aaa19239c310267583a8952a5043b0822015320941f94da7f9bbed5b57507c024bb80ddd2424427fd5c63d60e3bf21d28921a85deef86599a8f2e23481058c9dc56c1a0a1b56a2817b004003a00000c001700080008005406000008005d00ac14140b3c013e0008005f00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB='\b\x00r\x00', @ANYRES32=r5], 0x1250}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2018/04/13 23:37:44 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='.//ontrol/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 333.727430] FAT-fs (loop0): Directory bread(block 2) failed [ 333.747348] FAT-fs (loop0): Directory bread(block 3) failed [ 333.760783] FAT-fs (loop0): Directory bread(block 4) failed [ 333.767355] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:37:44 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfffffffffffff000]}}, 0x1c) 2018/04/13 23:37:44 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8200, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000140)={{0x2, 0x2, 0x4, 0x2, "bd98aa406ca09eb85ccc6d2b82e9312d8328cfc245d7a6db0196f21b17581fbbc40c9b733cde29e82363ccb9", 0x80000000}, 0x101, [0x1ff, 0x2, 0x5, 0x6, 0x1, 0x8001, 0x4, 0x1, 0x401, 0x80000001, 0x2, 0x4, 0x7fff, 0x2, 0x81, 0xf7e, 0xffffffff, 0xa0, 0x9, 0x1, 0x2, 0xcb88, 0xca, 0x3, 0x400000000000, 0x7, 0x9, 0x2, 0x86ad, 0x400, 0x4, 0x5, 0x9, 0x0, 0x61, 0x0, 0x6, 0x3, 0x10000, 0x6, 0x770e, 0x800, 0x1ff, 0x9, 0x9, 0x5, 0x5, 0x1, 0x8000, 0x1, 0x4, 0x2, 0x2146, 0x9, 0x8, 0x20, 0xfffffffffffeffff, 0x0, 0x9, 0x100000000, 0x600, 0x1a71, 0x5, 0xfffffffffffffffb, 0x10000, 0x7, 0x8, 0x40, 0x80e, 0x6, 0x7, 0x98, 0x5, 0x0, 0x101, 0xa4, 0x0, 0xc0, 0x8, 0x100, 0x7, 0x8, 0x6, 0x0, 0x4, 0x0, 0xffffffffffff7fff, 0x5, 0xd158, 0xffffffffffff0000, 0x5, 0x9, 0x40, 0x79f, 0x2, 0xfffffffffffffc01, 0x5, 0x1, 0xfff, 0x9, 0x40, 0x4, 0x3ff, 0x2b, 0x55b5, 0xe, 0x2, 0x1c4da92a, 0x1222, 0x3, 0x1ff, 0x1, 0x0, 0x79c, 0x8, 0x3, 0x2, 0xfffffffffffffffd, 0x2, 0x7, 0xffffffffffffff7e, 0x5, 0x7ff, 0x1ff, 0x7fff, 0xff, 0x0, 0x1000000], {r1, r2+30000000}}) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={0x0, r0, 0x5}, 0x14) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000000c0)) 2018/04/13 23:37:44 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x6, 0x4) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1f, 0x20008005e) 2018/04/13 23:37:44 executing program 5: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) r0 = gettid() socket$netlink(0x10, 0x3, 0x1e) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) r2 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x400000000000, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r0, 0x1000000000015) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x3, r0}) 2018/04/13 23:37:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0xfffffffffffffc50) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)="2f70726f632f7379732f6e65742f697076342ff9ff2f6472cda4d3b099efeb5f7061", 0x2, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000000c0)=0x6) 2018/04/13 23:37:44 executing program 7: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0xf155f569692bb189) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000000c0)=""/68) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0xff, 0x2}) [ 333.773517] FAT-fs (loop0): Directory bread(block 6) failed [ 333.780464] FAT-fs (loop0): Directory bread(block 7) failed [ 333.791400] FAT-fs (loop0): Directory bread(block 8) failed [ 333.802333] FAT-fs (loop0): Directory bread(block 9) failed [ 333.818529] FAT-fs (loop0): Directory bread(block 10) failed [ 333.891859] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:37:45 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x58, 0xc0000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[{0x8, 0x9}, {0x2, 0xffffffff00000001}, {0x7, 0x69}, {0xb, 0x7}], 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000600)=""/4096, &(0x7f0000000040)=0x18) 2018/04/13 23:37:45 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x34000]}}, 0x1c) 2018/04/13 23:37:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) socket$inet(0x2, 0x80a, 0x10001) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000140)=0x7, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 2018/04/13 23:37:45 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x800) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x10000, &(0x7f00000000c0)=0x2) connect$ax25(r0, &(0x7f0000000040)={0x3, {"42cd3266109e58"}, 0x10000}, 0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x3}, 0x4) syz_read_part_table(0x0, 0x1, &(0x7f0000002280)=[{&(0x7f0000001280)="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", 0x14f, 0xb1}]) 2018/04/13 23:37:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000340)=ANY=[@ANYBLOB="404f623ebc39ad87f9904ea0701f2b6017a5dd0eac1fe78861fb4612701780209a2e6e43fc2eaae2f53e921ac9af61199106c59dbb279d68f1cb40f44c3e3ece7b95b23ab7f705c4520912d0bf779412"]) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xfffffed8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000007280)={@empty, @local, 0x0}, &(0x7f00000072c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000007300)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000007400)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000008740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000008780)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast1, @multicast2}, &(0x7f0000008800)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000008840)={@loopback, @remote, 0x0}, &(0x7f0000008880)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000008a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000008a80)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000008ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008b00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008c00)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000008d00)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000008d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d80)=0x14, 0x80000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000a380)={@loopback, @broadcast, 0x0}, &(0x7f000000a3c0)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f000000a8c0)={@rand_addr, @broadcast, 0x0}, &(0x7f000000a900)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f000000a940)={{{@in6=@ipv4={[], [], @loopback}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f000000aa40)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000000ab40)={0x0, @dev, @loopback}, &(0x7f000000ab80)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f000000abc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f000000ac00)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000000ac40)={0x0, @rand_addr, @remote}, &(0x7f000000ac80)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000adc0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f000000aec0)=0xe8) r20 = accept$packet(0xffffffffffffffff, &(0x7f000000af00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f000000af40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f000000af80)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000000b340)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000000b380)={'ipddp0\x00', 0x0}) getsockname$packet(r20, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f000000b400)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f000000f880)={@local, @rand_addr, 0x0}, &(0x7f000000f8c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000010280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x480028}, 0xc, &(0x7f0000010240)={&(0x7f000000f900)=ANY=[@ANYBLOB='$\t\x00\x00', @ANYRES16=r2, @ANYBLOB="100b2abd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="5c01020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000100000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000dc6000008000700010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400000001003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000004000008000100", @ANYRES32=r6, @ANYBLOB="680202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004002d0500003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040001001fff0000000002000c01010000003f00404e0200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400000100007c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000004c000400fcff92027db9000001000630eba9000005001806010100000002090100000000040007ffffff0000655d3f01090000000500ff00ff0f0000810007000900000000007f00008000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000006000800030003000000080004000800000008000100", @ANYRES32=r11, @ANYBLOB="4800020044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400feb8000000000000800007ff0800000008000100", @ANYRES32=r12, @ANYBLOB="280202003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040007000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000600000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004007f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400070000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c000400080001033f000000000006fd02000000050003060800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r15, @ANYBLOB="080007000000000008000100", @ANYRES32=r16, @ANYBLOB="bc0002003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040008001e01ff0f00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040029000000080007000000000008000100", @ANYRES32=r18, @ANYBLOB="f0010200400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400fe00000008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r21, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r22, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000500000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000104000008000600", @ANYRES32=r23, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r25, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r26], 0x924}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000080)={0x1, r0}) bind$bt_sco(r27, &(0x7f00000000c0)={0x1f, {0x7, 0x80000000, 0x6, 0x8, 0x852, 0x7f}}, 0x8) [ 334.013568] attempt to access beyond end of device [ 334.018685] loop0: rw=2049, want=246, limit=2 [ 334.023260] buffer_io_error: 22 callbacks suppressed [ 334.023270] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 334.082471] attempt to access beyond end of device [ 334.087580] loop0: rw=2049, want=247, limit=2 [ 334.092165] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 334.110525] attempt to access beyond end of device [ 334.115824] loop0: rw=2049, want=248, limit=2 [ 334.120409] Buffer I/O error on dev loop0, logical block 247, lost async page write 2018/04/13 23:37:45 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x2000000000000000]}}, 0x1c) [ 334.134292] attempt to access beyond end of device [ 334.139581] loop0: rw=2049, want=249, limit=2 [ 334.144160] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 334.202406] attempt to access beyond end of device [ 334.207499] loop0: rw=2049, want=262, limit=2 [ 334.212077] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 334.222830] attempt to access beyond end of device [ 334.227936] loop0: rw=2049, want=263, limit=2 [ 334.232523] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 334.241433] attempt to access beyond end of device [ 334.246519] loop0: rw=2049, want=264, limit=2 [ 334.251095] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 334.260138] attempt to access beyond end of device [ 334.265266] loop0: rw=2049, want=265, limit=2 [ 334.269858] Buffer I/O error on dev loop0, logical block 264, lost async page write 2018/04/13 23:37:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='{\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) 2018/04/13 23:37:45 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x4, 0x2000}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x0, {}, 0x0, 0x1}, 0xe) 2018/04/13 23:37:45 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x18]}}, 0x1c) [ 334.350475] attempt to access beyond end of device [ 334.355577] loop0: rw=1, want=329, limit=2 [ 334.429641] device bridge_slave_1 left promiscuous mode [ 334.435353] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.447111] device bridge_slave_0 left promiscuous mode [ 334.452750] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.487810] team0 (unregistering): Port device team_slave_1 removed [ 334.499174] team0 (unregistering): Port device team_slave_0 removed [ 334.509781] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 334.528545] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 334.558870] bond0 (unregistering): Released all slaves 2018/04/13 23:37:45 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/.ile1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x100, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="9ff744ed47fc2872ca48f9d81c48c89e5c738d2258c29c8c98ed37c9f1dce7b2d2a9e799a9551d777eebb2839382c4b4def5136cb48404d3ffa66f0da5660f85b2103cdbba9952236d94c117c7ede5667ab6c118b0b38ba643a01e8b875d6bc8545a198704fee9a2bd63fa222962b5b4e909e2a2e2859a089b43ca43d0728c9b1510b45790b5ac88dc1cb3920aa769dd553a0f97fe7bae19825a57d6fd8f0136ec1deb4eed1d739b6dce9697f71cea50f343edb3dff62bbb5fc9bf81712f57e240dc1a3216cf657e80e87b3ea4310588af7f7500909b1a42794bc34e25e7ea0883ce88afd38f8a57", 0xe8, 0x4000000000}, {&(0x7f0000000200)="3134f25df0a5b1cbcb57a07b3d5894915fdaa77350dee731cc54619126cf3a237b0eb97585306ae8bf75d0a0cd3ab47fb92dd2b38418b78ca3821fb451ce366868e4b3", 0x43, 0x7}, {&(0x7f0000000280)="3c88d8109cf6871a83e0dda3d82a256e6a654396207ebfa29226970c4373ca501c68bdb685720ffafd3a0d70c553dd99afda27cd8af4b571be6413ab088946c4f56a3cd2b23409a310102682c8ae7d3809d6ea3b3bfc2fa2ba1c2d71d43f440d7ed3fff4a71c23b5a5493832a51f47ac60e9ce4e78cbff5ed81f9bf34a7a2877245eb9591aaf99d8c32d0f8300e21e24653a129df3d6fa75323d7d7e5849c7601740c7977f28939ce0bb9376180a8266ed68746922799c035fb26e68b1a8320247bd5583b0177536f7dbb7d17620cb42158b0482e4e1b8f22a0b2b5cd1ed6750469c6155036467b40bb69e7d14a18a219ad4b8a1088dfa5f", 0xf8, 0x1}], 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6c733d69736f383835392d31332c63726561746f723d81e7e2942c6e6c733d6d6163637972696c6c69632c666f7263652c73657373696f6e3d392d000000382c003ed333be5497a3d3e58662d6083db1ad744ba186136e4323923bba48c7171e43ad62f4d7c6adb3048a5105e8ea055a74"]) pipe(&(0x7f0000000680)={0xffffffffffffffff}) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000740)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4e21, 0x4, 0x4e20, 0x9, 0xa, 0x926cdce66ed700dd, 0x20, 0x33, 0x0, r2}, {0x8, 0x3, 0x6, 0x100000000, 0xff, 0x8001, 0x9, 0x6ff0}, {0x1, 0x8001, 0x3f, 0x7}, 0x81, 0x6e6bb0, 0x1, 0x0, 0x1, 0x3}, {{@in6, 0x4d6, 0x7f}, 0x2, @in6, 0x0, 0x7, 0x2, 0x8, 0x2, 0xb68, 0x9d2}}, 0xe8) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000480)={0x8001, 0x800, 0x6, 0x46f5c67, [], [], [], 0x1f, 0x100000001, 0xab, 0x400, "0a5d546e51de68015cd46bb8656e5edd"}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) 2018/04/13 23:37:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7910e3b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f000031f000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0x0, 0x0, &(0x7f0000000280)}) [ 334.663167] FAT-fs (loop0): Directory bread(block 2) failed [ 334.670376] hfsplus: unable to change nls mapping [ 334.675349] hfsplus: unable to parse mount options [ 334.704103] FAT-fs (loop0): Directory bread(block 3) failed [ 334.715388] FAT-fs (loop0): Directory bread(block 4) failed [ 334.729216] FAT-fs (loop0): Directory bread(block 5) failed [ 334.736528] hfsplus: unable to change nls mapping [ 334.741469] hfsplus: unable to parse mount options [ 334.757111] FAT-fs (loop0): Directory bread(block 6) failed [ 334.768388] FAT-fs (loop0): Directory bread(block 7) failed [ 334.780201] FAT-fs (loop0): Directory bread(block 8) failed [ 334.791369] FAT-fs (loop0): Directory bread(block 9) failed [ 334.800417] FAT-fs (loop0): Directory bread(block 10) failed [ 334.806429] FAT-fs (loop0): Directory bread(block 11) failed [ 334.825673] IPVS: ftp: loaded support on port[0] = 21 [ 334.851194] attempt to access beyond end of device [ 334.856263] loop0: rw=2049, want=246, limit=2 [ 334.860824] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 334.910138] attempt to access beyond end of device [ 334.915199] loop0: rw=2049, want=247, limit=2 [ 334.919753] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 334.950102] attempt to access beyond end of device [ 334.955163] loop0: rw=2049, want=248, limit=2 [ 334.978109] attempt to access beyond end of device [ 334.983170] loop0: rw=2049, want=249, limit=2 [ 334.995146] attempt to access beyond end of device [ 335.000262] loop0: rw=2049, want=262, limit=2 [ 335.014782] attempt to access beyond end of device [ 335.019853] loop0: rw=2049, want=263, limit=2 [ 335.026729] attempt to access beyond end of device [ 335.031788] loop0: rw=2049, want=264, limit=2 [ 335.046380] attempt to access beyond end of device [ 335.051429] loop0: rw=2049, want=265, limit=2 [ 335.173432] attempt to access beyond end of device [ 335.178518] loop0: rw=1, want=329, limit=2 [ 335.653213] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.659656] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.667070] device bridge_slave_0 entered promiscuous mode [ 335.704407] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.710849] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.718895] device bridge_slave_1 entered promiscuous mode [ 335.756768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 335.793686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 335.905074] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 335.935555] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 336.098694] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 336.106391] team0: Port device team_slave_0 added [ 336.133768] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 336.140958] team0: Port device team_slave_1 added [ 336.167000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.194000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.219396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 336.226505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.235141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.255756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 336.262868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.270955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.495182] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.501579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.508236] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.514594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.522241] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 337.247137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 337.354228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.437475] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 337.522567] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 337.528805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.535893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 337.618919] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.115382] binder: 25060:25062 got reply transaction with bad transaction stack, transaction 10 has target 25060:0 [ 338.126320] binder: 25060:25062 transaction failed 29201/-71, size 0-0 line 2778 [ 338.135152] binder: BINDER_SET_CONTEXT_MGR already set [ 338.140498] binder: 25060:25063 ioctl 40046207 0 returned -16 [ 338.148200] binder: 25060:25063 got reply transaction with no transaction stack [ 338.148204] binder_alloc: 25060: binder_alloc_buf, no vma [ 338.155775] binder: 25060:25063 transaction failed 29201/-71, size 0-0 line 2763 [ 338.162077] binder: 25060:25062 transaction failed 29189/-3, size 0-0 line 2963 [ 338.187193] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.192831] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.198431] binder: release 25060:25062 transaction 10 out, still active [ 338.205347] binder: undelivered TRANSACTION_COMPLETE [ 338.210698] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/13 23:37:49 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080)) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x64, 0x0, 0x0, 0xffffffffffffffff}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/13 23:37:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xd064030000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:49 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x1b, 0x4, @thr={&(0x7f0000000100)="f54fa5afddb4520aac65068f76360d4d96b5252add3b1a745ec7cde641a885", &(0x7f0000000280)="fa9c545b680abf87e089b4442aeeb9f52283bad740b3d228d197ee0b9ed1b359719861c6810e1aa0917c1af12fab2113293a0b41e7a9cec6696bf3d2010bd11b579c3cb3003f00e390600d1e1fe4695c693235e43a252762e8b81952d0e1f8d8316d4deb6cf221d44fe7f141951b146be1eda5a3e6497d9c386e9d1ecbbffff90430ee3736bfb9d5642bb44bff71f1e730fa763d20860ff740faa74244d027767c949783caf82ac5aceac94f8fd1c50697629b8dc152a299ff24264912957c34450f834811d207a9f6e4be946273dae82da47293"}}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f0000000380)) r1 = perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3343, 0x282080) recvfrom$ax25(r2, &(0x7f0000000040)=""/41, 0x29, 0x2022, &(0x7f00000000c0)={0x3, {"52b02891e12a68"}, 0x6}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)=')PL\x00') 2018/04/13 23:37:49 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control//ile1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="7bffff1d050000000000000001000000"]) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f00000000c0), 0x4) 2018/04/13 23:37:49 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x6]}}, 0x1c) 2018/04/13 23:37:49 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f00000001c0)={0xd9a}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140)=0x7ff, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$netrom(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@ax25={0x3, {"fc132bfbb71640"}, 0x2}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000400)}, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f00000002c0)="b805000000b9000000000f01d98f8958010967420f0966ba410066b8030066ef83b90d0000000d440fc71d00000000654a0f01c80fd42e660fd4556fb9730200000f32"}], 0xaaaaaaaaaaaab20, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0fec8cdfffb8b6008ec8baa100ed8044dca70f005943f3f30f236f66b9360200000f32f4653ef30fbc9e544d0f229c", 0x2f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000200)="cf4ca53c093091bbdb36e9f418968cafb5b900b374fdb668c58ad5ca4dc7aa3d26dc4f952f074a582123c0478dc4a5594e7410eed289cd30b30b0e9e948b899d50f137e0e9c91f7e806f341f5b527f9f682b160f8f2411f0735936a165f85542dba20823cf1c84252cfb84181e716cbe063520053bfc2fc8ac782cdc95ce171b348009a8cd1d9b", &(0x7f0000000340)="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", 0x3}, 0x20) 2018/04/13 23:37:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x12001, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2f2, 0x80002) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[{}, {0xa, 0x6}, {0xf, 0xfffffffffffff9bc}, {0x3, 0x4}, {0x8, 0x1}, {0x8, 0x9}, {0x4, 0x7}, {0x8, 0x100000000}], 0x8) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x4, 0x8, &(0x7f00000035c0)=[{&(0x7f00000002c0)="0f0bf066db1b42db54071c8b86335b5b9e1ad8b4d60ed74b85a851d596fa6e65030b242cf7594089af10c8eeb5403df52bf49d372a123a4c956a03b22228c4974a342ede28d5cc53aa74f54d06a106e90857ee8f17f9faaf81d29c3a9a14c215670138753c51814c38c7c9c04f8f0308bdf8dedc3fec543d49dfa06a616ea3fc7d83f54a0f4fb57ff26aea5a72fd858ae4", 0x91, 0x8001}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="0203c86b8cb78de116447f3791e77ed5ae4f4e2182e922700e5ad174148133a05a37cd107036ff9394904e3c0f798c1933d4357e285560bca29a4af3c37a1931cb8eb6f5aa8ac429d2efeea5a925568d80bd7fb28a74b5975c145eec0789f39738bb5fd3e43884a6979e4302ec8b07069e2220e9dfbfb2502eb48bbe53be68dd1cf0f54d6bb54d08cd999a123ff16f812d35964b11e20947b68f9ce2a16f59033688c5058cf6a6eb949e99b61969fc60ec7d", 0xb2, 0xfffffffffffffffd}, {&(0x7f0000001440)="f875426f4b20e4b146f0412cbcd0d275f0ebd01cf59b8e73a054e3ae0dafae9352872b7fa8832656f681e985d93fb0ed8b9f426b5381ad1151d0245e8358c97faada0a50432059a894ebfd243e9094e47dd58ee5ac321242583a545b2d90b867231939d826858470b40ffb97c5ce7f556a5b37752f8cdccea6fefffd40966e80fb766b5374033577464e799c01ca35efa5630b388a79601366251675e8ea4b5e3055c1d0cab29d2aff65749dc787e17cecbf90328d60e28e5e37f69b85ea1199f9d5e4e1a922ff969dad7cb90448df8e9ab7", 0xd2, 0xffffffffffffe473}, {&(0x7f0000001540)="1222ba4eca8b92f3457a86a1c2c5e19d4354818a8bd9312a502fb9ccd9f463ff9aaa12c7d4ceb620c5d48aa6cfd7fe1be4203836579933c9b88b89030f52c62eaf94ecd0fc37a058014be7d85f3408af0fcb1693e41b227a69ca2d7da917bd5688e9a832a185375a5abf6c0fd86bcef84edf9edd4831fb7ce94ec42f9b5c691af422d6156c7615e051c7eec8faf5461f9bf35ec17acbccc2a1f59ad387d285150b71c2aa909ebf707fabe86fa9943c86ed1af3cbd43c801aeeb175ffa8c28d74fee21524bb8013ef3c7b63dbd1b2ce02c9018fde68e6a84fa060ec7921e85dc037953c4e60d312662dbb195c6ea72d9a197fa2e735e55e6dc355d3cc1bd6d219c1eb79d88d7af0e43808e5fdc36eb388c9e512a8f474b0e881c53706544d3a97349f69e077936225c289eb18a0bd2ce8a5324855cac059bd2664f7aa90af96b16b13d4c4f5ab579ca7d47b7e507b0814367d2d86e33c2810d92f817d23711611f6c55bb275868b7c7e9f52f382350e63411d8842e8bbef33bb473de489d6ec228b20d71420b87c1b609b94b471c81939ed6913c2e6886cb16ec56742aca902f5ce2e46e6ecfa7350e8f8eb1cbc0cacc4c5f8fd61edfbf2411d91fdb894071795506dc5ced5247fa173974660fccc011e09e25feab3a12c45017fd39d2f2ddf5fbb3124a918400d2dd31014fc74b8ae2b3f8d009785d6039e43fc61185c6ce8c408997a1852885962a23a9c2146b7d79c4fb191dce4c60469454b6f0a1439569ed327166869c53f6286acc49c7bf215c178b18c2971aa20c30750e8230f3c4317fa3f2b1e3aab6a7bbcbd01a52749b4df90f9ad8c3ac0b294f3eda33fa7141b1b37f0ccf711752f6d8a60d14443050f5a66784fe68ba7b1dcac376c2ce8e635a80e54e45c109edcb40846ee0cbb88f1d142c3572fad548234a7e99ea40738f6c9ceda3a0ffa86e16efc559dc776b45811c0e4c22a020f75dd1a16759533796334ae6e2a9fe624564d0089a0d52362ff6674ee4b0effd0a068ef38c6e2bd66e7f541e0f8cb60c8817e0cef47cd93754c7b521af29f74e402af236ee39ccffaceb99d023890364546834a2c6b0bac98f3d5defc644f55d3a24814183944e4d32cd67e64d64c5cf7b541e4a82740bde33c1f9f63067e4e1214dfc37225e684d8b24c57b4ffedfc83114e7e20ad56cb3cd75c969c26600399182dd18f8a1d7bf96375cb09d23b072ba5eb9dd8eb67ad5b9ce4004999c06cc25eb132c16725917d9c44facf58c67aeecc736597500dea14cfdbda56a9af1d695b0219fff07ebc52395de417874cda04f029092267ef1f104c2d46fc601d4c2397bb9d7ed3c1388dc64fd61c9638b18d8bf47c6d0af8cb42dda45236b1135bd65711943e6d2aab10858a874c036bc67bec000384ec38aad7a0d45f54a3de54cc79ef437431f376956b1ba99800df9ae835eba70f8a9fa97bbf94b19b63258b2886631447e4ff12c42e4343a4cb3a73d57415df5a793611e5f236b8de4e89ed893cb6c0b846566e9c42f750c40d1ebe5c3fe8f0d86f9a9f3204f2da584c85c40022544bdf3809c2b300dff611b579e95dfbba676db1d0d45296b2275ce6b6010c94ea370ce3ffa003fa700c16b10385ab24e45df75ee217a63f15f587f8ca709bb1d3c44dbb60492d2cc91a0675e45a88e518bf1ba518c77032c95792a4c20c8d99e416ad610f033b2b831e12f472937b90221b6fc217c647e82dc8260222df6369372ce999f2df00ebebf93793c1b1378b6058834a29b29de2c74ede7bb0c048b093e9a228f470a1a06eae9a649d65363a7545e13ba8a8cfa72cff6cc303ee0fc54f021da4be190cb06d03dc3a4a4ae27687edb51c0862122aa2328eb2ca0b133e644ea63c379df8da3317b1a9af516f0849a60885daccbb17951143638203c10b6356d4743e946deba2f412e982ca0a836c81b7eae5a2b689dfdc5b600a4c8ba50fd3a1b195a401281417fda943adb64d79935e4da0e3dd2399d4139500159a8ae85783dee3bbcaf396caf575f54d81e92ff471a4869d218ac2664166787d72b5b6a74a3820112ae6fdd329cdabedb27936bd02140f6aa0202ccdb7d36034f22dc3e483955394638be3fd20ed7c11acd6cfcf7cf68307afdcc642a2e6b12b0d39a45f4801067bebfbc7dfd62a56b5b171bab651914804bdcee76a0fb8b0c1fcf1d8f418a274366f1e7e4895a47591790342bc0c166f00f6b102a4b4ef9520a2f40bc55bdfc819e79db1ee35fa7946f81442e83adee70e3dcd3a87bb8ffe7bcb5e4cbdd7fcfc7037d6c12d1222fd6b38adb372e0731eb953029d3d573874ab516e97b365b6fda9d0f9cc84a796d4dfc1a1846a4dd8c37a9638e1f2658697ccea6d0e31d9b5bb3d25d4735ee231545d55827bc0c61d7d15bfbdcdef167b39f66fd6350f2d7b67399e0181d41bba50d6792d1d23581a0d73a7dd0d59b9e0cfb7829cb043a002b51264112d427fbb590b59d68abb4265adfad379816af6eb5d17c2809a1d8adc40b13378f6ccb78740391025f9bf0460c977aeb55259839837e34e958867186095843041ecfa5e824b2c511f0d48b62f69bc1f9ce6a44ab884d8fbb12f2b56fff570ebe2aa393875a1ccab024c8e10849266fcafec906ae6bbc2f68cfde4112f4f88afac7cd4eb59f434b641a32df980a5cc1763d52ef116110d3087afd1169e8d2a69c1057a77a2825721d85c4cd06e1910d4732c5b3772a2e71e26ef2ba78475bb55c94f939c14d806d5331317b7b4817655bae6b7c164341568b8d94f3504b1eb0161b1e0d899464479dc57ecf9121d1dc37ddddd352607db7b8900bfd5eebe0e9cbcf40b03fc8e8505fc2f0f9041e59235fee640d880d1f496422e0d99252077ed6a4377e0ec38df01f2740cc1107a613cf6df37333005b2efc6cd44f72572f45dab897c272e86e95d85528b7b27cb35a45c0fa4cdbfb73e59150390dd0ac4cc48029a0792c7c930aecb80ac22da06a44cb2244d1fe9a1af064f62948f17007d62c38ec2bbc09b6c34b1424f7659330c5696168c8c9b1af1268f35bcd06db715ea96ab6bd266a78a117344bce7869f83dc6b65ba6a0dc2244b2c9eb72c998801ad85626156b0b89afc600e2a098e93b28990510b229b90a36421f1eb14b424b94c17e8f9d9bfcf6cc21c2abac254be05ee9f9e09184d4497b3118fbda2f7bcee16900185730906c97d00f44e97986955477daf5a919ac978f2142e09c54c7e0a67a95cc8722cdd26761102f42b173be034bb595af319e2a8b63601a287284a1862becbfaf283077edf0cea265e049819d16b05435df6e608860dc9f38d313a3047d29f8e5f27ca1115e4d145f68a049846ca6d90f3f0df8cb049e80a89628c3a1d427edcd55f23b1d5000f67f5598eae33b51d115bf2a4ea02bd185baf0bdd634e4390750ed8c76c1033d7ebec392ad7b1d13bf623563ea33c409f9abbddf68b6686a59e300cda6d2697baae3bbeff84b19916cc481173af26f9441f595917425e06643c6417d047e4084fea6cba803c1c2245d90feacc00f472ed4159507f28c6f31916ab9ba466700f5e5f2cbc07906143ec39f715f124ef6d2b9bd20c54be1e96114b6e69a09fab052ce5bd46c3d4c54e601e2da64145de506038f9dc033d42e69b31f4395e5b840e22fab4a4450d95409b0021f95f8208e0cbbf141d1334d6c676083feb7cec04b51d5a3472c4702e2d13770e301b605343f16b6b1601f2038a414d7c2bcfe17e2455aa1b03c4c830fd7ab20dda121278a244078c674dec5abc324440e1dc0170544894837a4182bf5de75e35c517208113c4b4f5b10672d94bd9cdbeed86ed6ebcedc175c282433d8ad4c487d1bbe1bd892b4ac53c3c62473f5cd18de37ea7606949ba798d666ed87592f1d87e08f6d619c4205823cf6bd2c88d183fb775de74392ed5c7f8d45b932cad83236ebfef920fc68af9b4beb415c3a542e9afb0ed84fe97352a66bfdd4e70a233e7ff0d05c09cf1419ae20010ebae473addfd130462090a238cb7e2f1dce1f0b47e38d0116c14cbc5f270925c9d97c50e0928c3dc83fc2e62577d725ab2852008a209646e0132bfe2a6b37d2b198bf585a3eb57927255381c83a6f736ae5de434675ed486187fc6dcd2651b2686fbf86c361459f21e63c8a30c24811f575fff8f3b27ea620f3948d5c5bdab88555feb4785ffd62c045359ba3ffa494c3c47dccdbd9d7a373656c6762401fca085bc67a924ab8391e1cdf021a354eb70176451b8c332cd806478c4f9c657f1b4b168eba0caa0ea1929ad05b15982fa813d0dbeb16e7e5ab11f13d3eab2be833ae239cbdd90fddce6864dbd0249f9396f4e2c90ed545c5ed7e7c91ef18e41a81de3b3ac064ab746f10d10875dfb1a1e1c3230885725aafe08774f4a63730bdfa9e4f6f79c4f229e4121ca73f882f900f4a08ad0bc24fa4cb34aae97016fab3c91f1c3d08f7143a810742d187c296a8743797aa9232ce53136e2d28e31f986e3391d4a8fd86ec6ba59943b7a7b801873b16722fb1966959761d2ea22ddc1205957e5cd673f7bb713ef182d947c478a2dd9b568d6fa78a0602a6ff6bec5d141ed4dd77e9558f98d7ff85c8b00e17ae8ca2c9d006e748336bdfc3426d47c89f140452c49a9929aa0343ed5ac0d477407dab11199c62066e1c16c2dee62fa6260f4d4cc17db7c9ef56bc86e0cd449ac3501c1c4b6fd53af4bde996fb298833e855b81afabfd1ed0d304bf403084977ef4af809375a5858453ad1d0bd230df80ca85f1e5bf49c80e9b887241a524125c476773d6927a1b0a0f123150e7556dad41ad16b745ccba6cd4e7d1b1e1e4c2672e898a0193f7b78f7f4869ad656fb25f297a72f1c1b4872040e9933fedf61be9dc77c01a0dfe0d113ed8266d60016dec137511492c31054129721a5e014d7a5a337b0cdc06d50a49df261521d70f3a30c5b54764abee79e6d033d37fa813416bc8779baabbb2fdb6cd1397782267d347960f5028956ca488dc28dc5ffdcae1a10a1098a42cd9e5b9840344771d81d3051f8f2f10fde14c203d0dc6bf86a8a1f5abad301ba9e4981a182ca11f3483f84aa9d5877d2b6021fe32ddc0665fd33cd829f572e60163c0519e53683705294bef6fa961e97f166f256f6dd7cb10838a617b4bc2ffa470b746694ca7851590d7d0e08149aca1700a18e6f5987f0eea9e66e6b0fc4248322117cbaccf9bcfd37203104c6d3eae9a426fd571567a34c36acd7d46aca37919da321e4961e38a516927c9855cb612a94d30b080f9f1e1588466ed07169b1ae955008edcbcc9f603bc2696c56ccfad96474df2ef9b423a5438a5b7082fc10ece1b5f170615a60ed90dc84f0195e6399420c37026a8d3f39ee7ecba48767324afd33a1f3efbc682da8b01fa62f5660c6c549dcc741b710b9ac95d32f84598e6f75aec81677dbc7e4b79e2e3f984aeb101dd269911882c2016fde114d67387eca0e457bb2e11e73bdc5c2d186e22bb9093fe6185dc2915454d9d52c920bafbb0a07d50e6db9ac52d0be6eb565018d9da200fadb232bbb45a5e3d0cd2a14600aaf41f55f780654a18922824c16760a73f6703f41b8aecff20675167b391dfe3e3331e961cf37c28ab134334526f2b6bec412875bb908b07089caeb18e3c5cee302db35c42e1d1e0474e05c51303bf5b68d5562ae85f8e9eadb86beab021c600c76525c7965c9c01b2edb3621f2afaf17695ee5c49ab45039c2ac3ea3f0f1ca2e447a65f9b979408d4608afb62cb91a3a429", 0x1000, 0x8}, {&(0x7f0000002540)="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", 0x1000, 0x40}, {&(0x7f0000000200)="b0f89fc985eefc53d4eff8e9bd166845711cfdc3823e0c57cd9eb73e5fcc7501880c8e21aa62", 0x26}, {&(0x7f0000003540)="e56d47a31b6b3ff964df4d52f2324b8a6962c4ae80d3e4321ab6d16a82ead946e791e6db1ce795b1e759db489e879b05336fee0a4d2a09b10ba8f72faf57c3d03cbe", 0x42, 0x5}], 0x8000, &(0x7f0000003680)={[{@file_umask={'file_umask', 0x3d, [0x36, 0x34, 0x37, 0x35, 0x33]}, 0x2c}, {@creator={'creator', 0x3d, "57faa682"}, 0x2c}, {@gid={'gid', 0x3d, [0x3a, 0x39, 0x37]}, 0x2c}, {@type={'type', 0x3d, "47a67010"}, 0x2c}]}) accept$alg(r2, 0x0, 0x0) [ 338.216271] binder: send failed reply for transaction 10, target dead [ 338.252728] FAT-fs (loop0): Directory bread(block 2) failed [ 338.268269] hfs: unable to parse mount options 2018/04/13 23:37:49 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400100, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000200)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='.wlan1lo\x00', 0x1) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0x2, 0xc9, 0x2, 0xdb83, 0xb}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000200)=ANY=[]) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000180)=0x80000001, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @broadcast}, &(0x7f0000000140)=0xc) [ 338.301888] FAT-fs (loop0): Directory bread(block 3) failed [ 338.334045] hfs: unable to parse mount options [ 338.340699] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:37:49 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xc0fe]}}, 0x1c) 2018/04/13 23:37:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000001000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x87) r1 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000040)=0x10, 0x0) r2 = dup2(r0, r1) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @empty, 0x9}, 0x1c) [ 338.352152] FAT-fs (loop0): Directory bread(block 5) failed [ 338.386634] FAT-fs (loop0): Directory bread(block 6) failed [ 338.442678] FAT-fs (loop0): Directory bread(block 7) failed [ 338.473926] FAT-fs (loop0): Directory bread(block 8) failed [ 338.487763] FAT-fs (loop0): Directory bread(block 9) failed [ 338.523584] FAT-fs (loop0): Directory bread(block 10) failed [ 338.544275] FAT-fs (loop0): Directory bread(block 11) failed [ 338.605258] attempt to access beyond end of device [ 338.610392] loop0: rw=2049, want=246, limit=2 [ 338.620815] attempt to access beyond end of device [ 338.625906] loop0: rw=2049, want=247, limit=2 [ 338.630702] attempt to access beyond end of device [ 338.635757] loop0: rw=2049, want=248, limit=2 [ 338.649120] attempt to access beyond end of device [ 338.654373] loop0: rw=2049, want=249, limit=2 [ 338.659238] attempt to access beyond end of device [ 338.664246] loop0: rw=2049, want=262, limit=2 [ 338.668808] attempt to access beyond end of device [ 338.673819] loop0: rw=2049, want=263, limit=2 [ 338.678376] attempt to access beyond end of device [ 338.683346] loop0: rw=2049, want=264, limit=2 [ 338.687903] attempt to access beyond end of device [ 338.692883] loop0: rw=2049, want=265, limit=2 [ 338.733364] attempt to access beyond end of device [ 338.738425] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:50 executing program 3: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000400)=""/17, 0x11}, 0x0) getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)="61741ac452787363876561746500") pwritev(r1, &(0x7f0000001400), 0x2a6, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/13 23:37:50 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)="2e2f636f6e74726f6c2f66696c65ffff", 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:50 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x301000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000000c0)={0x0, 0xffffffffffff4fd2, 0x2, 0x90, 0x1, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23}], 0x20) acct(&(0x7f00000001c0)='./file0\x00') r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x7b}) sendto$inet6(r0, &(0x7f0000000140)="cfab66411fa0accaf282abeeab7e958cc7a7cefca0a5cc223c9f1be18e875dd663042068f1cf84e7da", 0x29, 0x800, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x1d}, 0xf1}, 0x1c) 2018/04/13 23:37:50 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x100000000000000]}}, 0x1c) 2018/04/13 23:37:50 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100000000, 0x10080) ioctl$LOOP_CLR_FD(r0, 0x4c01) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x140) getsockname(r0, &(0x7f0000000300)=@llc, &(0x7f0000000380)=0x80) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x81, 0x1, 0x3, 0x250, 0x8, 0x5, 0x1, {0x0, @in6={{0xa, 0x4e20, 0x5, @empty, 0x3}}, 0x788d, 0x8, 0xd, 0x5, 0x6}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x2, 0x8, 0x5}, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x1}, &(0x7f0000000400)=0x8) 2018/04/13 23:37:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000200)=@nl, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/24, 0x18}, 0x0) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80002) accept$netrom(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001140)}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40100, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r2, 0x8906, &(0x7f0000000000)) 2018/04/13 23:37:50 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000052f000)={0xa, 0x800, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0xfffffffffffffd1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x33}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0x2430}}, 0xe8) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x5, 0x301000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x78, 0x148, 0x200, 'queue1\x00', 0x4}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x600, 0x0) epoll_pwait(r3, &(0x7f0000000080), 0x0, 0x1, &(0x7f00000000c0)={0x92cb}, 0x8) socket$key(0xf, 0x3, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070207021b00000000a88e5f0b0000"], 0x10}, 0x1}, 0x0) sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/04/13 23:37:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xe065030000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000200)=ANY=[@ANYBLOB="7b00000018000000000000000000000066a4c8c0ab58014734af27aa5b84c5dec7f27c14fb6cafb44430b61254724f00f4dd6d177a2b243fad3fac1df9fa8f49e1e063c0e90a25a8a00a7bc348fee3e35636fac1af0d7654c7fa00c677962490199064ff764301c44dab8c9968dbaf022bc8b9eb392f511c78818d7d6e70d0d171bf6c2ceff3e1250d4b27368da39e52577b11155b9a8fdd94a7acb57696bdddb75663f12feda3e1bd408469240e6c6d2347ada77131f3cce59c46dadd2527fe"]) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000180)={0x35, 0x4, 0x9, 0x92, &(0x7f0000000080)=[{}, {}, {}, {}]}) 2018/04/13 23:37:50 executing program 1: syz_open_dev$sndtimer(&(0x7f0000001480)='/dev/snd/timer\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0xc0145401, 0xfffffffe, &(0x7f0000000180)) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x2, r0, 0x1}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000180)=0xffff, &(0x7f00000001c0)=0x2) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000001440)={0x2, 0x9}) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r3 = getpid() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000000c0)=r3) bind$ax25(r1, &(0x7f00000002c0)={0x3, {"b842e42d2d3906"}, 0x7}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0xd2abc50cdc4acfb4) syz_mount_image$hfsplus(&(0x7f0000000300)='hfsplus\x00', &(0x7f0000000340)='./file0\x00', 0x40, 0x2, &(0x7f00000013c0)=[{&(0x7f0000000380)="b8060de702f3edfd8bb1db2c5cdaf39d96f30b30d8ba67ba64a6ea4e3374cf3918e8258097fc40bf01b487153ae9b4", 0x2f, 0x163}, {&(0x7f00000003c0)="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", 0x1000, 0x1}], 0x8, &(0x7f0000001400)=ANY=[@ANYBLOB="7569643d35782d36382c74852c0000000000000000"]) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0xffffff4c) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000040)=0x5) [ 339.226604] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:37:50 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfc00]}}, 0x1c) [ 339.276223] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:37:50 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000000500)=[{0x8, 0xa3, 0x3, 0x1, @tick=0x1ff, {0x3, 0x6}, {0x8, 0x4}, @time=@time={0x77359400}}, {0x3, 0x98, 0x8000, 0x10001, @tick=0x7, {0x7f, 0x8000}, {0x15b, 0x7fffffff}, @time=@time={0x77359400}}, {0x0, 0x80000001, 0x80000001, 0x0, @time={r2, r3+10000000}, {0x5a, 0x9}, {0x7fffffff, 0x7fff}, @control={0x6, 0x1, 0x2}}, {0x3, 0x1, 0x5, 0x1, @time={0x77359400}, {0x5, 0x3}, {0xffffffffffff7fff, 0x5}, @ext={0xad, &(0x7f0000000180)="5c3183109374382d8140f732ff7569840b77ed1e983678e531bff0159086ddddb352482f6b1bf09ed0f407f057a83cf2003dc02a6cbc9e15fe57605d4e987a0a420d5a52b537f52c68d9feb0a051d8205a63191c12cfd20f373178e4ca8dc0d5a8ca1d703b247369fec828c342d98f92e2370dd2b746319b3fc363a85eb9c9f249b83f760ea9fc766183d86e5fb8da8fc4d0e850c8832fc50fdeee04b9481c32da6fa6533fe64ac1456687e985"}}, {0x100000001, 0x101, 0x9, 0x6, @time={0x77359400}, {0x7, 0x4}, {0x40, 0x7ff}, @raw32={[0x6, 0x80000000, 0x4]}}, {0x5, 0x2, 0x462, 0xfffffffffffffffd, @tick, {0x40, 0x7}, {0x3d3, 0x5}, @ext={0xea, &(0x7f0000000340)="de1e237829481c7b84b647a55f350b4709951d56b767f7ecd12811783c6fb402fc93b5dfb25b751c597d3009e5721a6ba8379b07127f4d421df2164d7b99cce6a11b03449eb487a264f365b0248d45fee518f58f0a36fb2ec55ca220af8b1aa4ed66e0ea7a6854ea81a6636f7821769ed26af02820ab67810903766f3dd660788d76b7d0885e8df60f0f2cf7f41837638b886a019816ae0d62f11d66c62ef86a0c01bb2ab557edf053ad7f87b0c9d88e02398253fcfa29dcc2ffd6f3c4de483a95bd0d7a40bc53adfd8afe1053ef30b2e98a6aefe204d8933170d34eb0a6f22e4fe9b610d6a2fc195448"}}, {0xe8a, 0x10001, 0x3, 0x10001, @time={0x0, 0x1c9c380}, {0x595, 0x4}, {0x0, 0x7ff}, @ext={0x91, &(0x7f0000000440)="12351587c3408022502e7f39daf1e81d22c323c6b1d67ed1da9ce1005dfff12bdbb658e5f7399590e0b65520978e73cccc5b0aa00ebc8cd21fd8ddd8976f15a3d585c2f5a9e152656649b5fa7214b77c714c2959e0273b92c0a720bc62c6d97ec4364c7532367bfd1db8ff30de493b8600ca65961234a27ba0c6e11e64296cfc01f14c5d12ccb687e932d65a1b2eeff13b"}}, {0x1d, 0x8001, 0x0, 0x0, @time={0x0, 0x989680}, {0x3, 0x2}, {0x8000, 0xc85c}, @addr={0x40, 0xffff}}, {0x513e, 0x84, 0x49, 0x6, @time={0x77359400}, {0xffffffff, 0x401}, {0x8, 0x1}, @raw8={"3d6a8172001f2a8a21121ead"}}], 0x1b0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) ioprio_get$uid(0x1, r4) pipe(&(0x7f0000000080)) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0xffffffffffffffc1, 0x40) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000040)={0x7, 0x7ff, 0x80000000, 0x10001}, 0x10) 2018/04/13 23:37:50 executing program 4: r0 = socket$inet(0x2, 0x8000000000003, 0x33) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip_vti0\x00', 0x10) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000640), 0xfd, &(0x7f0000000140)}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) [ 339.334409] hfsplus: unable to parse mount options [ 339.345185] FAT-fs (loop0): Directory bread(block 4) failed [ 339.356281] FAT-fs (loop0): Directory bread(block 5) failed [ 339.386666] FAT-fs (loop0): Directory bread(block 6) failed [ 339.404948] FAT-fs (loop0): Directory bread(block 7) failed [ 339.420308] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:37:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000080)={0x4, r0, 0x1}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x7b, 0xffffffffffffff71}) 2018/04/13 23:37:50 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x80fe]}}, 0x1c) 2018/04/13 23:37:50 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f00009ec000)="1f0000000103ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1c) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x5, 0x2000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) fchown(r1, r3, r4) ioctl$TUNSETLINK(r2, 0x400454cd, 0x332) sync_file_range(r2, 0x7, 0x3, 0x4) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0x6, 0x8, 0x7, 0x1, 0x3, 0x1, 0x9d12, 0x80000001, 0x3507, 0x4, 0xffffffffffffff84, 0x2}) [ 339.439915] FAT-fs (loop0): Directory bread(block 9) failed [ 339.464510] FAT-fs (loop0): Directory bread(block 10) failed [ 339.472170] FAT-fs (loop0): Directory bread(block 11) failed [ 339.569964] attempt to access beyond end of device [ 339.575229] loop0: rw=2049, want=246, limit=2 [ 339.579813] buffer_io_error: 14 callbacks suppressed [ 339.579826] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 339.596903] attempt to access beyond end of device [ 339.602077] loop0: rw=2049, want=247, limit=2 [ 339.606655] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 339.626898] attempt to access beyond end of device [ 339.632078] loop0: rw=2049, want=248, limit=2 [ 339.636637] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 339.645142] attempt to access beyond end of device [ 339.650412] loop0: rw=2049, want=249, limit=2 [ 339.654964] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 339.662904] attempt to access beyond end of device [ 339.668167] loop0: rw=2049, want=262, limit=2 [ 339.672758] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 339.680785] attempt to access beyond end of device [ 339.685821] loop0: rw=2049, want=263, limit=2 [ 339.690413] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 339.698916] attempt to access beyond end of device [ 339.703943] loop0: rw=2049, want=264, limit=2 [ 339.708516] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 339.716400] attempt to access beyond end of device [ 339.721392] loop0: rw=2049, want=265, limit=2 [ 339.725940] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 339.771447] attempt to access beyond end of device [ 339.776540] loop0: rw=1, want=329, limit=2 [ 340.003286] QAT: Invalid ioctl 2018/04/13 23:37:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x9f6, 0x4) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x100000073) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0), 0x0) 2018/04/13 23:37:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = dup3(r0, r0, 0x80000) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x63b, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000180)) 2018/04/13 23:37:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') read(r0, &(0x7f0000000240)=""/146, 0x92) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{0x6, 0x1}], 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x2000000000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) pread64(r0, &(0x7f0000000380)=""/8, 0x8, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000180)={0x1, 0x2, 0x1, r0}) 2018/04/13 23:37:51 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)="2e2f636f6e74726f6c2f66696c6531d4", 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:51 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfec0000000000000]}}, 0x1c) 2018/04/13 23:37:51 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000000c0)={0xf26, 0x5ec7}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0xe785, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000140)=ANY=[@ANYBLOB="7b00000008006830f00619069df932cf7a00000000001055d0309f4fa1750000000000"]) 2018/04/13 23:37:51 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0xb, &(0x7f0000002180)=""/4096, &(0x7f0000000000)=0xfffffffffffffe45) 2018/04/13 23:37:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x3c65030000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:51 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @loopback=0x7f000001}, 0x3, 0x1, 0x1, 0x3}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)="a7692dc97d27a521c5134d06603867c43153afe4e8f92d2c0f992ef957414016b5aa8bd7dd640dcecc7524fb5518fb31730e0b0654934a3c2ea2f4cce12c755002d71d18027cfad9da2b3b82da93f48fed76cf12e166d0b7bbec71b3295f509f015916", 0x63}], 0x1, &(0x7f0000000480)=[{0x78, 0x0, 0x10000, "6440a5dbd5e6ef13e638682f006039affca8826a6d885f75443f13f6a36cae3091b45345abcbfd3c809ad6e57eeecdfbb487343fc8f1b13d3fa48f7eb443ae94bebda096fbe7bd8830772ad47b9cc0e21108414aa183b62cf6a9d29be08682bbe59e1d"}, {0xd0, 0x110, 0x7ff, "f5aeeae98430bc8b0c11908cb4bc1d06417ca739c19bf12f3b9f866e5a5b7a178b0bbf1b61d4646508513211cdd4aaea22c857f3e0a186f862a1507721241c3a5611050783880304248b5054c0539ed6b4a41e0b06986e976ea5b1c4bcd39df292b9ed689f23860d99780412d73e1378a814718fe30c3764ccd5b0453fcbf72f7875f3a951ac0ee0255bf77450c9f83a58b6cc4fdf62b770af45abf1fe68f08add8545db30e076d1e12695fa85528984d10006d30baf6064bc56698c5b"}, {0x48, 0x114, 0x7ff, "207386a09dc73ae085a49ed8871f9de30ccc576c3dee0c4606a1fb18ebd4bf699e85bd50972ac0f8398c96f1934fc2964ff5"}, {0x110, 0x13d, 0x3b, "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"}], 0x2a0, 0x4000001}, 0x4000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="01001a1b1b192c985e8e6eb7c73491c2f200000010000000000000000000000000000000101f03f1556297d70000000000000000000000"]}) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x401, 0xc0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x16e, 0xffffffffffff0000, 0x401, 0x80000001, 0x227f}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000300)={r3, 0x389, 0x4, 0x2, 0x100, 0x88}, 0x14) fgetxattr(r0, &(0x7f00000000c0)=@random={'osx.', 'posix_acl_accessvboxnet0\x00'}, &(0x7f00000001c0)=""/160, 0xa0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x60800, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080)=0x1701, 0x4) [ 340.210607] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:37:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, &(0x7f00000000c0)=@l2, &(0x7f0000000000)=0x80, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000a40)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000a80)={@dev={0xfe, 0x80, [], 0xa}, 0x78, r2}) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:37:51 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x40000000000005, 0x403, 0x4, 0x2, 0xffffffffffffffff, 0x0, [0x140]}, 0x2c) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000440)=0x1c) getpeername(r1, &(0x7f00000004c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000540)=0xfffffffffffffff0) connect$netrom(r2, &(0x7f00000001c0)=@ax25={0x3, {"f58c46cf4d1739"}, 0x5}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) r4 = gettid() r5 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x400, 0x30, 0x101, 0x3}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={r6, 0xfc00000000}, &(0x7f00000002c0)=0xc) r7 = getpgid(0x0) kcmp(r4, r7, 0x3, r2, r0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="6f7f000a0000ff6019a608817840c8799195d0e3b9b65ebcd861636365302e00586e29d2d400e7e09bf99f99c00aed602e93b1d03d5baf75600f8645fffef837d26c4a9ae8f9d3d5f704195359c71e4b314c284e580f45cf7c9c9a77a43c3768305590b9be2b470cdaab85ca769f63fb901804f217a09ddf4f498da400eb463351b653d24c1b788b82b0e6dd73da7063c43e19b490b0f4e910cbfe67d5f494ccc72e7bb98dcd82b10872be239e7c5d99341c"]) [ 340.261804] FAT-fs (loop0): Directory bread(block 3) failed [ 340.280858] FAT-fs (loop0): Directory bread(block 4) failed [ 340.291366] FAT-fs (loop0): Directory bread(block 5) failed [ 340.332834] FAT-fs (loop0): Directory bread(block 6) failed [ 340.378350] FAT-fs (loop0): Directory bread(block 7) failed [ 340.384889] FAT-fs (loop0): Directory bread(block 8) failed [ 340.395796] FAT-fs (loop0): Directory bread(block 9) failed [ 340.405453] FAT-fs (loop0): Directory bread(block 10) failed [ 340.411650] FAT-fs (loop0): Directory bread(block 11) failed [ 340.436992] attempt to access beyond end of device [ 340.442126] loop0: rw=2049, want=246, limit=2 [ 340.446704] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 340.454707] attempt to access beyond end of device [ 340.459744] loop0: rw=2049, want=247, limit=2 [ 340.464313] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 340.472229] attempt to access beyond end of device [ 340.477218] loop0: rw=2049, want=248, limit=2 [ 340.481804] attempt to access beyond end of device [ 340.486784] loop0: rw=2049, want=249, limit=2 [ 340.491358] attempt to access beyond end of device [ 340.496339] loop0: rw=2049, want=262, limit=2 [ 340.500928] attempt to access beyond end of device [ 340.505931] loop0: rw=2049, want=263, limit=2 [ 340.511248] attempt to access beyond end of device [ 340.516231] loop0: rw=2049, want=264, limit=2 [ 340.520798] attempt to access beyond end of device [ 340.525770] loop0: rw=2049, want=265, limit=2 [ 340.561394] attempt to access beyond end of device [ 340.566439] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) dup2(r0, r0) 2018/04/13 23:37:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xbd0d0000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:52 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x400000000000000]}}, 0x1c) 2018/04/13 23:37:52 executing program 3: unshare(0x8000000) setpriority(0x2, 0x0, 0x9) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0xfffffffffffffffe}) mq_timedreceive(r0, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/144, 0x90, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000004c0)=""/214, 0xd6, 0x0, &(0x7f00000005c0)={0x0, 0x1c9c380}) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)=@ethtool_regs={0x4, 0x39e, 0x56, "bfde8508f9612944f2c23bebe564d79b3f111e4a0328fdba4eb546e313368221d6bb7982419a1c19003c1ac1c86e89564d769e788adb0871d513bc6b48f4082e377cd26ce10a941ceafcadb6d852131b14490779b899"}}) 2018/04/13 23:37:52 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) recvmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000140)=""/172, 0xac}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f00000007c0)=""/89, 0x59}], 0x8, &(0x7f00000008c0)=""/87, 0x57, 0x6}, 0x43) chmod(&(0x7f0000000200)='./file0\x00', 0x40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) getuid() 2018/04/13 23:37:52 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x50000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x470, 0x258, 0x0, 0x258, 0x388, 0x388, 0x388, 0x4, &(0x7f0000000040), {[{{@arp={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffff00, 0xffffffff, @empty, {[0xff]}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}, 0x98, 0x401, 0x9, 0x9, 0xfffffffffffffffd, 0x8, 'team_slave_1\x00', 'lo\x00', {0xff}, {}, 0x0, 0x8}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={0xac, 0x14, 0x14, 0x13}, @empty, 0x1, 0x1}}}, {{@arp={@empty, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffffff, 0xff000000, @empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, @mac=@random="72c10f6efae2", {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x100000000, 0xfffffffffffffffe, 0x100000001, 0xff, 0x9, 0x6, 'veth0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "31f7788a9b2ffe6d41170ba2af4fc946c56abf5287a5ebf1f5d4f09819ed"}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c0) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0xd2, &(0x7f0000000140)=""/62, &(0x7f0000000080)=0x3e) 2018/04/13 23:37:52 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)) 2018/04/13 23:37:52 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)="2e2f636f6e74726f6c2f66696c653102", 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b}) [ 341.141402] FAT-fs (loop0): Directory bread(block 2) failed [ 341.163195] FAT-fs (loop0): Directory bread(block 3) failed [ 341.185208] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:37:52 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x1c030000]}}, 0x1c) 2018/04/13 23:37:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000af1ffc)=0x404100fffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000e66000)=0xfffffffffffffffe, 0x4) 2018/04/13 23:37:52 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x730000) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x600001) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @multicast2=0xe0000002}, @in={0x2, 0x4e22, @rand_addr}, @in6={0xa, 0x4e20, 0x100000000, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x3}], 0x3c) 2018/04/13 23:37:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'yam0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0xa4ad, 0x6f, 0x5, 0x9, 0x8, 0x7, 0xfe0, 0x19429472, 0x3, [0x9, 0x7f, 0x1, 0x1ff, 0x1f, 0x2, 0xf6, 0xffffffff], [0xae3]}}) 2018/04/13 23:37:52 executing program 7: syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f00000014c0)={[{@disable_sparse_yes={'disable_sparse=yes', 0x3d}, 0x2c}]}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) [ 341.213181] FAT-fs (loop0): Directory bread(block 5) failed [ 341.243603] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:37:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) tee(r0, r0, 0x5, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) [ 341.282383] FAT-fs (loop0): Directory bread(block 7) failed [ 341.292926] FAT-fs (loop0): Directory bread(block 8) failed [ 341.330478] FAT-fs (loop0): Directory bread(block 9) failed [ 341.359803] FAT-fs (loop0): Directory bread(block 10) failed [ 341.365481] ntfs: (device loop7): parse_options(): The disable_sparse option requires a boolean argument. [ 341.387438] FAT-fs (loop0): Directory bread(block 11) failed [ 341.435574] attempt to access beyond end of device [ 341.440731] loop0: rw=2049, want=246, limit=2 [ 341.481608] attempt to access beyond end of device [ 341.486820] loop0: rw=2049, want=247, limit=2 [ 341.500880] ntfs: (device loop7): parse_options(): The disable_sparse option requires a boolean argument. [ 341.505882] attempt to access beyond end of device [ 341.515892] loop0: rw=2049, want=248, limit=2 [ 341.529296] attempt to access beyond end of device [ 341.534401] loop0: rw=2049, want=249, limit=2 [ 341.539952] attempt to access beyond end of device [ 341.545160] loop0: rw=2049, want=262, limit=2 [ 341.550565] attempt to access beyond end of device [ 341.555638] loop0: rw=2049, want=263, limit=2 [ 341.560730] attempt to access beyond end of device [ 341.565791] loop0: rw=2049, want=264, limit=2 [ 341.570851] attempt to access beyond end of device [ 341.575914] loop0: rw=2049, want=265, limit=2 [ 341.616389] attempt to access beyond end of device [ 341.621512] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:53 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x30, 0x0, &(0x7f0000000080)=[@request_death={0x400c630e, 0x1, 0x4}, @request_death={0x400c630e, 0x2, 0x3}, @request_death={0x400c630e, 0x4, 0x2}], 0xc9, 0x0, &(0x7f0000000240)="42d38e23779504995be225712d0bfd90ac6bfa2016e8f98bcd3ef6cf748dc26fbc964e99bbe07404543e768819ec87e4b3c1e3d28c5a8834797112bb52aea0f111f4007b224766c956d27a15b5ee1dfa0d471efa94f667fc6bc3c1a7f10f4b1592ddff2608a52c03ebbda2b19fb9009ba73225414fdb227a44c167200fb6e359c01b5fcae986e1851bc3b6a40397dae296b24b6e85c1318f0514f6b7ab44d390a9e743ea6525809e701ce7863628e61d074239006d5f4d882bcce93df67223eb53ead1b6f82e674691"}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000001c0)={0xa0, 0x0, 0x8}) mkdir(&(0x7f0000000100)='./control/file0\x00', 0x0) recvmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000340)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/153, 0x99}], 0x1, &(0x7f00000004c0)=""/68, 0x44, 0x3f}, 0x2000) rmdir(&(0x7f000015dff6)='./control\x00') r2 = creat(&(0x7f0000000180)='./control/file0\x00', 0x0) close(r0) fallocate(r2, 0x2, 0x3, 0x3) 2018/04/13 23:37:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)={{0x108, 0x3, 0x8, 0x329, 0x50, 0x20, 0x19e, 0x3e}, "158e27f6c5c9285a97264728665379ac874a92a41c30cb82b20868a9f4b5f5cc6da79c98478b6fb8c60a7937e94483dfdbd8a7d38a8a312d910b8c5510131871c95e12fa54be55bc8af2a2c78fbaac38dda7441e0622125378eaddcef103059e05801c05a08c0f324f3ad16778047f1f565dc1a73060118d5f68f7e43527da7c36e1f04dd74265a6af9102b1e704f37b54db618324d595b251c458e0547e26d00f442c9e47049a7657a59b11fa1fcafde71b75378ef22a60dbe1068cc25fad5182608ce64599fd454c936d7e17de5f205525f0", [[], [], [], [], [], [], [], [], []]}, 0x9f3) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x230800, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000000c0)={0x1000, 0x2, 0x80000001, 0x1ff, 0x6, 0x3}) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000100)={0x7, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x0, 0x1, [{{0x2, 0x4e23, @multicast1=0xe0000001}}]}, 0x110) 2018/04/13 23:37:53 executing program 3: sched_setaffinity(0x0, 0xffffff10, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/13 23:37:53 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xf000]}}, 0x1c) 2018/04/13 23:37:53 executing program 7: clone(0x0, &(0x7f0000fbf000), &(0x7f0000c53000), &(0x7f0000000180), &(0x7f000025e000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000003c0)=0x30) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000000240)=""/188, 0xbc}], 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x12080, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000400)=0x2f6, &(0x7f0000000440)=0x2) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbff, {0x2}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3d}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2e}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) timerfd_create(0x7, 0x80800) 2018/04/13 23:37:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) 2018/04/13 23:37:53 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xbd0d, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) [ 342.087550] FAT-fs (loop0): Directory bread(block 2) failed [ 342.113399] FAT-fs (loop0): Directory bread(block 3) failed [ 342.119594] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:37:53 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x40030000000000]}}, 0x1c) 2018/04/13 23:37:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) [ 342.141359] FAT-fs (loop0): Directory bread(block 5) failed [ 342.155783] FAT-fs (loop0): Directory bread(block 6) failed [ 342.186129] FAT-fs (loop0): Directory bread(block 7) failed [ 342.201832] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:37:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0xffffff4e, [0x0, 0x0]}) 2018/04/13 23:37:53 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000000040), 0xc8d61e453367b0ab) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r3, &(0x7f0000000240)=""/384, 0xbc) signalfd(r3, &(0x7f0000432ff8), 0x8) [ 342.226779] FAT-fs (loop0): Directory bread(block 9) failed [ 342.250407] FAT-fs (loop0): Directory bread(block 10) failed [ 342.271411] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:37:53 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x4000000]}}, 0x1c) [ 342.348520] attempt to access beyond end of device [ 342.353776] loop0: rw=2049, want=246, limit=2 [ 342.362161] attempt to access beyond end of device [ 342.367232] loop0: rw=2049, want=247, limit=2 [ 342.373440] attempt to access beyond end of device [ 342.378543] loop0: rw=2049, want=248, limit=2 [ 342.383618] attempt to access beyond end of device [ 342.388720] loop0: rw=2049, want=249, limit=2 [ 342.394143] attempt to access beyond end of device [ 342.399176] loop0: rw=2049, want=262, limit=2 [ 342.405271] attempt to access beyond end of device [ 342.410315] loop0: rw=2049, want=263, limit=2 [ 342.415446] attempt to access beyond end of device [ 342.420476] loop0: rw=2049, want=264, limit=2 [ 342.425595] attempt to access beyond end of device [ 342.430637] loop0: rw=2049, want=265, limit=2 [ 342.477369] attempt to access beyond end of device [ 342.482452] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xffffffffffffffff, 0x400) r1 = accept(0xffffffffffffff9c, &(0x7f0000000240)=@nfc_llcp, &(0x7f00000002c0)=0x80) bind$bt_rfcomm(r1, &(0x7f0000000300)={0x1f, {0x80, 0x100000000, 0x3, 0xfffffffffffffffb, 0x8, 0x1c00000}, 0x800}, 0xa) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40) setsockopt$inet_group_source_req(r2, 0x0, 0x20002e, &(0x7f00000003c0)={0x7, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x108) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x2, 0x40) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/13 23:37:54 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="78f2ff00", @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x206000, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r2}) 2018/04/13 23:37:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xc50d, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:54 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xf0]}}, 0x1c) 2018/04/13 23:37:54 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x4000) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'ip6gretap0\x00', {0x2, 0x4e23, @broadcast=0xffffffff}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0xffa3) membarrier(0x18, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@int=0x6f7a4989, 0x4) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:37:54 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x30, 0x0, &(0x7f0000000080)=[@request_death={0x400c630e, 0x1, 0x4}, @request_death={0x400c630e, 0x2, 0x3}, @request_death={0x400c630e, 0x4, 0x2}], 0xc9, 0x0, &(0x7f0000000240)="42d38e23779504995be225712d0bfd90ac6bfa2016e8f98bcd3ef6cf748dc26fbc964e99bbe07404543e768819ec87e4b3c1e3d28c5a8834797112bb52aea0f111f4007b224766c956d27a15b5ee1dfa0d471efa94f667fc6bc3c1a7f10f4b1592ddff2608a52c03ebbda2b19fb9009ba73225414fdb227a44c167200fb6e359c01b5fcae986e1851bc3b6a40397dae296b24b6e85c1318f0514f6b7ab44d390a9e743ea6525809e701ce7863628e61d074239006d5f4d882bcce93df67223eb53ead1b6f82e674691"}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000001c0)={0xa0, 0x0, 0x8}) mkdir(&(0x7f0000000100)='./control/file0\x00', 0x0) recvmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000340)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/153, 0x99}], 0x1, &(0x7f00000004c0)=""/68, 0x44, 0x3f}, 0x2000) rmdir(&(0x7f000015dff6)='./control\x00') r2 = creat(&(0x7f0000000180)='./control/file0\x00', 0x0) close(r0) fallocate(r2, 0x2, 0x3, 0x3) 2018/04/13 23:37:54 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:54 executing program 7: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x5}, {r1, r2+10000000}}, &(0x7f000000ffe0)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x18002, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000000c0)=""/40) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) 2018/04/13 23:37:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f00000006c0)="2e2f66696c65302f2a2e6c6530ff00", 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)) pwrite64(r0, &(0x7f00000000c0)="a4fdb8821e1f43333b195bb7386c1b36f18b677aaf9af32e210735d6a0056d619d09747cf06b2114bc71975aefe0d694efdb862a4f1a173aeeaa1d83d4ff651595fabbfd86deb22aa8abbba4b00f44f3e5d91d2e2afe1a76ae50097fc06bfbe490d06764de7548a6f3af06128854033c08de116e75a29f7de3c132d1ad07b26bb51728dbb53964ba1474797c50e006a458010c2f5b415d2710daacdf8d8245ecce3538e852e1e696f11aecfb80eae19bb595baaa96d40beddd033342293863326e9deceb284e40516d598228545cee1d36bc0759e06ca5421f673d855153ca457c8bedfc67ffc2240bd79a3ccb2cb1e0", 0xf0, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:37:54 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x600]}}, 0x1c) 2018/04/13 23:37:54 executing program 7: r0 = socket(0x80000010, 0x7, 0x0) setsockopt$packet_int(r0, 0x107, 0x1a, &(0x7f0000000080)=0x2, 0x3c9) accept4$netrom(r0, &(0x7f0000000000)=@full, &(0x7f00000000c0)=0x48, 0x80000) [ 343.330342] FAT-fs (loop0): Directory bread(block 2) failed [ 343.361521] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:37:54 executing program 3: mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) r0 = open$dir(&(0x7f00004be000)='./file0\x00', 0x880, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x101000) ioctl$KDADDIO(r2, 0x4b34, 0x1f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_create1(0x80000) open(&(0x7f0000fc1000)='./file0\x00', 0x2825, 0x0) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x1, 0x0, 0x0, 0x9, 0xffffffffffffff00, "9990144af53bd3023882120a6032b2578d559ae7ee1be89c20b2eb75938e7496e7b3716617ec140579c0d4936871e514fd2aa7f59de97e4491820b94881438", 0x1}, 0x60) 2018/04/13 23:37:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="7b0000003df958091b11ef55b3920800"]) [ 343.392712] FAT-fs (loop0): Directory bread(block 4) failed [ 343.433529] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:37:54 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x8a14c85a47000000]}}, 0x1c) 2018/04/13 23:37:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0b2ec8dde0ac837f21ea3c8ad87b2d005e3767b69b411e685b6221fc2a592c7ea02378d03f39373588eeb19e9f8d36b20efb26d3f999f45b59f18768bd2ecf8618852c5437b3b0d1868fca96428fd547d7091db2d2276f79158503d1163235d14255272d32a6f90cdb86a175117d3336c115e469009f53b946332fbf50692a5464b01fec1b7e2a06e5d85fc05a9af375328408864ba90d24faa07c39", 0x9c}, {&(0x7f0000000140)="65e53292024ceceed3a7da7ef12162b82819b34f9b625c2021d6741e10aa06af7b809edc8cd2d464e38c420149893d0dd03635db2af8a5457c896c0abcdf05cd57d91d8b70e6c504adfd9b187ed394527b328a94e90eaa05b3a8a0a2525181a316efcf0463b8ceeac38e6644935fae3bb104637472b9e3f9b2207954b9b7", 0x7e}, {&(0x7f00000001c0)="62e2d99e94e90753572fbe2b93c04cccce5d64d9ac343f98f26caeca174579f9d419f65c6ad6e4c360ef9f81a06ebadf0ed90f48262bbabdda0bc42f87e10358e3e806ed9be30cf383eeb7bc79613ce6c5e1f54b9a619ef098c42d6095caac4d492c984663f1c4f41d953d8328a4a49d525e634066451f7e94e9ff095b816ab27e1b6dd60c08bf371bf4d5743b9e59e0272b2fc907cb8fa166681962ed8d9758f4d3da0ee3ce92ceb8ac94027bacefbfcd50c365d10b516cf877ba58893fe31e97a88944f477ad9edcdd335728622a08aa94b3d48cd9a7a64469d3dd12c1", 0xf4}], 0x3) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='{\x00\x00\x00\b\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) open(&(0x7f0000000300)='./file0\x00', 0x20000, 0x82) 2018/04/13 23:37:54 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) fdatasync(r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'veth0\x00', 0xfffffffffffffffc}) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x58, 0x80) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x8000, 0x9, 0x6, 0x9, 0x6]}, &(0x7f0000000080)=0xe) accept(r1, &(0x7f0000000400)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000480)=0x80) [ 343.501350] FAT-fs (loop0): Directory bread(block 6) failed [ 343.538867] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:37:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/8) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt6_stats\x00') ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x7, 0x100000001}, {0x7, 0x80000000}, {0xaaaf2a1400000, 0x8}, {0x2, 0x8}]}) accept4$alg(r0, 0x0, 0x0, 0x80000) [ 343.570335] FAT-fs (loop0): Directory bread(block 8) failed [ 343.615983] FAT-fs (loop0): Directory bread(block 9) failed [ 343.622948] FAT-fs (loop0): Directory bread(block 10) failed [ 343.635443] FAT-fs (loop0): Directory bread(block 11) failed [ 343.715530] attempt to access beyond end of device [ 343.720685] loop0: rw=2049, want=246, limit=2 [ 343.734762] attempt to access beyond end of device [ 343.739900] loop0: rw=2049, want=247, limit=2 [ 343.747240] attempt to access beyond end of device [ 343.752402] loop0: rw=2049, want=248, limit=2 [ 343.757605] attempt to access beyond end of device [ 343.762711] loop0: rw=2049, want=249, limit=2 [ 343.767773] attempt to access beyond end of device [ 343.772811] loop0: rw=2049, want=262, limit=2 [ 343.778917] attempt to access beyond end of device [ 343.783980] loop0: rw=2049, want=263, limit=2 [ 343.789202] attempt to access beyond end of device [ 343.794210] loop0: rw=2049, want=264, limit=2 [ 343.798840] attempt to access beyond end of device [ 343.803849] loop0: rw=2049, want=265, limit=2 [ 343.839462] attempt to access beyond end of device [ 343.844542] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:55 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xff00]}}, 0x1c) 2018/04/13 23:37:55 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000, 0x1, &(0x7f0000000040)=[{&(0x7f0000002700)="400000000002000019000000dc0100002c000000010000000000000000000000000400000000000000000000000000003d5ca35a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@data_ordered='data=ordered', 0x2c}]}) 2018/04/13 23:37:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="7b000000080000000000000300000000"]) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 2018/04/13 23:37:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x5dc) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0xffffffffffffff09) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5780, 0x80900) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000000c0)=0x40, &(0x7f0000000100)=0x4) 2018/04/13 23:37:55 executing program 5: prctl$intptr(0xe, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0xffffffffffffffc0, 0x8000) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1000, r0, r1, 0x1, 0x80) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000877000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000017c0), &(0x7f0000000080), 0x0) 2018/04/13 23:37:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xdbf, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:55 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)="2e2f636f6e74726f6c2f66696c6531f0", 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000b40)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376639, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x100000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) timer_create(0x1, &(0x7f0000000a00)={0x0, 0x2b, 0x0, @thr={&(0x7f0000000900)="b8d285ad07d4ed35c6e733956140e1283013fc499ae40cf4233ac2676599d16cbe98ab5557aeca2ab211daf23c8c0ec8cadfe0f5951c844f67fbaa645cdfef59e6ce3b70698743fa4b19b94770b13bcb5766af708b836340176f8cb16d26046525a6d10e690951f67db9fe2a45db85d48fbd2a8eff17ecc95279a04e454e3220b21026bb31228a77", &(0x7f00000009c0)}}, &(0x7f0000000a40)=0x0) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) fremovexattr(r0, &(0x7f0000000b80)=@random={'osx.', "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) timer_settime(r2, 0x1, &(0x7f0000000ac0)={{0x0, 0x1c9c380}, {r3, r4+10000000}}, &(0x7f0000000b00)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f00000008c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @multicast2}, &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r7, 0x3) process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f00000002c0)=""/232, 0xe8}], 0x3, &(0x7f0000000840)=[{&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000680)=""/212, 0xd4}, {&(0x7f0000000780)=""/190, 0xbe}], 0x6, 0x0) recvmmsg(r6, &(0x7f0000525000), 0x411, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000140), 0x10) 2018/04/13 23:37:55 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) accept4$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x800) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x610b02, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x14) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f00000000c0)=0x1, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x50) [ 344.286895] FAT-fs (loop0): Directory bread(block 2) failed [ 344.299285] EXT4-fs (loop7): invalid inodes per group: 1024 [ 344.299285] [ 344.316496] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:37:55 executing program 4: r0 = socket(0xa, 0x6, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000240)=0xe8) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) 2018/04/13 23:37:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r5 = dup3(r3, r2, 0x0) fchmod(r4, 0x10) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000009c8a4a8fafd44f939b9ae3a45ecced4815e4f55bcf3405c8ffe0c296a5f3ae205b1bfb84ab7f00a7f65c89a4a260eed200000000000000b07907eeb68d358994cabe0c8f5caebd3523102555f1447d41d5af784cd9ccc16aa9c6d050a1559a32872d1f"]) 2018/04/13 23:37:55 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x2f000000]}}, 0x1c) [ 344.351841] FAT-fs (loop0): Directory bread(block 4) failed [ 344.362351] EXT4-fs (loop7): invalid inodes per group: 1024 [ 344.362351] [ 344.374479] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:37:55 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x4) r0 = msgget(0x0, 0x384) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000480)=""/111) [ 344.408661] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:37:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_pts(0xffffffffffffff9c, 0x389000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000000)={0x5, 0x8000, 0x2, 0x5, 0x5}) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) sendmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r3}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x7, 0x20, 0x3, {0x77359400}, {0x77359400}, {0x2, 0x800, 0xd43e, 0x7ff}, 0x1, @canfd={{0x1, 0x6, 0x7, 0x800}, 0x13, 0x2, 0x0, 0x0, "9ed5ae3d971afc4d1b826916031308ce6f3fc52aa07f975d655777da888bf009f079c356c3c8e8140ee26ed9e2aa35da3c44302389f50718ac61681e46af488c"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) [ 344.463378] FAT-fs (loop0): Directory bread(block 7) failed [ 344.484594] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:37:55 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfffff000]}}, 0x1c) [ 344.525943] FAT-fs (loop0): Directory bread(block 9) failed [ 344.559183] FAT-fs (loop0): Directory bread(block 10) failed 2018/04/13 23:37:55 executing program 4: chdir(&(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000200)=0x1ab6) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x1, 0x1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x81, 0x800) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x2, 0x0, [0x6c1ad45b, 0x7, 0x7, 0xf3, 0x4, 0x6afe, 0x7, 0x9]}) accept4$ax25(r3, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x80800) [ 344.589733] FAT-fs (loop0): Directory bread(block 11) failed [ 344.653274] attempt to access beyond end of device [ 344.658431] loop0: rw=2049, want=246, limit=2 [ 344.663014] buffer_io_error: 30 callbacks suppressed [ 344.668250] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 344.715401] attempt to access beyond end of device [ 344.720610] loop0: rw=2049, want=247, limit=2 [ 344.725201] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 344.754415] attempt to access beyond end of device [ 344.759563] loop0: rw=2049, want=248, limit=2 [ 344.764264] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 344.772199] attempt to access beyond end of device [ 344.777272] loop0: rw=2049, want=249, limit=2 [ 344.781863] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 344.789791] attempt to access beyond end of device [ 344.794827] loop0: rw=2049, want=262, limit=2 [ 344.799389] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 344.807294] attempt to access beyond end of device [ 344.812302] loop0: rw=2049, want=263, limit=2 [ 344.816845] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 344.824782] attempt to access beyond end of device [ 344.829833] loop0: rw=2049, want=264, limit=2 [ 344.834416] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 344.842305] attempt to access beyond end of device [ 344.847332] loop0: rw=2049, want=265, limit=2 [ 344.851891] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 344.894433] attempt to access beyond end of device [ 344.899535] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:56 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)="6367726f75702e70726f637301d2ee048809dff7441282732e8aa5353978dc0a01ff1d659da2a5e0d1ae3876d41078a89f5b70d0a31e4d0bbc8100000029ee2d2118b5fef30100000000000000903bcfd4503e9a461a0349cbf6e437120fb85b931d6e353977d6341956b284aff269", 0x2, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/5, 0xffffffffffffff0b}, {&(0x7f0000000240)=""/188, 0xbc}], 0x2) 2018/04/13 23:37:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x690100, 0x0) write$vnet(r1, &(0x7f0000000380)={0x1, {&(0x7f0000000400)=""/185, 0x38, &(0x7f0000000200)=""/82, 0x3, 0x3}}, 0x3b6) 2018/04/13 23:37:56 executing program 5: r0 = memfd_create(&(0x7f0000000000)='-user-A\x00', 0x3) sendmsg$nfc_llcp(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x27, 0x0, 0x0, 0x1, 0x1, 0x9, "a1b2ee431a7729848bf8b4fde0e93302af7ee4a256961e26176b21c4c13ac2feec40e65d8cc8fc01f4af79fec33ef1e3040f078da6c684cd21290d481049bf", 0x24}, 0x60, &(0x7f00000004c0)=[{&(0x7f00000000c0)="2b95b028c63c46fbb0e638da8ff9ba84de8516d0bb565d41d4b4a9e17f25140bfd00fc38f185a191625056764cc516e27f811628641c821c9361625a6811bc548e294274ed88bf7d007e536dddde68bb2287e1080c", 0x55}, {&(0x7f0000000240)="44e1ce685b67f3d30d764ad58fb49a295ce5a132f7d403a4aa34309e2981671bc52491bbc5df6b55b16e82e5a3401be3adc88d5b14807d4bb82dcb75cad64a2d522ac24155973cca5aa1178d9da0c930db74ca5300a688d5594d269cbfb09d38a7caa4973477e239cdf075768386a432f5ae408a17dbdacadb2c998dc700c07aa6f7b10063c89ba5f3a7de51e4af9fec5969b43bd3f9fc6cc0e149ffdd83cbba3c85f247e34874df062ac394", 0xac}, {&(0x7f0000000300)="f847efd267e863f371055b317b6dd0b3d3f3dd54b659f3f7da05974d8e79d5c72cc92d0b2df3148796e3325a379ea1c5787342b0432161b3a346046a94c7f9f43183d62e98ec364c421a099eec99ac41d483b798e000050a6829f76af7d775a4a6e651a3adbcb0704ce82eddaa509e8e955cbfb1c047c6e77534499ee251f9457c", 0x81}, {&(0x7f00000003c0)="442439b1216910f7125d54aaac1a18ca2653d48730cc1a1269a6d264806480b7e7f5814ee4bb4df0af935c0adf7579a9274d97146b4f4fa5aaef7c37f137ca583fa53018b871588c4b4c2434b940bb021b227b11327751185c19a321f12ef7e91bc01e581bceb7f535ca2d7ffa7ef816626a3b881176ba105f91020bb6c9f7940a0ebcfa82f5bb10f475147ab022ab3533ecde11e87e6aba581264a0d26252d87faa4d77190f46275c0ec83bd4b46caf8b98f6ef167c455c311d758f85ca887ad0560aa62ed5", 0xc6}, {&(0x7f0000000180)="4d7add864dd3b83cd7e18f89ff3f97459e4e1560e987d0339ed1ba8ffec5ec077c80c893cc02e8bb054c8e3bd68458e62fd9e342243026be100737938cfe57b4cab50bb616c8987f27a77ea1c3ddbe9e2154d142", 0x54}], 0x5, &(0x7f0000000540)={0xb0, 0x105, 0x6, "883d9a4bafdf682da962864f50e842b8c8c33a852210a408d15e4b5a456c170ffa84d64818fd9e0cfdeeeafb6a10830e22c60f31f064509ded84907736fb8e7e307ee4d2e4796c1e8121ab5d16b595e629590dc368cd492a596de1b56ae111e6d00836fb50b2a8ef70c238a24333ddbbc3ac866af89b1fe3175a76bd04b9ecb35a9754e5d965614c094989800d1613be03ee05adf378dbc00d"}, 0xb0, 0x800}, 0x81) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) writev(r1, &(0x7f0000000200)=[{&(0x7f0000002c00)="f8", 0x1}], 0x1) 2018/04/13 23:37:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1ff, 0x10000) fchmodat(r0, &(0x7f0000000100)='./file0\x00', 0x1) r1 = getpgrp(0x0) capget(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000180)={0x84, 0x3, 0x1, 0x1f, 0x9, 0x6}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="7d5a5e000004000000060ade395af800cd42"]) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)={0x7fff, 0x6, 0xc9, 0x0, "4cb03bd88b7bc68208686668687877726728716b1e6572e7ab9c839758f200a0399a8a773daf974ab94eea73", 0x3}) set_tid_address(&(0x7f0000000080)) 2018/04/13 23:37:56 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfe80]}}, 0x1c) 2018/04/13 23:37:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x7, 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='1'], 0x1) 2018/04/13 23:37:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x365e0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:56 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)="2e2f636f6e74726f6c2f66696c6531ff", 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 345.481596] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:37:56 executing program 7: r0 = syz_open_dev$random(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x4040) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x50a) 2018/04/13 23:37:56 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfec0]}}, 0x1c) 2018/04/13 23:37:56 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x4d8000, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000001c0)=""/133) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/190, 0xbe}], 0x1) [ 345.538163] FAT-fs (loop0): Directory bread(block 3) failed [ 345.568955] FAT-fs (loop0): Directory bread(block 4) failed [ 345.585695] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:37:56 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f00000000c0)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f00000001c0)=""/93, 0x5d}], 0x3, &(0x7f00000003c0)=""/57, 0x39, 0x5}, 0x1000}], 0x1, 0x2100, &(0x7f0000000440)={0x0, 0x989680}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) [ 345.639187] FAT-fs (loop0): Directory bread(block 6) failed [ 345.659265] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:37:56 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x600000000000000]}}, 0x1c) 2018/04/13 23:37:56 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @udp={0xfdffffff, 0x0, 0x8}}}}}, &(0x7f00000000c0)) syz_init_net_socket$nfc_raw(0x27, 0x1, 0x0) 2018/04/13 23:37:56 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f000068b000)='io\x00') bind$alg(r0, &(0x7f0000d59fa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) fallocate(r0, 0x0, 0x4, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000140)=0x45, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000000)=0x8f6) 2018/04/13 23:37:56 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendmsg$rds(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/135, 0x87}, {&(0x7f0000000180)=""/172, 0xac}, {&(0x7f0000000240)=""/144, 0x90}], 0x3, &(0x7f00000004c0)=[@cswp={0x58, 0x114, 0x7, {{0x65, 0x1}, &(0x7f0000000340)=0x3, &(0x7f0000000380)=0x4, 0x4, 0x9, 0xfffffffffffffffb, 0x6, 0x2, 0x883}}, @mask_fadd={0x58, 0x114, 0x8, {{0x96b, 0x8}, &(0x7f00000003c0)=0x4, &(0x7f0000000400)=0x10001, 0x8ca4, 0xfffffffffffffffc, 0xca, 0x1, 0x9, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x20}, &(0x7f0000000440)=0x927c, &(0x7f0000000480)=0x67e1, 0x1, 0x9, 0x0, 0x5, 0x20, 0x8}}], 0x108, 0x40000}, 0x800) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="f4536b4f2bffb97b00000008ac1fe615"]) 2018/04/13 23:37:56 executing program 3: r0 = gettid() ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000140)={&(0x7f00000000c0)="0d320edf181d785a72bc719c9433256a29e0632f469827008fc461bf9b929ba650ec", 0x22}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota', 0x2c}]}) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pptp={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000200)=0x80) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/185, &(0x7f0000000400)=0xb9) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x388) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x800, 0x22) [ 345.689073] FAT-fs (loop0): Directory bread(block 8) failed [ 345.745634] FAT-fs (loop0): Directory bread(block 9) failed 2018/04/13 23:37:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="7b000000080000000000000000000000798387b6ab8f603414d4e9399d41b68c5f8fd3ad4762b014e3ba6ef4218ad19de3111eec502081cd779ec8ea8316fdc692810f1b499d52dbab087db1663c27ba2c65e0ad2315cade18e70a634360b17c13c7289d16fa29"]) epoll_create1(0x80000) [ 345.791485] FAT-fs (loop0): Directory bread(block 10) failed [ 345.798788] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 345.822248] FAT-fs (loop0): Directory bread(block 11) failed [ 345.880138] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 345.890074] attempt to access beyond end of device [ 345.895266] loop0: rw=2049, want=246, limit=2 [ 345.899840] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 345.932877] attempt to access beyond end of device [ 345.938120] loop0: rw=2049, want=247, limit=2 [ 345.942700] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 345.952224] attempt to access beyond end of device [ 345.957429] loop0: rw=2049, want=248, limit=2 [ 345.965224] attempt to access beyond end of device [ 345.970405] loop0: rw=2049, want=249, limit=2 [ 345.988222] attempt to access beyond end of device [ 345.993337] loop0: rw=2049, want=262, limit=2 [ 345.998654] attempt to access beyond end of device [ 346.003738] loop0: rw=2049, want=263, limit=2 [ 346.008914] attempt to access beyond end of device [ 346.014000] loop0: rw=2049, want=264, limit=2 [ 346.018633] attempt to access beyond end of device [ 346.023628] loop0: rw=2049, want=265, limit=2 [ 346.058372] attempt to access beyond end of device [ 346.063463] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:57 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfc]}}, 0x1c) 2018/04/13 23:37:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005f80)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000003680)="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", 0x10cc}], 0x1, &(0x7f0000003880)}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'ip6gretap0\x00', &(0x7f00000001c0)=@ethtool_ts_info={0x41, 0x7fff, 0x0, 0x77, [0x7, 0x2], 0x4, [0x4, 0x4, 0xfffffffffffffffb]}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x480000, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000180)=0x9) fcntl$dupfd(r1, 0x406, r1) recvfrom(r1, &(0x7f0000000000)=""/39, 0x27, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7fffffff, 0x2000) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/13 23:37:57 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000200)) rt_sigprocmask(0x100000000004, &(0x7f0000a9a000)={0x200}, 0x0, 0x8) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) setrlimit(0x1, &(0x7f0000011000)) r2 = memfd_create(&(0x7f00000000c0)='ramfs\x00', 0x6) sendto$inet6(r2, &(0x7f0000000100)="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", 0xfa, 0x8000, &(0x7f0000000000)={0xa, 0x4e23, 0x200, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000300)=0x0) sched_getattr(r3, &(0x7f0000000340), 0x30, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000240)={0x0, 0xac, 0x5, 0x11, &(0x7f0000ffa000/0x3000)=nil, 0x7}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000280)={0x1, 0x5, 0xe7, 0x6, 0x0, 0x7, 0x4, 0x1e, 0x1ff, 0x5}) ioctl$TCSETA(r2, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'bcsf0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) 2018/04/13 23:37:57 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4, 0x440840) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/23) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x110, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) 2018/04/13 23:37:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x7465030000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:57 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1040000000000004, 0x400000a9}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000000000000007879be55199d8b5aa7"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0xfee1dead, 0x20112000, 0x1, &(0x7f0000000000)) 2018/04/13 23:37:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) poll(&(0x7f0000000000)=[{r0, 0x4}, {r0, 0x500}, {r0, 0x771d}, {r0, 0x8}, {r0, 0x108}, {r0, 0x10}, {r0, 0x8}, {r0, 0x8040}], 0x8, 0x80000001) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:37:57 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:37:57 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x121000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0xd, 0x5, 0x0, 0x6969, "97977e57d2408cbc5ef3bd8fbe22c3e10f17f874ce266a8616dd882fe4d7b37e12d317f14a1a3d7353e531ca", 0xffffffffffffff3f}, 0x1, [0x0, 0x6, 0x58, 0x4, 0x6, 0x3ff, 0x7, 0x1, 0x0, 0x80000001, 0x8000, 0x2d1298b4, 0x2, 0x80, 0x8000, 0x9, 0xfffffffffffeffff, 0x1, 0x6, 0xc258, 0xffffffff, 0x1000, 0x8, 0xfff, 0x7ff, 0xc9, 0xffffffff, 0x7, 0x100000000, 0x2f, 0x101, 0x9, 0x3, 0x0, 0x6, 0x6, 0x1, 0x5, 0x7, 0xbf15, 0x0, 0x40000000000000, 0x9, 0x10001, 0x4000000040000000, 0xc4, 0x5, 0x4a37, 0xffc000000, 0x80000001, 0x4, 0x3, 0x3, 0x383f29fa, 0x8, 0x0, 0xe9, 0x3, 0xfff, 0x3, 0x2, 0x80, 0x8, 0x7, 0x9, 0x7, 0x3, 0x20, 0x42, 0x7f, 0x2288, 0x10000, 0x4e88, 0x5, 0x7, 0x6, 0x3f, 0x1, 0x7, 0x1, 0xdd, 0x0, 0x6, 0x1, 0x38000000, 0x6, 0x6, 0x8000, 0x9, 0xffff, 0xbe6, 0x1, 0x633, 0x81, 0x1, 0x6, 0x8, 0x80000000, 0x8, 0x7, 0xf7c, 0x3ff, 0x4, 0x0, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3ff, 0x6, 0x9, 0x2, 0x8, 0x417f, 0x37ad, 0x4, 0x4, 0x4, 0x1ff, 0x6, 0x7ff800000, 0x0, 0x0, 0x0, 0x2], {r1, r2+10000000}}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ftruncate(r3, 0xfb2) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) [ 346.742413] FAT-fs (loop0): Directory bread(block 2) failed [ 346.769832] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:37:57 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x228201) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r1, 0x714, 0x70bd28, 0x25dfdbfe, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x100000001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0xb0}, 0x1}, 0x2000c800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000027006381b0c193250000000005000800"], 0x14}, 0x1}, 0x0) 2018/04/13 23:37:57 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xffffffff00000000]}}, 0x1c) 2018/04/13 23:37:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/kvm\x00', 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '/dev/kvm\x00'}, &(0x7f00000000c0)=""/4096, 0x1000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) setsockopt(r3, 0x4, 0x5, &(0x7f00000010c0)="3dd0b6a4f76df905b8709f5024e9643f176369e97fcea3ea9897bc3ec8c5e6ad4bbbcc9ce1855da2b2b67ccc565cbfb80ffedff9867c2d86e49f1d7b214383b9d24e56b2ce72da23fe14ba11c3c2d029fa0707c0e031372d1a37939e0ed0a68775b5175ac32b6e13aa611f740f2160a11ca91e2b3615227427445142670590e2b4152e9cf3082a5466176ec7", 0x8c) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c68000)={r2}) sched_yield() [ 346.806160] FAT-fs (loop0): Directory bread(block 4) failed [ 346.831792] FAT-fs (loop0): Directory bread(block 5) failed [ 346.854737] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:37:58 executing program 5: r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000), 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x40) getpeername$inet6(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) 2018/04/13 23:37:58 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x6ba04d83761b74a, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0xfffffffffffffdd0, 0x14, [0x5, 0x3f, 0x9, 0x2, 0x1]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) [ 346.898396] FAT-fs (loop0): Directory bread(block 7) failed [ 346.916384] FAT-fs (loop0): Directory bread(block 8) failed [ 346.926856] FAT-fs (loop0): Directory bread(block 9) failed [ 346.940245] FAT-fs (loop0): Directory bread(block 10) failed 2018/04/13 23:37:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x1000000) ioctl$LOOP_SET_STATUS(r0, 0x401070cd, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "390013210887000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4847ebb55bd19f335b5bffff0001f3", "cfa430545a540dc1c149b7b81579f6a41c51f7d51933090082ab867dac761faf"}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) [ 346.959184] FAT-fs (loop0): Directory bread(block 11) failed [ 347.035438] attempt to access beyond end of device [ 347.040514] loop0: rw=2049, want=246, limit=2 [ 347.064482] attempt to access beyond end of device [ 347.069585] loop0: rw=2049, want=247, limit=2 [ 347.089155] attempt to access beyond end of device [ 347.094240] loop0: rw=2049, want=248, limit=2 [ 347.112953] attempt to access beyond end of device [ 347.118066] loop0: rw=2049, want=249, limit=2 [ 347.131184] attempt to access beyond end of device [ 347.136251] loop0: rw=2049, want=262, limit=2 [ 347.141421] attempt to access beyond end of device [ 347.146465] loop0: rw=2049, want=263, limit=2 [ 347.151150] attempt to access beyond end of device [ 347.156149] loop0: rw=2049, want=264, limit=2 [ 347.160765] attempt to access beyond end of device [ 347.165750] loop0: rw=2049, want=265, limit=2 [ 347.199438] attempt to access beyond end of device [ 347.204496] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:58 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfeffffff00000000]}}, 0x1c) 2018/04/13 23:37:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x20000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="7b00000008000000050000368a06778f"]) 2018/04/13 23:37:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000180), 0x10) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00000001c0)='M', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/04/13 23:37:58 executing program 3: syz_mount_image$xfs(&(0x7f0000000640)='xfs\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0xaaaabfe, &(0x7f0000001840), 0x0, &(0x7f00000018c0)={'nouuid,', {[{@noikeep='noikeep', 0x2c}, {@allocsize={'allocsize', 0x3d, [0x6d]}, 0x2c}]}}) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x400) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0x2, 0x101, 0x7f, r1}, &(0x7f0000000200)=0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0x80, 0x3}, 'port1\x00', 0x3, 0x40002, 0x6, 0xac56, 0x3, 0x101, 0xc529, 0x0, 0x2, 0x7f02}) rmdir(&(0x7f0000000100)='./file0\x00') 2018/04/13 23:37:58 executing program 7: clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_settime(0xfffffffffffffffc, &(0x7f0000000180)={r0, r1+30000000}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x1d2b, 0x2, 0x6, 0x46, 0x7, 0x3, 0x6, 0x81, 0xd0, 0x40, 0xfc, 0x6, 0xfffffffffffffffb, 0x38, 0x2, 0x7, 0x6, 0x5}, [{0x7, 0x48e5a192, 0xea0, 0x1080000000000000, 0x0, 0x100000000, 0x6, 0x9}, {0x70000006, 0x3f, 0x1, 0x8, 0x9, 0x8, 0xd36e, 0xe807}], "a1e195c730fd267dcd2e5b7217c0abc48a597dfdd270f66763457120264d8c2ca14d70", [[], [], [], [], [], [], []]}, 0x7d3) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101000, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x40, 0x40) fremovexattr(r3, &(0x7f0000000080)=@known='security.selinux\x00') 2018/04/13 23:37:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xec660300, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) socketpair(0xd, 0x80000, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x3}, 0x0, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0x8, 0x7fff, 0x7, 0x96}) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:37:58 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 347.772453] FAT-fs (loop0): Directory bread(block 2) failed [ 347.806802] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:37:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='limits\x00') ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)={0x3}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="e4b896b9f7a8b3418c1be780991a5d7b"]) 2018/04/13 23:37:58 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfec00000]}}, 0x1c) [ 347.821433] FAT-fs (loop0): Directory bread(block 4) failed [ 347.839480] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:37:58 executing program 7: r0 = timerfd_create(0x0, 0x0) fsync(r0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/146, 0xfffffffffffffcec}], 0x10000290) getrandom(&(0x7f00000001c0)=""/171, 0xab, 0x1) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x80000, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000100)={0x8}) r2 = pkey_alloc(0x0, 0x0) pkey_free(r2) [ 347.875251] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:37:59 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0xffffffffffffff92) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x800, 0x0) [ 347.915596] FAT-fs (loop0): Directory bread(block 7) failed [ 347.954840] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:37:59 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xf0ffff]}}, 0x1c) 2018/04/13 23:37:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7b090000000000006fdcf27f6c8d96e669fda16f5b859bd70000000000000000f1ad02355874a779f4a3250832e96fb17f328a7c7caa41b18da9bb338a23d90b99ca2f39c1b25aabbc5e104be632dcb66b0d90af8b3e4cbd8fe25cd233ad7fe6a2ba85db680d980fa10384f232c3187f54252126a2b6da06eea7ff5c0d3d770c249b21b2236ff7421907d1a3de705b5261516142cfc6815b5d61afb9d12ca695afe41f1fcec3ff38976adffe46d056fbdbdf07b7955ee4cf72928061ad712c24fc9a82a50d93f1d99de9c26ca0b76c05e82cee00233e089e630b98e970065f43077aa5f91c3c46b49bd34522008b4521c306f980118b1e6f262d146cbff750907a786b9b8dbf9066e69d32c2c200d40f6b70f11fd040924238d616c4edb8466269622e1960d01ffd4e15046df87b13daf19d141e86cb4b703419f6c3d8f37f7c39d7cf3d"]) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) [ 347.984607] FAT-fs (loop0): Directory bread(block 9) failed [ 347.996323] FAT-fs (loop0): Directory bread(block 10) failed [ 348.027544] XFS (loop3): Invalid superblock magic number [ 348.028479] FAT-fs (loop0): Directory bread(block 11) failed [ 348.113270] attempt to access beyond end of device [ 348.118393] loop0: rw=2049, want=246, limit=2 [ 348.167726] attempt to access beyond end of device [ 348.172810] loop0: rw=2049, want=247, limit=2 [ 348.191150] attempt to access beyond end of device [ 348.196240] loop0: rw=2049, want=248, limit=2 [ 348.211422] attempt to access beyond end of device [ 348.216660] loop0: rw=2049, want=249, limit=2 [ 348.222711] attempt to access beyond end of device [ 348.227799] loop0: rw=2049, want=262, limit=2 [ 348.246538] attempt to access beyond end of device [ 348.251664] loop0: rw=2049, want=263, limit=2 [ 348.266883] attempt to access beyond end of device [ 348.272088] loop0: rw=2049, want=264, limit=2 [ 348.278367] attempt to access beyond end of device [ 348.283610] loop0: rw=2049, want=265, limit=2 [ 348.356628] attempt to access beyond end of device [ 348.361745] loop0: rw=1, want=329, limit=2 2018/04/13 23:37:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:37:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 2018/04/13 23:37:59 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfc000000]}}, 0x1c) 2018/04/13 23:37:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000600)={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @random="9d31d356eaf6"}, 0x11e, {0x2, 0x4e27, @multicast2=0xe0000002}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) ftruncate(r3, 0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x80}}]}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2080) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000780)=0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000180)={0x3, r6}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={r8, r9, r10}, 0xc) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000100)=0xff, 0x4) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f00000001c0)=0x2, 0x8) ioctl$int_out(r0, 0x0, &(0x7f00000000c0)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r7, 0x800443d3, &(0x7f0000000240)={{0x3, 0x800, 0x1, 0x3, 0x10001}, 0x10001, 0x9, 0xfffffffffffffff9}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000003c0)=0xfffffffffffffe0a) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000e000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/13 23:37:59 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/129, 0x81) 2018/04/13 23:37:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x8000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:37:59 executing program 5: mkdir(&(0x7f0000632000)='./file0\x00', 0x800000) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) syz_open_dev$dspn(&(0x7f0000001040)='/dev/dsp#\x00', 0x6703, 0x80000) socket$inet_dccp(0x2, 0x6, 0x0) r0 = open(&(0x7f0000001180)='./file0\x00', 0x4000000000, 0x0) pivot_root(&(0x7f0000001080)='./bus\x00', &(0x7f00000010c0)='./bus\x00') fchownat(r0, &(0x7f0000e0effa)='./bus\x00', 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f0000000040)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001100)={0x80, @time={0x0, 0x1c9c380}, 0xfffffffffffffff7, {0x40, 0x5}, 0x4, 0x0, 0x7fff}) 2018/04/13 23:37:59 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 348.825932] FAT-fs (loop0): Directory bread(block 2) failed [ 348.846951] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:37:59 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x4]}}, 0x1c) 2018/04/13 23:38:00 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x50000, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000000c0)={0x67, @loopback=0x7f000001, 0x4e20, 0x2, 'sed\x00', 0x10, 0x73848e48, 0x7b}, 0xd5e8f5ac3bebbf45) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) io_setup(0x100000000, &(0x7f0000000040)=0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000500)={'veth1_to_team\x00', @ifru_mtu=0x352}) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x4, r1, &(0x7f0000000240)="40bf0b37ee858feeb788b6c976dd19c386be735ee34234018c49f4da89316a3779a629aa4154baafa55add6b9a8da94f363e3e83c471424ce125488f7c6a092d9ef4dbb4bd258293b80015cce4014d2249ff037971cfc9d4bb1cbaa8c271fc789784bc19053001d9cb5640d7bd9791fdbd6f726ca1dc628360f18f1ef3735a45e40517943729f369c1d1ad650b1842f9eadcdc8f2dcce27a41924c40b0d68b5c667fd98990e346340fae657c0303943169f5362c42ac6ce02481e42f2a8a8d838fd464a501819db8129f7c7299cb587a6ae7a2cdb2773d556866b0813c2c", 0xde, 0x1, 0x0, 0x1, r0}, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000380)={0x66c, 0x9, 0x7, 'queue1\x00', 0x1}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fcntl$getown(r0, 0x9) 2018/04/13 23:38:00 executing program 3: socket$kcm(0x2, 0x4000000005, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1002000000000004, 0x207}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000026e5633934fa298994fb0000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0x6, 0x100000001}, 'port0\x00', 0x1, 0x0, 0x7, 0xffffffffffffffff, 0x4, 0x5, 0x81, 0x0, 0x1, 0xfab}) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x2, 0x2) socketpair$inet_icmp(0x13, 0x400000, 0xfffffffe, &(0x7f0000000180)) getsockopt$llc_int(r1, 0x10c, 0xf, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 348.872484] FAT-fs (loop0): Directory bread(block 4) failed [ 348.896078] FAT-fs (loop0): Directory bread(block 5) failed [ 348.917668] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socketpair(0x4, 0x5, 0x401, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x124, r2, 0x0, 0x70bd27, 0x25dfdbff, {0xd}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3b00000000000000}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x8}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2=0xe0000002}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-asm\x00'}, 0xfffffffffffffc7e) [ 348.929355] FAT-fs (loop0): Directory bread(block 7) failed [ 348.935912] FAT-fs (loop0): Directory bread(block 8) failed [ 348.947391] FAT-fs (loop0): Directory bread(block 9) failed [ 348.963892] FAT-fs (loop0): Directory bread(block 10) failed 2018/04/13 23:38:00 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x1000000]}}, 0x1c) 2018/04/13 23:38:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc058534b, &(0x7f0000000100)={0x0, @time}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x81, 0x8000) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0xfffffffffffffe00, 0x39f}) 2018/04/13 23:38:00 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) io_setup(0x7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000100)="06", 0x1}]) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x80, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0xffffffff, 0x35aed5ce, 0x1ff, 0x6}, 0x14) io_setup(0x5, &(0x7f00000001c0)) [ 349.001813] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:38:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x8080, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x55d8c9d4c6b91509, 0x2, 0x4, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000140)=ANY=[@ANYBLOB="7b0000000800000000000000000000003c0b4d73306a42927d73a95ccef6afcba702e7f55cd2e1dbfa40533e11ad90a0c1e53ced21830cc1f587c811208b6fce39dd16a5e426f40e5f9f4f17f2476b5bd5a93e117653c391230079886237e3cce8fd231e3fb44540b15dd287aecfc7b080fd625f9070e2173ebc58ebb653882471c2a377e1e30acc2b4b836891344af282418c7dd546dee200d206a7c126de21c8e38e65cfc37e5bd073db9f3e1c8860c47380e8a042ece279e6bc4e880c741800"]) chdir(&(0x7f0000000100)='./file0\x00') ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000240)=""/4096) [ 349.076618] attempt to access beyond end of device [ 349.081754] loop0: rw=2049, want=226, limit=2 2018/04/13 23:38:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000280)="fa", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) r1 = msgget(0x1, 0x50) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/140) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8002, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0x80, &(0x7f0000000040)="7cb5828e96f4082327f4e7fd8a342fd43a30cd0f7547cfdfbd0fd3085382f76efbaecd864467f53a669632bda14631bc201ad59175c3ad8631ed24a3ef4fd69b0ff284723d4cd972e663d3426b68dfdb15a9c8873caf55872888997ba55a5cf60a3e1aab7a4f000a993e4e88e18077c778c7dd92251dccdfcd4c056618cb139273f30791735b487cd5acaf61b9f8a8fc6e9e8ba312bcf3da7b72f0c19ed17dbcaec10540a516c9261c19f8c9610217be47a7c7b3316bac91eb078c4d181f0e18", 0xc0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2}}, 0x3}, 0x90) 2018/04/13 23:38:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) rt_sigprocmask(0x3, &(0x7f0000000000)={0x3}, &(0x7f00000000c0), 0x8) [ 349.149841] attempt to access beyond end of device [ 349.155498] loop0: rw=2049, want=227, limit=2 [ 349.161175] QAT: Invalid ioctl [ 349.167637] attempt to access beyond end of device [ 349.172770] loop0: rw=2049, want=228, limit=2 [ 349.185511] attempt to access beyond end of device [ 349.190641] loop0: rw=2049, want=229, limit=2 2018/04/13 23:38:00 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xfe80000000000000]}}, 0x1c) 2018/04/13 23:38:00 executing program 7: r0 = socket(0x1d, 0x3, 0x1) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x65, 0x5, &(0x7f0000000040)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003fd8)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000001000)={&(0x7f0000002000)={0x1d, r1}, 0x10, &(0x7f0000003ff0)={&(0x7f0000000000)=@can={{}, 0x0, 0x0, 0x0, 0x0, "254d6ca5964df88f"}, 0x10}, 0x1}, 0x0) [ 349.199679] QAT: Invalid ioctl [ 349.215254] QAT: Invalid ioctl [ 349.236367] attempt to access beyond end of device [ 349.241517] loop0: rw=2049, want=246, limit=2 [ 349.276765] attempt to access beyond end of device [ 349.281998] loop0: rw=2049, want=247, limit=2 [ 349.323229] attempt to access beyond end of device [ 349.328306] loop0: rw=2049, want=248, limit=2 [ 349.342289] attempt to access beyond end of device [ 349.347375] loop0: rw=2049, want=249, limit=2 [ 349.399432] attempt to access beyond end of device [ 349.404531] loop0: rw=1, want=325, limit=2 2018/04/13 23:38:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r0, &(0x7f0000e3d000)=[{&(0x7f0000760000)=""/187, 0xbb}], 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2018/04/13 23:38:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x5, &(0x7f0000000300)=[{&(0x7f0000000100)="81b18d9816650050e62ae5d4969f92874f5cb76715eeb3", 0x17, 0x3f}, {&(0x7f0000000140)="14211fdc00e5e2e52be562c310b0d24ee76131abd2793e0ac8fb5840e90fee4ec95f76aab3ee5eb562bcb089957174e91579e282205e6e0f0d24c2fc210077185042b826ab82606337afca98085be5a1", 0x50, 0xff}, {&(0x7f00000001c0)="0c82a43a64c67c16998541b47c3cbde15bfd13d9b58c0e3e34d03f64dc4d829cc59f31673cd70eeb5103aa81f7d0d4fad03dbd1aca8cb94179507f5b6860f2a59cfb3e31be849891972b7a36ed2a99e2a444e592c9684fc7ff0cd3b8c6664482ed402d03c98bc4238562f47ef9b44f91fd3f2fe3fbfa88df", 0x78, 0x8}, {&(0x7f0000000240)="5c802dfa48b6fc71c4f3c4d9230fc85da94f5194bde28a08bec52b477afb0c6331f491431b9ca6271def12d35f9fb8284b1999e0159c82c02074189840b2fd2dc7", 0x41}, {&(0x7f00000002c0)='n)\\!*t', 0x6, 0x78ab}], 0x2000, &(0x7f0000000380)={[{@map_acorn='map=acorn', 0x2c}, {@nocompress='nocompress', 0x2c}, {@map_off='map=off', 0x2c}, {@dmode={'dmode', 0x3d, [0x37, 0x7b, 0x35, 0x0, 0x37]}, 0x2c}, {@nocompress='nocompress', 0x2c}, {@dmode={'dmode', 0x3d, [0x7e, 0x78, 0x3f, 0x78]}, 0x2c}, {@overriderock='overriderockperm', 0x2c}, {@map_off='map=off', 0x2c}, {@utf8='utf8', 0x2c}, {@sbsector={'sbsector', 0x3d}, 0x2c}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-serpent-sse2,tgr128-generic)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) 2018/04/13 23:38:01 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x1c03000000000000]}}, 0x1c) 2018/04/13 23:38:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x80000, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x4, 0x3, 0x3, 0x9, 0x7, 0x9, 0x6a78, 0x8, 0x9, 0x7}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000080)={0x9, 0x400, 0x100000001, 0x100000000, 0x1, 0x20}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) 2018/04/13 23:38:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = semget(0x3, 0x0, 0x18c) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)=0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) flock(r0, 0x6) r4 = geteuid() getgroups(0x1, &(0x7f0000000200)=[0x0]) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000002c0)={{0x4, r2, r3, r4, r5, 0x80, 0x21}, 0x8, 0x8001, 0x4}) 2018/04/13 23:38:01 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000240)=""/222) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000140)={0xffffffff}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)=""/130, &(0x7f0000000100)=0x82) 2018/04/13 23:38:01 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x3c650300, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:01 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') readv(r0, &(0x7f0000c43f70)=[{&(0x7f0000ea5000)=""/4096, 0x1000}], 0x1) [ 350.356688] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:01 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0xf0ffffffffffff]}}, 0x1c) 2018/04/13 23:38:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x7b, 0x8, [0x0, 0x0]}) 2018/04/13 23:38:01 executing program 3: syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000380)='xfs\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0xaaaaaaaaaaaab6f, &(0x7f00000000c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b160fcd668b2e3bafeb66f10e3e0a8f5a010d2b7f0b87df6a4c257b33c3fa0865d58e4a5f7575"]) [ 350.420839] FAT-fs (loop0): Directory bread(block 3) failed [ 350.430303] FAT-fs (loop0): Directory bread(block 4) failed [ 350.450535] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x200) accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0x0, 0xc000000000000, {0x77359400}, {0x77359400}, {0x0, 0x101, 0x6, 0x8000}, 0x1, @canfd={{0x0, 0x3, 0x2, 0x2}, 0x12, 0x2, 0x0, 0x0, "041c5fb4afa6763121b09648ec26372e2ca7232d3a10fb0491e10a7f9075c0a8d9ec26f1f8660c9c8c526912cc788b9a302911312ea55991e1d1597fabf6dad1"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x20008050) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) [ 350.506159] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000180)=ANY=[@ANYBLOB='{\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2101, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x4, 0x999, 0x1, 'queue0\x00', 0x4}) [ 350.551858] FAT-fs (loop0): Directory bread(block 7) failed [ 350.586737] FAT-fs (loop0): Directory bread(block 8) failed [ 350.621756] FAT-fs (loop0): Directory bread(block 9) failed [ 350.636640] FAT-fs (loop0): Directory bread(block 10) failed [ 350.670811] FAT-fs (loop0): Directory bread(block 11) failed [ 350.708341] XFS (loop3): unknown mount option [;Íf‹.;]. [ 350.742313] attempt to access beyond end of device [ 350.747406] loop0: rw=2049, want=246, limit=2 [ 350.752089] buffer_io_error: 30 callbacks suppressed [ 350.752103] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 350.777639] attempt to access beyond end of device [ 350.782771] loop0: rw=2049, want=247, limit=2 [ 350.787355] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 350.795807] attempt to access beyond end of device [ 350.800949] loop0: rw=2049, want=248, limit=2 [ 350.805507] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 350.813553] attempt to access beyond end of device [ 350.818618] loop0: rw=2049, want=249, limit=2 [ 350.823168] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 350.831070] attempt to access beyond end of device [ 350.836061] loop0: rw=2049, want=262, limit=2 [ 350.840621] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 350.848486] attempt to access beyond end of device [ 350.853475] loop0: rw=2049, want=263, limit=2 [ 350.858051] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 350.865929] attempt to access beyond end of device [ 350.870894] loop0: rw=2049, want=264, limit=2 [ 350.875443] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 350.883304] attempt to access beyond end of device [ 350.888292] loop0: rw=2049, want=265, limit=2 [ 350.892829] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 350.934313] attempt to access beyond end of device [ 350.939381] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:02 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x20000000]}}, 0x1c) 2018/04/13 23:38:02 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)="2e2f636f6e74726f6c2f66696c6531ff", 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) r1 = memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="aa", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000080)) r2 = socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/246, 0xffffff31}, {&(0x7f00000003c0)=""/31, 0xffffffffffffff7a}, {&(0x7f0000000400)=""/62, 0x3e}], 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendfile(r0, r0, &(0x7f0000000040), 0x956) 2018/04/13 23:38:02 executing program 7: mount(&(0x7f0000002700)='./file0\x00', &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)='overlay\x00', 0x10, &(0x7f0000002900)="c4507347e2d932282661a35f8b7b72e52c10ad5fd8f914906d8086aa6ed3f6a70e9a08541085938059b93bf62bcfd171249b652ae6609f79a9f66c550df589ca234bc3bfb19ff7c26717b0217db622204878abfa9a20002b6a5d0a25") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x40, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000040)={{0x6, 0x6, 0xffffffffffffffff, 0x6, "9e08b47e739425b4c0518652484ad43c53d2f43c9924be6e6c00a283874aba0f29290d7cb1928aa2b583291e", 0x8001}, 0x7f, [0x83f7, 0x20, 0x402, 0x4, 0xfff, 0x1, 0x8, 0x1b, 0x1, 0x4, 0x3d80, 0x401, 0xd5, 0x4, 0xd7f, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0xf2, 0x2b6f, 0x2, 0x800, 0x4, 0xfffffffffffffc31, 0x7, 0x1, 0x7, 0x7fffffff, 0x1000, 0x2, 0x2, 0x5, 0x81, 0x8, 0x0, 0x5, 0x20, 0x4fdb, 0xfffffffffffff2b9, 0x101, 0x5, 0x4, 0x8, 0x1, 0x5, 0x719, 0x1, 0x2, 0x25, 0x4007ff, 0x5, 0xffff, 0x5, 0x1, 0x59, 0x401, 0x2, 0x40, 0x2, 0x2, 0xef6, 0x5, 0xf5, 0xfff, 0x0, 0xff, 0x0, 0x8000000000000000, 0x6912eff8, 0x80000001, 0x100000001, 0x6c3, 0x8000, 0x10000000000, 0x6, 0x8, 0x5, 0x0, 0x7fff, 0xfffffffffffffffc, 0xffff, 0x8, 0x7ff, 0x888b, 0x5, 0x0, 0x4, 0x200, 0x4, 0x778c, 0xffffffff, 0x3ff, 0xafc, 0x4612, 0x100000001, 0x7, 0x6, 0x5, 0x0, 0x7, 0x3, 0x3ff, 0x3000, 0x6, 0x7, 0x1, 0x80, 0xffffffff, 0x80000001, 0x5, 0x5, 0xfffffffffffffffe, 0x1, 0x8, 0x100000001, 0x8, 0xffffffffffffff3a, 0xec, 0x8001, 0xfffffffffffffe00, 0x7, 0x7, 0x7f, 0x80000001, 0x8, 0x7], {0x0, 0x1c9c380}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000027c0)={[0x1f, 0xfc6, 0x1ff, 0x40, 0x1, 0x6, 0x80000000, 0x7, 0xffffffffffff18b3, 0x7, 0x7, 0x8000000, 0x7f, 0x5, 0x0, 0x7ff], 0x10f001}) ioctl(r0, 0x1f, &(0x7f0000002980)="610d888bf7b0da2b1f7d238744cbbc7e2ecc6e4fa22b10252e9e7a621e2802c97aa22e1ba39fe2479f2795b0abb50171d3d00569fa76b5ce04044502f9f3b7a544fd5d979d523bcd4dd3f965175dac29e574dbae50644e16e71bf13df237cdf822a3568a757a93ba38174f8f9e85e7c064f1cf36a9c3203eaef973ed94b167491357cde10788447de7") sendmmsg(r0, &(0x7f000000c100)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000003040)}}, {{&(0x7f0000000680)=@ax25={0x3, {"9d27f2fe15e716"}}, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000000000)}, 0x3}, {{&(0x7f000000bc40)=@ipx={0x4, 0x0, 0x0, "c71c86c53e6a"}, 0x80, &(0x7f000000c040), 0x0, &(0x7f000000c0c0)}}], 0x3, 0x0) r2 = shmget(0x2, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x5000) vmsplice(r1, &(0x7f0000002740)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000540)="b291bc698ce558ceee0f8e1964bc0a1db8ed02fd717e45b7ab9b4f631b5566f7a6b0f357075437e0e4a7832c5a1c9e2a86c276a00bac68015eb1d6dd05f52a73b627bcb3a2a14dded7871cdcb8a571d4427a13cca9eafb187071acb86191e545a5b239cd642f1bf1d4aafee3f3082648b84e7bb0c506bff5ad05954a0f5b53400edb83dbce2720c607f2e9475e2e93bff1cf7cfbf15f8466810eca929db0622003f9bc938a3a50d746cf2672f902d5b89089dfdbe7f60bec1a899bb6da173c960d466352a9d1eec0bbc48797d6", 0xcd}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000640)="aec9bff7796c320f074c42b5a32b97987d74f45e0b8b28f8e189d8", 0x1b}, {&(0x7f0000002700)}], 0x5, 0x1) 2018/04/13 23:38:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000040)='bond0\x00', 0x101}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000080)=ANY=[@ANYBLOB="55aa0346ff4a05cf00100000000000000000000000"]) 2018/04/13 23:38:02 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f0000000140)="ffa2bc111d843db00f88275e01fa1232ac31d6b4604bf9bb66acba3b2964ec1ce71de247d77bd640451b22b7b05a3353ad1503e0426427aa31ab0c31d70f6d19665e774993c7ee78ad9c6b725a92d2995110a92237f2c098b9115626b8812e36ee0613c040cf544dc56a0e37bab8f1810a61cf8f0b71a6663edf63715aade08d64bcdad8532e22c44f705c369aab13c81284ad600cb8af02810808bb8ff69d10ad3c8d3472c24ea9b1f646d3bc21832101137a30b14778c3cb71993a82fc00d798632481c8f2fac3c4b4af0965387f62c12db48c3ed8167d3810a138b0a09218634ceca11f601c595c5de9", 0xeb, 0x0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, &(0x7f00000006c0)='./control\x00') 2018/04/13 23:38:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x300, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x90000, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) bind$alg(r0, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffd9e) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000040)="64a3098a18df423f542da3ae1a2e2a4ccc4169f131ed535e35c64211dcb70bd1ba7934a3", 0x24) r3 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x57, 0x4000) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000002c0)) ioctl$LOOP_CLR_FD(r1, 0x4c01) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x14) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, [0x3, 0x3ff, 0x9, 0x3]}) [ 351.276192] FAT-fs (loop0): Directory bread(block 2) failed [ 351.313899] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x5, 0x8, [0x3, 0xfffffffffffffffd]}) 2018/04/13 23:38:02 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) prlimit64(r0, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000003c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='bdev\x00', 0xffffc, &(0x7f0000000080)) r2 = gettid() r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x400, 0x145100) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000640)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000680)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff}, [@jmp={0x5, 0xffffffff, 0x0, 0xf, 0x0, 0xfffffffc, 0xffffffffffffffff}, @map={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x1, 0x400, 0x10001, 0x7}, @map={0x18, 0xf, 0x1, 0x0, r3}], {0x95}}, &(0x7f0000000540)='syzkaller\x00', 0x800, 0xb6, &(0x7f0000000580)=""/182, 0x0, 0x1, [], r4}, 0x48) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24}}, [0x6, 0x8, 0x7f, 0x50, 0x7, 0x7, 0x1, 0x1, 0x6, 0x6b, 0x1, 0x2, 0x2, 0xae4c, 0x5]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={r5, 0x1, 0x359, 0x2}, &(0x7f0000000480)=0x10) fcntl$addseals(r3, 0x409, 0x6) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x7f, 0x3, 0x80000000, 0x9, 0x0, 0xa629, 0x10101, 0xe, 0x4, 0x0, 0x7, 0x2, 0x1, 0x1, 0x8, 0x3, 0x8000000000000000, 0x8a07, 0x7ab, 0x6, 0x0, 0x6, 0x7, 0x9, 0x4, 0x0, 0xaf, 0x9, 0x401, 0x200, 0x5, 0x2, 0x5, 0x6, 0x3, 0x1, 0x0, 0xc6f, 0x4, @perf_config_ext={0x7fff, 0x4}, 0x0, 0xf7a, 0x7, 0x0, 0x7fff, 0x800}, r2, 0xd, r1, 0x7f03eb7f109196f8) 2018/04/13 23:38:02 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:02 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x1000000]}}, 0x1c) [ 351.326812] FAT-fs (loop0): Directory bread(block 4) failed [ 351.333523] FAT-fs (loop0): Directory bread(block 5) failed [ 351.339556] FAT-fs (loop0): Directory bread(block 6) failed [ 351.346121] FAT-fs (loop0): Directory bread(block 7) failed [ 351.353541] FAT-fs (loop0): Directory bread(block 8) failed [ 351.366596] FAT-fs (loop0): Directory bread(block 9) failed 2018/04/13 23:38:02 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x8004}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') mkdir(&(0x7f0000000100)='./control/file0\x00', 0x0) rmdir(&(0x7f000015dff6)='./control\x00') fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x1) creat(&(0x7f0000000180)='./control/file0\x00', 0x0) close(r0) 2018/04/13 23:38:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) [ 351.415152] FAT-fs (loop0): Directory bread(block 10) failed [ 351.453300] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:38:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="7b04006a0802000000000000e1ff0000"]) [ 351.467729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 351.507481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 351.526664] attempt to access beyond end of device [ 351.531792] loop0: rw=2049, want=246, limit=2 [ 351.536362] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 351.634605] attempt to access beyond end of device [ 351.639702] loop0: rw=2049, want=247, limit=2 [ 351.644367] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 351.653531] attempt to access beyond end of device [ 351.658800] loop0: rw=2049, want=248, limit=2 [ 351.666008] attempt to access beyond end of device [ 351.671119] loop0: rw=2049, want=249, limit=2 [ 351.681776] attempt to access beyond end of device [ 351.686905] loop0: rw=2049, want=262, limit=2 [ 351.705212] attempt to access beyond end of device [ 351.710270] loop0: rw=2049, want=263, limit=2 [ 351.721540] attempt to access beyond end of device [ 351.726616] loop0: rw=2049, want=264, limit=2 [ 351.732648] attempt to access beyond end of device [ 351.737790] loop0: rw=2049, want=265, limit=2 [ 351.773416] attempt to access beyond end of device [ 351.778470] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:03 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x20000000]}}, 0x1c) 2018/04/13 23:38:03 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20000000000, 0x6ec02436ed206abf) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)=@ioapic={0x114000, 0x401, 0x0, 0x200, 0x0, [{0xffffffffed658a84, 0x7, 0x101, [], 0x933}, {0x5, 0xffffffff, 0x8001, [], 0x1}, {0x2, 0xfff, 0xab00, [], 0x80000000}, {0x5, 0x4, 0xfc4d, [], 0x800}, {0x5, 0x50120ed1, 0xc4, [], 0x4}, {0x2c0c, 0x80, 0x100000001, [], 0xffff}, {0x8677, 0x1, 0x0, [], 0x5}, {0x9, 0x2, 0x521d, [], 0x7}, {0x30, 0x2, 0x9, [], 0x101}, {0x7, 0x90c, 0x7, [], 0x2}, {0x9, 0x9, 0x18cb, [], 0x9}, {0x80000001, 0x8, 0x5, [], 0x7}, {0x7, 0x4, 0xffffffffffffff81, [], 0x6}, {0x100, 0x2, 0xb32}, {0x3, 0x2, 0x6, [], 0xe8}, {0x2, 0x8, 0xfff, [], 0x4}, {0x6, 0x7, 0x8, [], 0xfffffffffffffffa}, {0x100000001, 0x7, 0x8, [], 0x2}, {0x100000000, 0x8, 0x8, [], 0x1000}, {0x4, 0x4, 0x5}, {0x5, 0x5, 0x8, [], 0x6}, {0x7fffffff, 0x6, 0xa95, [], 0x9cff}, {0x101, 0x7, 0x4}, {0x4, 0x2, 0x8, [], 0x80000001}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="ff2b"], &(0x7f0000000240)=0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={r6, 0x0, 0x4, r6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000080)={{0xffffffff, 0x1f, 0x76a4, 0xc9e, 0x3, 0xffff}, 0xfffffffffffff801}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/13 23:38:03 executing program 5: r0 = memfd_create(&(0x7f0000503000)='/dev/vga_arbiter\x00', 0x0) write$cgroup_pid(r0, &(0x7f00000000c0)={[0x31]}, 0x1) write(r0, &(0x7f0000000080)='#!', 0x2) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000180), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) memfd_create(&(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1) 2018/04/13 23:38:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="7b000804000000000500000040000000"]) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000100)={r1, 0x1}) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x200) 2018/04/13 23:38:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:03 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x6c, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) [ 352.236975] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 352.248604] FAT-fs (loop0): Directory bread(block 2) failed [ 352.275075] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xff, 0x20200) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) 2018/04/13 23:38:03 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x400300]}}, 0x1c) 2018/04/13 23:38:03 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 352.314841] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) getgroups(0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff]) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) write(r0, &(0x7f0000000680)="68232822d5dcb4bbd2384e34732fcab3f14c68a48453fdd4463c08dea3a276478352aaa72829c2ab074948bbcffe45fc376f56b489b34e42c85e82d442e8cfd364cedc1b39ac4c1772536a32ae158fc3201a89764c26b1b0973270be25dccd977022f9df44f9d8da1e71b43cbbc7dc5e51227d3f31318b2a3c7c658ecdde22664adf405467434dd252cfade616b8e99c6c0452fc971667d00a719bb6e1096e7386bc9339975cdb9fe6a114baffe76602abcb6cae590d8acfa24eceb4888b755632826ea6aa238aca9730", 0xca) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000005c0)=[r1, r2, r3, r4, r5, r6, r7, r8]) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia)\x00'}, 0x58) 2018/04/13 23:38:03 executing program 5: r0 = gettid() exit(0x24) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), 0x0) [ 352.357266] FAT-fs (loop0): Directory bread(block 5) failed [ 352.403107] FAT-fs (loop0): Directory bread(block 6) failed [ 352.413722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:03 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000200)=0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0xfffffffffffffffc, 0x4, 0x6, 0x0, 0x0, [], [], [], 0xfffffffffffffffd, 0x7}) r1 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x5, 0x102) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="7b00000008000300a8812a4900000000"]) 2018/04/13 23:38:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20000000000, 0x6ec02436ed206abf) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)=@ioapic={0x114000, 0x401, 0x0, 0x200, 0x0, [{0xffffffffed658a84, 0x7, 0x101, [], 0x933}, {0x5, 0xffffffff, 0x8001, [], 0x1}, {0x2, 0xfff, 0xab00, [], 0x80000000}, {0x5, 0x4, 0xfc4d, [], 0x800}, {0x5, 0x50120ed1, 0xc4, [], 0x4}, {0x2c0c, 0x80, 0x100000001, [], 0xffff}, {0x8677, 0x1, 0x0, [], 0x5}, {0x9, 0x2, 0x521d, [], 0x7}, {0x30, 0x2, 0x9, [], 0x101}, {0x7, 0x90c, 0x7, [], 0x2}, {0x9, 0x9, 0x18cb, [], 0x9}, {0x80000001, 0x8, 0x5, [], 0x7}, {0x7, 0x4, 0xffffffffffffff81, [], 0x6}, {0x100, 0x2, 0xb32}, {0x3, 0x2, 0x6, [], 0xe8}, {0x2, 0x8, 0xfff, [], 0x4}, {0x6, 0x7, 0x8, [], 0xfffffffffffffffa}, {0x100000001, 0x7, 0x8, [], 0x2}, {0x100000000, 0x8, 0x8, [], 0x1000}, {0x4, 0x4, 0x5}, {0x5, 0x5, 0x8, [], 0x6}, {0x7fffffff, 0x6, 0xa95, [], 0x9cff}, {0x101, 0x7, 0x4}, {0x4, 0x2, 0x8, [], 0x80000001}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="ff2b"], &(0x7f0000000240)=0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={r6, 0x0, 0x4, r6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000080)={{0xffffffff, 0x1f, 0x76a4, 0xc9e, 0x3, 0xffff}, 0xfffffffffffff801}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 352.445391] FAT-fs (loop0): Directory bread(block 7) failed [ 352.485517] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:03 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfc00]}}, 0x1c) 2018/04/13 23:38:03 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 352.511825] FAT-fs (loop0): Directory bread(block 9) failed [ 352.528764] FAT-fs (loop0): Directory bread(block 10) failed 2018/04/13 23:38:03 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7, 0x220000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) accept(r0, 0x0, &(0x7f0000000180)) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0xffffffffffffffa5) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xc0000, 0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000440), &(0x7f0000000480)=0x4) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x40) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000004c0)="1bf6ea7c5ca2cd94e2a1857af235254a7352907dffe396f6792f3665572d208baf8249df7f229011a7fc519531e614e83845bbedc803ba2e4037ddc8bec07a454136c7ddd91e4b1faa1079dc2a2da259cc91911ff2ed7635ae1790783a27ad2155c9005d338a33404f1adebfc0f33b41fb3c68fc2c71951b3409bad98361b0affcc15aa4ce4b2eaca9ea986c4af51ecb11d3561bf99e407b0a0ccea3fad91dc38f2c2f868925ab2e3debfee2ce72db061eee8ecacd4a2346d672aecf855ea540a233d92420f2bb9ac8f61cf748f609d1bcea8ee178f657b51272e3362d64b3c6215059a2ea31fa0a20c5461776806ee4ce488ecc9407a08a504a72d18ea0af4119177e52e467e19f606e94e48d7d04a0aec31f133f07aa17dd9e7184bfef6c95a027dc43cb41acf4794d711e342b91ee68cabbf62b9794e37cdaaa6624f5062e72af92e29f799bed9ffe5cb99556319c3f217bc1b5b33dbdd3e7cb40b9887ec4d70cc2c3ab1d2af29a3ce56e9aa1718c61aa3043ab05dd02ee353097a95c604094f8d47e63fc7b07b6ebeac448f7e76d433658b6806d31d0c064e980d34da1e937bf2c64a5c8418e4abe945a18500ba03135d6521154bcdbfc363cc029b976123abdc985640d7124e466748229adbd5b91d4740a29457bd675e16e96ef00ea64eca79436c9ff1e7fb7fb6e4d46ec0978c8dc290a00f133ff86525a9e0b81eb5aa0cc60b53c016c6b014d71b702d46a7dbb61dac6ec20b6cc2e666cf917ae1755cb718eb74fec8f9b51ef529107772bac59714f25c7f59384f8395e2724f4d0b7a758aa07c57d9aaae21e9e972518a579287096267d02d12adde115923ae3594c93299ed76483481f5e5962be75ded2f1176789c2a74113a322d0a23d9cba2d210fab89b0663b1784ff3fca617dbd4498854fe69d821d2bbb3f94b3a885c23c29a30b1332d5cb8cdce0394114ad75a76d7bc9df1e511bfeefa6da37cf81c671616932930add44940cf6dbf5fcb464fa724fa2b9f5f7fa29a62d9f40f7e3d95cb91deb79425557f125c00d4eb88c0dcbfc3842c28ed5097b288b869e682763af99a4f762b230ac1f71eb84352910e78709482e962eff5f4842ddb01df716a8150cb19585fab8a8bb7ec24b5db5ef207fd340595306aea7a1a20d35267ff6bb3d4cfdb2143957c2ffb4493f51d5a893d89eff36253e0e6508ebf455f02c37d559bf90a7c37b8e5fa1329971c6a2103e83080fb23cdddf0e9a25becfde21ade2737318f4ab550453368df194efd6682da895eccaa2b548fb1f935faaa6ef5784ebb648183285171e0acaba9c4d48ffb65f7b4a1fccc9e6128960c3ac7afa9c2c3a7e7a3d8c8a3b7b0e982c8b49d170f352d30c9a763e0fba47834226729e5814a48e6a24211cf27301df92176388efcb469ff076a2f9af8728b289aa8e21052df703bb65a667571698c5e71fe0b7b93304e0ce7b497306ed881ba727455ee387fac2c611b4fa3c71832da9523247a4d303a6e125a0ae3f347f306031e14cb5da856b7ad5901c06cc26599e7c826c6b0033052827bd152a8ac28507a4dd5c5693ed796a60eb62407bd00a39660df201a15315216a6daf9b442ccf98056bdd5127944e7a9d6a8cca6faaec151061e598d98fcde5671a734a97d72ec650bc14cb38e550ee96d16733e3a501b2fd41cb08fcfe1427de3eaf88e848e8accf2e882b5802f2a4e9f7304c2f32e8b9256af0d96f1d52e6040033cc4f1f3169cec8e58c9e14617f954bdc79273f46c30c88ef5b9dad2ade50c1a33a1e2e407345c0e94a2cf4eaab04a877c53c6309eccbbe3c97ac9b72cc9b83f88355063ea01eee617d2b946d13628527b89bf97ef69c24f9c2ddf94a648007abf56518b0cde9491620018d20925a67f5063159403eaeea6d5a81d6bdae3c63662682f5b1df3ce5a9d01b99d7fd8bd9eec14afbad0a3cceee44dd9c35a7018eeac289beaeba565e239a17ae04aaa665265856c3ee1bf5ba5bfed1fad5a8cda418336b11b8213b9057a0d6258c80f9a171354a4c216d182564a8a3d7e58614d5e0cd3bce9a57a22a79a062bc8fbcea5acc0f2a1be15973713fc7af6112a5e1c6d63fe755f0b7974718d24ce236469259048602dc11c558a531133533012c214b93d798bb9ef169fcdf744754f54211d6d8c145e9e9dcc18dbf9fa9a83f0a77cd8f894e9c27b567c65b68d22b15b05826bf7492ed33cae9f05f54d0ffa00889a095e1ff1e3ba5693b7d0d676c636e869cfa1ef644aac8317139e167a17d963454167d2fe4e3ebccd0f09a5184922255a4ba7dbf47dcd1bff49fdcd4fc685247ffe0db4966a2d54f9ab1753f9f63475cfcca5b46b76700ec9d02f69ebd8f294a55a55ad7872320fc427035833d75aa39eaabe55ac4af34a3a8fc58d3dc4eb33d0eccfbf7d053c64b757bf8951c42457176165c9d46070164952c1bf377ddfa299af5113bfab3e7c551c3665bfedbaf0f6d9045e9d36a01197de0f26219c79e6005a49c5e30a362816d7069f8852298fe897e767d9a6d9c323504dc735b7cd481c15ec10a2d95b80b49b918a19c4d2801a81abfbb36564c20579fcb86241219b08bf20e94c3560193cf7cfd69327f3653651abc2046e1482e58971bbb914bb43029d7184d37b8ef881abc65d6524c813fab1953e138d0aea908679d36c4502ea64e270f83fde7fbc02071ca71420fcad86eb77cd4c85d3ffa495d8f6e8904e34f08f12f73f784514a03be0484bf4fea90405cd6b317c5d20a6a9cf10c41ebb10e9f102dda0ca4ec1a4d7817f1abd9da8d2cd016f7a5da8f943ab95995cbc443d35c38a01a4c005e5f873043c9f722845f4ff34cd42a15a9a2204f946131a7a85428a1fc57a1f5a691711db717ee99c140d13beee87f9ebb87e6151441dd0c366ddf56ba4517f210c7acd666990217672e4dd088dcec87092a4a106879b3412eefd8e70114aceeee93392aecadbc6ba473b512f5eba689afa7c4e2b2316a5ea181e63db377bf374b440dcdde6fb0d35c8a09eb1c013714797d48b9650d165cc44fcf3568f008ee3874057139c84b75a95566c3b9fdb6c8d1eb1f7441ca124a986b6d4fb79a106dc67b7757c4fcd2f88a804927e8741ebfb6c384e425a50255843fa7be8cbb960392a2fa05ee769f644155c91ccf74b7dd63e0b92a4d1359fe21d96e071a7c9a7a2a2a46aff9f9f81321409eb87e58824dedfc627ecf0159216dda05aacbd4f84a11eb1255d3d1d6dce092ff0dfbc106d5994e8ec9f19366a2d7d00ccd32be3c46ea3003dfab3183237eac843bf4004c1957a6f4c7c9de77fc4101245e0c8290d44c5aedb16c675563519b7f1ed0d57ead086b742b8c05755bcbaa175170268e080b1d172edb3853025d2aff5dba4ee55c6a8049ea403aeb85551ee9cbf64997ef20c336605b025a3e5e6c6a8ef19f47540f8f14d0f75ddb6526354774577d53b85ba0681ddd7349499dfe85296ffe7c589b1f12931255478629b4576175202c0d48d07fe9ba78f284953059fb9fc58c45ac9a0a973bb2c7ce0b8f7dd8a0cd5cb29d8352849b8f2224d68f91eadce2d9da747388d61e82fedb622931ce2b75ddd398f0ba66038e5144b1ae37db5de399ca557b88046214bd88eb7fa32ce70765f3f0e6c7a5bb9d6d403004a022c4d899ccda24ea5c7477f5c6f7dae525554100ab78dfd63891c101fc5c91f57133379739766caa81129e0efeb8793c7c7571ca253f79892b437b9f379b9de5053af0c54a8ff2322b6fb94489703c80baa3d240f5231656b084435252b3a2ef71a7e3d0a0196ad49fda0f43882d36536ba29d8e35e849ba007eb4c980d8db483d60fd06036020831a4e47d2eaca843c38a12f36c89da9ecf003c329a41132a07463ac34a68b908ae5f7d0d4b6d46465c2eba7b4c4bab20b436087277123715236d657962d9ebdf8934faddabb8f43de4885ed509f55ecca4cd2f17b895cac501a424a3593971cd5e00c06e4d583596cc397f4e62b6d5080767b0279fedeb49c73a19fe5c8d3aa1015b9159b8e1a9e0bba9f5e52c3f621d4e3566c8a17079592637dd78eeea7db5da63aeae26ed6613bc0452b82a92589c27d53e97bee91b787383e7c476374cd437bbeaa1e7707a76b18c47636af7a93d1de5cf2ddc236f47775baf0eb979b18de208ffb409454d801fbf438b71dfb071c41072f729524ad542441214a97a15c754706f30f942af02db863ef051220774e5f52a14a2f15cae2f686868ba049e7942d2aee487ec3fafe97bdfa9b546ac1f1e5e7510f32223ef2566232fcc354cf8303a13cec4ea66be6aab42a10f2ce07dad50798f677ba146d4e470245ebbe6780dda21a78a53eb40ec53a6f577d6317068f58fe8a7905dd540b88233a93c677e7bb2942d0848e5b8d3c41fe51834c252faca4dc39711dab88e89c7939c7377ff7f3665448ed403863bed95aab27de624161348b2f941c0e3d99a3def5d724ae8d25921071666e34e46e40a36f374a3c73fe182ceb4e7ba7ca30f05d4211d465f0455552b9d49c1b1accb6bb9b647672516fe290f89d254a4935328c712e89a5892fe0152d2a0f612aca950c478a102b87b9c3a62baa320ff667a92839950453a3be19972bba6b958485c8c77cafb7a09718717d41fc21b26ca57a8e9bb5bf3f61ccf42bda3d6976aa95f4f068e40d0fcf01b76abcc529eea846a7ba2d70125221291dda83c1fcf64d0e7d7dcae395ab5883a0ccbf8ad8de2871726f16e20eedfcfd602db55ede6b9f40b33de7f545d2bb484251b3f3f6e1926393d72bf04144b97e5a7e97c8b5fcf40dd5ec188eb401cbc9e5e1dea4999153a6080eee4244b3434e671861b2ee89d2d48e890a6327a52509270c0e4f1a0aa8850d256c42e25a512c13b4bb05ec8761698f43203932a94846b1e069c0692f7f98a345a9433fd4198b5ac5fecffe610a8e60b53597b74c22dc185b04bee2969a6846dd6fbb5854a74663e11d32529e28badedfd8b428d532ffb1f65961afe20b3f75b45e18c895c12614b11196d423ad61dd31ab96bddc8068fb67c0ffebbe9aebb73f8709418256d5f5c6ffe6b657a70c35adcc4ee761b274cb670a988cdeedd395091e14ca29d98372e84b8284d675e56b0dc480a4ffd3e44e705fd89dd1c20172af003cc4c8d65c842f9f5a5edc8b468da3c9faf71b19c11751f652dd224a3b0f1bd8d7f534df6ee45e861c58a7578e15608c51594a439b4df292669043945af8c81cd1da0f614e4bf7909caba747e9835fa9b8681106f5084c26d9b17470fee2c80b58b82a9dae9bf9cdaaf9cded59f24e6c88a581364d16895a1bdd3cfbad6d568c5a464571b5ec89c173f3c605da0cb515b9f7cb52c0734f2f99d91cce181821f0ad19181a88516bcaf67dc9afc1fa1119d58b1904a3b60c4e36e11d58e0ee4f5f353c460b607e2992d060168830f7fec99835c93c197b207132f6acbe50356f42d0a28b1fcb0bf621752e1064b69a12b8d5b462414a00b4e56c34f17bef7407c383bf06ccc71029aec94f4766b6f2db940e4b93ca8dc740f5c94906233301bb14dc4d1945379c9a12f2482a31c8b9dafe6e834eb87f3aa3e85efa8018c9fd2c439a3f5647a4c9025170d22f834898dfbe62a49557a4a0ffea877d3d0adac0af4feafd228f6074a015dbd5a58245ebfb56bf5a84f48290799e663b4d73f668e091b03ce8cf9d66773c48a4af11893777b9b4006b4e98c1fbd9db7e9b4c12ff78f8f71448f766742e541c213a865d5b395a2356625fcc68bb2c34") ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000000c0)={0x5, 0xe5bd, 0xffffffff, 0x7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000002c0)={{0xc4c, 0x2}, 'port1\x00', 0x40, 0x40, 0x7, 0xc79, 0x8f42, 0x7fffffff, 0x4, 0x0, 0x3, 0x4}) 2018/04/13 23:38:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) [ 352.580137] FAT-fs (loop0): Directory bread(block 11) failed [ 352.598174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:03 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x40030000000000]}}, 0x1c) [ 352.646605] attempt to access beyond end of device [ 352.651765] loop0: rw=2049, want=246, limit=2 2018/04/13 23:38:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) r1 = gettid() ptrace$getenv(0x4201, r1, 0x40, &(0x7f0000000080)) [ 352.693546] attempt to access beyond end of device [ 352.698690] loop0: rw=2049, want=247, limit=2 [ 352.714629] attempt to access beyond end of device [ 352.719770] loop0: rw=2049, want=248, limit=2 [ 352.724828] attempt to access beyond end of device [ 352.729941] loop0: rw=2049, want=249, limit=2 2018/04/13 23:38:03 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 352.761169] attempt to access beyond end of device [ 352.766308] loop0: rw=2049, want=262, limit=2 [ 352.777286] attempt to access beyond end of device [ 352.782442] loop0: rw=2049, want=263, limit=2 [ 352.812820] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 352.822917] attempt to access beyond end of device [ 352.828050] loop0: rw=2049, want=264, limit=2 [ 352.839177] attempt to access beyond end of device [ 352.844300] loop0: rw=2049, want=265, limit=2 [ 352.915536] attempt to access beyond end of device [ 352.920591] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:04 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1&', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8001, 0x40000) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/105) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000500)=0x200) r2 = getegid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) setregid(r2, r3) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000200)=0xe900000, 0x1) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000380)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000400)={r4, r5, 0x984}) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:04 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:04 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x1800000000000000]}}, 0x1c) 2018/04/13 23:38:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20000000000, 0x6ec02436ed206abf) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)=@ioapic={0x114000, 0x401, 0x0, 0x200, 0x0, [{0xffffffffed658a84, 0x7, 0x101, [], 0x933}, {0x5, 0xffffffff, 0x8001, [], 0x1}, {0x2, 0xfff, 0xab00, [], 0x80000000}, {0x5, 0x4, 0xfc4d, [], 0x800}, {0x5, 0x50120ed1, 0xc4, [], 0x4}, {0x2c0c, 0x80, 0x100000001, [], 0xffff}, {0x8677, 0x1, 0x0, [], 0x5}, {0x9, 0x2, 0x521d, [], 0x7}, {0x30, 0x2, 0x9, [], 0x101}, {0x7, 0x90c, 0x7, [], 0x2}, {0x9, 0x9, 0x18cb, [], 0x9}, {0x80000001, 0x8, 0x5, [], 0x7}, {0x7, 0x4, 0xffffffffffffff81, [], 0x6}, {0x100, 0x2, 0xb32}, {0x3, 0x2, 0x6, [], 0xe8}, {0x2, 0x8, 0xfff, [], 0x4}, {0x6, 0x7, 0x8, [], 0xfffffffffffffffa}, {0x100000001, 0x7, 0x8, [], 0x2}, {0x100000000, 0x8, 0x8, [], 0x1000}, {0x4, 0x4, 0x5}, {0x5, 0x5, 0x8, [], 0x6}, {0x7fffffff, 0x6, 0xa95, [], 0x9cff}, {0x101, 0x7, 0x4}, {0x4, 0x2, 0x8, [], 0x80000001}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="ff2b"], &(0x7f0000000240)=0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={r6, 0x0, 0x4, r6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000080)={{0xffffffff, 0x1f, 0x76a4, 0xc9e, 0x3, 0xffff}, 0xfffffffffffff801}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/13 23:38:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x9, 0xe801) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}, [0x0, 0x76, 0x2, 0x4, 0x1f, 0x9, 0x5, 0x8, 0x8001, 0x8, 0x4, 0x7, 0x1, 0x4, 0x1]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r2, 0x9a5}, &(0x7f00000002c0)=0x8) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) fremovexattr(r1, &(0x7f0000000300)=@known='system.advise\x00') r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x24283, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x1f, @mcast2={0xff, 0x2, [], 0x1}, 0x4}}, 0x6, 0x10000}, 0x90) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000000c0)={0x75, 0x4}) [ 353.176053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:05 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:05 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="2b1f0010080080000100000000000000"]) 2018/04/13 23:38:05 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfe80000000000000]}}, 0x1c) 2018/04/13 23:38:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20000000000, 0x6ec02436ed206abf) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)=@ioapic={0x114000, 0x401, 0x0, 0x200, 0x0, [{0xffffffffed658a84, 0x7, 0x101, [], 0x933}, {0x5, 0xffffffff, 0x8001, [], 0x1}, {0x2, 0xfff, 0xab00, [], 0x80000000}, {0x5, 0x4, 0xfc4d, [], 0x800}, {0x5, 0x50120ed1, 0xc4, [], 0x4}, {0x2c0c, 0x80, 0x100000001, [], 0xffff}, {0x8677, 0x1, 0x0, [], 0x5}, {0x9, 0x2, 0x521d, [], 0x7}, {0x30, 0x2, 0x9, [], 0x101}, {0x7, 0x90c, 0x7, [], 0x2}, {0x9, 0x9, 0x18cb, [], 0x9}, {0x80000001, 0x8, 0x5, [], 0x7}, {0x7, 0x4, 0xffffffffffffff81, [], 0x6}, {0x100, 0x2, 0xb32}, {0x3, 0x2, 0x6, [], 0xe8}, {0x2, 0x8, 0xfff, [], 0x4}, {0x6, 0x7, 0x8, [], 0xfffffffffffffffa}, {0x100000001, 0x7, 0x8, [], 0x2}, {0x100000000, 0x8, 0x8, [], 0x1000}, {0x4, 0x4, 0x5}, {0x5, 0x5, 0x8, [], 0x6}, {0x7fffffff, 0x6, 0xa95, [], 0x9cff}, {0x101, 0x7, 0x4}, {0x4, 0x2, 0x8, [], 0x80000001}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="ff2b"], &(0x7f0000000240)=0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={r6, 0x0, 0x4, r6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000080)={{0xffffffff, 0x1f, 0x76a4, 0xc9e, 0x3, 0xffff}, 0xfffffffffffff801}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/13 23:38:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) [ 354.117936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 354.143867] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 354.150598] FAT-fs (loop0): Directory bread(block 2) failed [ 354.194441] FAT-fs (loop0): Directory bread(block 3) failed [ 354.216870] FAT-fs (loop0): Directory bread(block 4) failed [ 354.227930] FAT-fs (loop0): Directory bread(block 5) failed [ 354.247180] FAT-fs (loop0): Directory bread(block 6) failed [ 354.270832] FAT-fs (loop0): Directory bread(block 7) failed [ 354.281234] FAT-fs (loop0): Directory bread(block 8) failed [ 354.287428] FAT-fs (loop0): Directory bread(block 9) failed [ 354.296974] FAT-fs (loop0): Directory bread(block 10) failed [ 354.303867] FAT-fs (loop0): Directory bread(block 11) failed [ 354.324626] attempt to access beyond end of device [ 354.329709] loop0: rw=2049, want=246, limit=2 [ 354.334348] attempt to access beyond end of device [ 354.339366] loop0: rw=2049, want=247, limit=2 [ 354.343988] attempt to access beyond end of device [ 354.349007] loop0: rw=2049, want=248, limit=2 [ 354.353734] attempt to access beyond end of device [ 354.358747] loop0: rw=2049, want=249, limit=2 [ 354.363339] attempt to access beyond end of device [ 354.368340] loop0: rw=2049, want=262, limit=2 [ 354.372944] attempt to access beyond end of device [ 354.377941] loop0: rw=2049, want=263, limit=2 [ 354.382534] attempt to access beyond end of device [ 354.387524] loop0: rw=2049, want=264, limit=2 [ 354.392659] attempt to access beyond end of device [ 354.397667] loop0: rw=2049, want=265, limit=2 [ 354.440473] attempt to access beyond end of device [ 354.445527] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:06 executing program 5: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:06 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6f) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) 2018/04/13 23:38:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0xffffff60) 2018/04/13 23:38:06 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfeffffff]}}, 0x1c) 2018/04/13 23:38:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20000000000, 0x6ec02436ed206abf) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)=@ioapic={0x114000, 0x401, 0x0, 0x200, 0x0, [{0xffffffffed658a84, 0x7, 0x101, [], 0x933}, {0x5, 0xffffffff, 0x8001, [], 0x1}, {0x2, 0xfff, 0xab00, [], 0x80000000}, {0x5, 0x4, 0xfc4d, [], 0x800}, {0x5, 0x50120ed1, 0xc4, [], 0x4}, {0x2c0c, 0x80, 0x100000001, [], 0xffff}, {0x8677, 0x1, 0x0, [], 0x5}, {0x9, 0x2, 0x521d, [], 0x7}, {0x30, 0x2, 0x9, [], 0x101}, {0x7, 0x90c, 0x7, [], 0x2}, {0x9, 0x9, 0x18cb, [], 0x9}, {0x80000001, 0x8, 0x5, [], 0x7}, {0x7, 0x4, 0xffffffffffffff81, [], 0x6}, {0x100, 0x2, 0xb32}, {0x3, 0x2, 0x6, [], 0xe8}, {0x2, 0x8, 0xfff, [], 0x4}, {0x6, 0x7, 0x8, [], 0xfffffffffffffffa}, {0x100000001, 0x7, 0x8, [], 0x2}, {0x100000000, 0x8, 0x8, [], 0x1000}, {0x4, 0x4, 0x5}, {0x5, 0x5, 0x8, [], 0x6}, {0x7fffffff, 0x6, 0xa95, [], 0x9cff}, {0x101, 0x7, 0x4}, {0x4, 0x2, 0x8, [], 0x80000001}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="ff2b"], &(0x7f0000000240)=0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={r6, 0x0, 0x4, r6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000080)={{0xffffffff, 0x1f, 0x76a4, 0xc9e, 0x3, 0xffff}, 0xfffffffffffff801}) 2018/04/13 23:38:06 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:06 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)="2e2f636f6e74726f6c2f66696c6531f6", 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x8000000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) [ 355.137729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 355.146166] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b}) 2018/04/13 23:38:06 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x1c030000]}}, 0x1c) 2018/04/13 23:38:06 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) 2018/04/13 23:38:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20000000000, 0x6ec02436ed206abf) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)=@ioapic={0x114000, 0x401, 0x0, 0x200, 0x0, [{0xffffffffed658a84, 0x7, 0x101, [], 0x933}, {0x5, 0xffffffff, 0x8001, [], 0x1}, {0x2, 0xfff, 0xab00, [], 0x80000000}, {0x5, 0x4, 0xfc4d, [], 0x800}, {0x5, 0x50120ed1, 0xc4, [], 0x4}, {0x2c0c, 0x80, 0x100000001, [], 0xffff}, {0x8677, 0x1, 0x0, [], 0x5}, {0x9, 0x2, 0x521d, [], 0x7}, {0x30, 0x2, 0x9, [], 0x101}, {0x7, 0x90c, 0x7, [], 0x2}, {0x9, 0x9, 0x18cb, [], 0x9}, {0x80000001, 0x8, 0x5, [], 0x7}, {0x7, 0x4, 0xffffffffffffff81, [], 0x6}, {0x100, 0x2, 0xb32}, {0x3, 0x2, 0x6, [], 0xe8}, {0x2, 0x8, 0xfff, [], 0x4}, {0x6, 0x7, 0x8, [], 0xfffffffffffffffa}, {0x100000001, 0x7, 0x8, [], 0x2}, {0x100000000, 0x8, 0x8, [], 0x1000}, {0x4, 0x4, 0x5}, {0x5, 0x5, 0x8, [], 0x6}, {0x7fffffff, 0x6, 0xa95, [], 0x9cff}, {0x101, 0x7, 0x4}, {0x4, 0x2, 0x8, [], 0x80000001}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="ff2b"], &(0x7f0000000240)=0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={r6, 0x0, 0x4, r6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) [ 355.193555] FAT-fs (loop0): Directory bread(block 3) failed [ 355.216307] FAT-fs (loop0): Directory bread(block 4) failed [ 355.295671] FAT-fs (loop0): Directory bread(block 5) failed [ 355.317462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 355.334504] FAT-fs (loop0): Directory bread(block 6) failed [ 355.367421] FAT-fs (loop0): Directory bread(block 7) failed [ 355.386168] FAT-fs (loop0): Directory bread(block 8) failed [ 355.401815] FAT-fs (loop0): Directory bread(block 9) failed [ 355.412874] FAT-fs (loop0): Directory bread(block 10) failed [ 355.436494] FAT-fs (loop0): Directory bread(block 11) failed [ 355.464758] attempt to access beyond end of device [ 355.469835] loop0: rw=2049, want=246, limit=2 [ 355.474447] attempt to access beyond end of device [ 355.479439] loop0: rw=2049, want=247, limit=2 [ 355.484069] attempt to access beyond end of device [ 355.489081] loop0: rw=2049, want=248, limit=2 [ 355.493698] attempt to access beyond end of device [ 355.499829] loop0: rw=2049, want=249, limit=2 [ 355.504433] attempt to access beyond end of device [ 355.509438] loop0: rw=2049, want=262, limit=2 [ 355.514788] attempt to access beyond end of device [ 355.519782] loop0: rw=2049, want=263, limit=2 [ 355.524389] attempt to access beyond end of device [ 355.529376] loop0: rw=2049, want=264, limit=2 [ 355.533984] attempt to access beyond end of device [ 355.538951] loop0: rw=2049, want=265, limit=2 [ 355.577383] attempt to access beyond end of device [ 355.582416] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000140)=ANY=[@ANYBLOB="7b0000010800000000000000000000009faef6d7040d6adba8610dd4cc94bc90417ddff4f3fa4fedb52d46b831ea992cf7bd333a89bcf7353d622902992cbd9dd1a65a9747f3c8a096a3c2d152eb02eff384aa465b47e8e7eb3981be8cd3e1b348b58c7f4dd19c8973f0953880d8bf347411c13e48a51e1f95ef6a3e856ca6c71e3bd620292ece954f240146f80cc045b8c642bb2d30afbbefb5f798a4787d5a55607966395fc2ab8776726283fd99ced3643045beb1fbb654a89f13593b5b7a97e733dbab3b72a52156bdfe47e13532f0758fd3abc6a1e2d882359304a5b73d21e1a4b58b25fb8bc2"]) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x200082) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x98, r2, 0x0, 0x70bd25, 0x25dfdbfc, {0x8}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast=0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9377}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x60}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x14}}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 2018/04/13 23:38:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:07 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x2000000000000000]}}, 0x1c) 2018/04/13 23:38:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x2a) r1 = getpid() get_robust_list(r1, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f00000002c0)=0x18) r2 = accept4(r0, &(0x7f0000000300)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f0000000380)=0x80, 0x0) accept4$llc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000400)=0x10, 0x80000) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x60000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@ipmr_getroute={0x14, 0x1a, 0x1, 0x70bd25, 0x25dfdbfe, {0x80}, ["", "", "", ""]}, 0x14}, 0x1}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2001, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 2018/04/13 23:38:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20000000000, 0x6ec02436ed206abf) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)=@ioapic={0x114000, 0x401, 0x0, 0x200, 0x0, [{0xffffffffed658a84, 0x7, 0x101, [], 0x933}, {0x5, 0xffffffff, 0x8001, [], 0x1}, {0x2, 0xfff, 0xab00, [], 0x80000000}, {0x5, 0x4, 0xfc4d, [], 0x800}, {0x5, 0x50120ed1, 0xc4, [], 0x4}, {0x2c0c, 0x80, 0x100000001, [], 0xffff}, {0x8677, 0x1, 0x0, [], 0x5}, {0x9, 0x2, 0x521d, [], 0x7}, {0x30, 0x2, 0x9, [], 0x101}, {0x7, 0x90c, 0x7, [], 0x2}, {0x9, 0x9, 0x18cb, [], 0x9}, {0x80000001, 0x8, 0x5, [], 0x7}, {0x7, 0x4, 0xffffffffffffff81, [], 0x6}, {0x100, 0x2, 0xb32}, {0x3, 0x2, 0x6, [], 0xe8}, {0x2, 0x8, 0xfff, [], 0x4}, {0x6, 0x7, 0x8, [], 0xfffffffffffffffa}, {0x100000001, 0x7, 0x8, [], 0x2}, {0x100000000, 0x8, 0x8, [], 0x1000}, {0x4, 0x4, 0x5}, {0x5, 0x5, 0x8, [], 0x6}, {0x7fffffff, 0x6, 0xa95, [], 0x9cff}, {0x101, 0x7, 0x4}, {0x4, 0x2, 0x8, [], 0x80000001}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="ff2b"], &(0x7f0000000240)=0x1) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000000c0)={r5, 0x0, 0x4, r5}) 2018/04/13 23:38:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xbd0d000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:07 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 356.094087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.106475] FAT-fs (loop0): Directory bread(block 2) failed [ 356.111746] IPVS: ftp: loaded support on port[0] = 21 [ 356.123569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4}, 0xfcf7) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) 2018/04/13 23:38:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:07 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xf0ffff]}}, 0x1c) [ 356.161584] FAT-fs (loop0): Directory bread(block 3) failed [ 356.180533] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20000000000, 0x6ec02436ed206abf) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)=@ioapic={0x114000, 0x401, 0x0, 0x200, 0x0, [{0xffffffffed658a84, 0x7, 0x101, [], 0x933}, {0x5, 0xffffffff, 0x8001, [], 0x1}, {0x2, 0xfff, 0xab00, [], 0x80000000}, {0x5, 0x4, 0xfc4d, [], 0x800}, {0x5, 0x50120ed1, 0xc4, [], 0x4}, {0x2c0c, 0x80, 0x100000001, [], 0xffff}, {0x8677, 0x1, 0x0, [], 0x5}, {0x9, 0x2, 0x521d, [], 0x7}, {0x30, 0x2, 0x9, [], 0x101}, {0x7, 0x90c, 0x7, [], 0x2}, {0x9, 0x9, 0x18cb, [], 0x9}, {0x80000001, 0x8, 0x5, [], 0x7}, {0x7, 0x4, 0xffffffffffffff81, [], 0x6}, {0x100, 0x2, 0xb32}, {0x3, 0x2, 0x6, [], 0xe8}, {0x2, 0x8, 0xfff, [], 0x4}, {0x6, 0x7, 0x8, [], 0xfffffffffffffffa}, {0x100000001, 0x7, 0x8, [], 0x2}, {0x100000000, 0x8, 0x8, [], 0x1000}, {0x4, 0x4, 0x5}, {0x5, 0x5, 0x8, [], 0x6}, {0x7fffffff, 0x6, 0xa95, [], 0x9cff}, {0x101, 0x7, 0x4}, {0x4, 0x2, 0x8, [], 0x80000001}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="ff2b"], &(0x7f0000000240)=0x1) [ 356.205189] FAT-fs (loop0): Directory bread(block 5) failed [ 356.236974] FAT-fs (loop5): Directory bread(block 2) failed 2018/04/13 23:38:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 356.250614] FAT-fs (loop0): Directory bread(block 6) failed [ 356.300103] FAT-fs (loop5): Directory bread(block 3) failed [ 356.308175] FAT-fs (loop0): Directory bread(block 7) failed [ 356.337827] FAT-fs (loop5): Directory bread(block 4) failed [ 356.341382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:07 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) 2018/04/13 23:38:07 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfffffffe]}}, 0x1c) [ 356.343920] FAT-fs (loop0): Directory bread(block 8) failed [ 356.370165] FAT-fs (loop5): Directory bread(block 5) failed [ 356.391520] FAT-fs (loop5): Directory bread(block 6) failed [ 356.397557] FAT-fs (loop0): Directory bread(block 9) failed [ 356.406346] IPVS: ftp: loaded support on port[0] = 21 [ 356.418119] FAT-fs (loop5): Directory bread(block 7) failed [ 356.429378] FAT-fs (loop0): Directory bread(block 10) failed 2018/04/13 23:38:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='{\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00']) 2018/04/13 23:38:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:07 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x400000000000000]}}, 0x1c) [ 356.447787] FAT-fs (loop5): Directory bread(block 8) failed [ 356.455128] FAT-fs (loop0): Directory bread(block 11) failed [ 356.478963] FAT-fs (loop5): Directory bread(block 9) failed [ 356.515894] FAT-fs (loop5): Directory bread(block 10) failed [ 356.545776] attempt to access beyond end of device [ 356.550867] loop0: rw=2049, want=246, limit=2 [ 356.554163] FAT-fs (loop5): Directory bread(block 11) failed [ 356.555415] buffer_io_error: 30 callbacks suppressed 2018/04/13 23:38:07 executing program 4: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff, 0x1}) ioctl$TIOCCBRK(r0, 0x5428) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x200, 0x0) getsockname$ipx(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10) [ 356.555426] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 356.591708] attempt to access beyond end of device [ 356.596908] loop0: rw=2049, want=247, limit=2 [ 356.601470] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 356.620251] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.673946] attempt to access beyond end of device [ 356.679083] loop0: rw=2049, want=248, limit=2 [ 356.683654] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 356.730421] attempt to access beyond end of device [ 356.735663] loop0: rw=2049, want=249, limit=2 [ 356.740246] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 356.760554] attempt to access beyond end of device [ 356.765622] loop0: rw=2049, want=262, limit=2 [ 356.768173] attempt to access beyond end of device [ 356.770236] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 356.775179] loop5: rw=2049, want=246, limit=2 [ 356.787678] Buffer I/O error on dev loop5, logical block 245, lost async page write [ 356.801796] attempt to access beyond end of device [ 356.806980] loop0: rw=2049, want=263, limit=2 [ 356.807480] attempt to access beyond end of device [ 356.811542] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 356.814925] attempt to access beyond end of device [ 356.816619] loop5: rw=2049, want=247, limit=2 [ 356.824489] loop0: rw=2049, want=264, limit=2 [ 356.829401] Buffer I/O error on dev loop5, logical block 246, lost async page write [ 356.833899] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 356.834131] attempt to access beyond end of device [ 356.839173] attempt to access beyond end of device [ 356.846316] loop0: rw=2049, want=265, limit=2 [ 356.846334] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 356.854147] loop5: rw=2049, want=248, limit=2 [ 356.854687] attempt to access beyond end of device [ 356.886140] loop5: rw=2049, want=249, limit=2 [ 356.890886] attempt to access beyond end of device [ 356.896062] loop5: rw=2049, want=262, limit=2 [ 356.900643] attempt to access beyond end of device [ 356.905623] loop5: rw=2049, want=263, limit=2 [ 356.910207] attempt to access beyond end of device [ 356.915184] loop5: rw=2049, want=264, limit=2 [ 356.919842] attempt to access beyond end of device [ 356.924867] loop5: rw=2049, want=265, limit=2 [ 356.968443] attempt to access beyond end of device [ 356.973582] loop0: rw=1, want=329, limit=2 [ 356.978346] attempt to access beyond end of device [ 356.983433] loop5: rw=1, want=329, limit=2 2018/04/13 23:38:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7b, 0x8, [0x0, 0x0]}) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x9f8) 2018/04/13 23:38:08 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x1c03000000000000]}}, 0x1c) 2018/04/13 23:38:08 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:08 executing program 5: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x9}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x480080, 0x0) memfd_create(&(0x7f00000000c0)='/dev/kvm\x00', 0x2) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x3b3}) 2018/04/13 23:38:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x3f00, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:08 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x80800) r1 = socket$netlink(0x10, 0x3, 0x1f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x10) r4 = accept4$ipx(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000002c0)={0x2, 0x6, 0x8, 0x5, 0x9}, 0x14) ioctl(r4, 0x3, &(0x7f0000000300)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000300)={{0x87, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x4, 'lblc\x00', 0x20, 0x3ff, 0x60}, {@multicast2=0xe0000002, 0x4e21, 0x5, 0xffffffffffffe882, 0x8001}}, 0x44) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000440)) r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x2, 0x101000) poll(&(0x7f0000000200)=[{r0, 0x8}, {r1, 0x2000}, {r2, 0xc000}, {r3, 0x1000}, {r4, 0x2}, {r5}, {r6, 0x8}, {r7, 0x9000}], 0x8, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r8, r9) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r10, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:08 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)="2e2f636f6e74726f6c2f66696c6531ff", 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20000000000, 0x6ec02436ed206abf) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)=@ioapic={0x114000, 0x401, 0x0, 0x200, 0x0, [{0xffffffffed658a84, 0x7, 0x101, [], 0x933}, {0x5, 0xffffffff, 0x8001, [], 0x1}, {0x2, 0xfff, 0xab00, [], 0x80000000}, {0x5, 0x4, 0xfc4d, [], 0x800}, {0x5, 0x50120ed1, 0xc4, [], 0x4}, {0x2c0c, 0x80, 0x100000001, [], 0xffff}, {0x8677, 0x1, 0x0, [], 0x5}, {0x9, 0x2, 0x521d, [], 0x7}, {0x30, 0x2, 0x9, [], 0x101}, {0x7, 0x90c, 0x7, [], 0x2}, {0x9, 0x9, 0x18cb, [], 0x9}, {0x80000001, 0x8, 0x5, [], 0x7}, {0x7, 0x4, 0xffffffffffffff81, [], 0x6}, {0x100, 0x2, 0xb32}, {0x3, 0x2, 0x6, [], 0xe8}, {0x2, 0x8, 0xfff, [], 0x4}, {0x6, 0x7, 0x8, [], 0xfffffffffffffffa}, {0x100000001, 0x7, 0x8, [], 0x2}, {0x100000000, 0x8, 0x8, [], 0x1000}, {0x4, 0x4, 0x5}, {0x5, 0x5, 0x8, [], 0x6}, {0x7fffffff, 0x6, 0xa95, [], 0x9cff}, {0x101, 0x7, 0x4}, {0x4, 0x2, 0x8, [], 0x80000001}]}) [ 357.807881] FAT-fs (loop0): Directory bread(block 2) failed [ 357.828783] FAT-fs (loop0): Directory bread(block 3) failed [ 357.851016] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002 lblc 2018/04/13 23:38:08 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfffff000]}}, 0x1c) 2018/04/13 23:38:08 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x2e) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="61f0740f") 2018/04/13 23:38:09 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x6, &(0x7f0000000000), 0x10) syz_open_dev$usbmon(&(0x7f0000001040)='/dev/usbmon#\x00', 0xfff, 0x284a01) open_by_handle_at(r0, &(0x7f0000000000)={0x1008, 0x8, "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"}, 0x400) 2018/04/13 23:38:09 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 357.859578] FAT-fs (loop0): Directory bread(block 4) failed [ 357.899751] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20000000000, 0x6ec02436ed206abf) [ 357.955981] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002 lblc [ 357.968520] FAT-fs (loop0): Directory bread(block 6) failed [ 357.996152] FAT-fs (loop0): Directory bread(block 7) failed [ 358.003454] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.023880] FAT-fs (loop0): Directory bread(block 8) failed [ 358.043557] FAT-fs (loop0): Directory bread(block 9) failed [ 358.068143] FAT-fs (loop0): Directory bread(block 10) failed [ 358.085353] FAT-fs (loop0): Directory bread(block 11) failed [ 358.155437] attempt to access beyond end of device [ 358.161011] loop0: rw=2049, want=246, limit=2 [ 358.168342] attempt to access beyond end of device [ 358.173591] loop0: rw=2049, want=247, limit=2 [ 358.188129] attempt to access beyond end of device [ 358.193207] loop0: rw=2049, want=248, limit=2 [ 358.201817] attempt to access beyond end of device [ 358.206976] loop0: rw=2049, want=249, limit=2 [ 358.211706] attempt to access beyond end of device [ 358.216891] loop0: rw=2049, want=262, limit=2 [ 358.221776] attempt to access beyond end of device [ 358.226838] loop0: rw=2049, want=263, limit=2 [ 358.231591] attempt to access beyond end of device [ 358.236673] loop0: rw=2049, want=264, limit=2 [ 358.241481] attempt to access beyond end of device [ 358.246600] loop0: rw=2049, want=265, limit=2 [ 358.602376] attempt to access beyond end of device [ 358.607427] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:10 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x18000000]}}, 0x1c) 2018/04/13 23:38:10 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) getsockname$llc(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x200000, 0x0) perf_event_open(&(0x7f000025c000)={0x2000000000000002, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f00000003c0)) io_setup(0x2fab, &(0x7f00000000c0)) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400)={0x0, 0xd1}, &(0x7f0000000440)=0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'sit0\x00', 0x402}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000500)={r3, 0x400}, &(0x7f0000000540)=0x8) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r4 = syz_open_dev$tun(&(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0xa616}]}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x800000010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000080)={0xffffffff, 0x7ff}, &(0x7f00000000c0)) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 2018/04/13 23:38:10 executing program 4: syz_mount_image$iso9660(&(0x7f0000000340)='iso9660\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x8000}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="32d1d3a7430dfdbb311272af9662700645c6120216daab0d3946558f73a914a34e3fcad54c618116427b7fc7ead3816cc6a5d1b6077060dae14a8b2356924de75af5875f52ff1f177478ace6da8cd8f3ba21b736742195691f5a98244be1f356feef14e5e5e361132b81e8aad7c2c08ee048ff8b060500b7a2adda5f19711af4e762f415acefd6ba0d05e848f9cb4696939c7ed97ba9c1145c518df9db924c6ee394708e15f5b0b03f2936cfdb8142bca46752002c"]) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)) 2018/04/13 23:38:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2018/04/13 23:38:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x7a00, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="8bc1f819d18727fc903b93349303a527634362c3d6f0146d974d1092059995aa41005d5c83d41cc4b6efad86636a51a450329d96bcacb186536c7124e1307a9721", 0x41) 2018/04/13 23:38:10 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 359.007472] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 359.037827] FAT-fs (loop0): Directory bread(block 2) failed [ 359.057189] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:10 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x18]}}, 0x1c) 2018/04/13 23:38:10 executing program 5: clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = add_key$user(&(0x7f00000012c0)='user\x00', &(0x7f0000001300)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001340)="312ff643a24c1f020ef3a9d56ac9c79dc7362eaa71a715274ca094ee48ed7dd9cec3d4fbbbe3a2de94a279b8b04c525572da2b8d838256b31a1aed2f7ea182e5c22a8c529edf547a192564cb699213032cccf575227becbd9ca9be7e941ebf5dc1a15e2b43c34233597fc6f9dd6bd565bbda3f758be5a453198e19f384a9b70499df6fd364cf6591634f58bf9d7512fee0212850436f7e45dce90440af9bdf4be00a729fa80678a8d6", 0xa9, 0xffffffffffffffff) keyctl$assume_authority(0x10, r2) utimes(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)={{}, {r0, r1/1000+30000}}) unshare(0x842000) r3 = timerfd_create(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r3, &(0x7f0000001440), r3, &(0x7f0000000200), 0x1800000000000, 0x6) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7f, 0x4000) ioctl$KDDELIO(r5, 0x4b35, 0x2) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000000)={0x200, {0x2, 0x4e21, @multicast2=0xe0000002}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e24, @multicast2=0xe0000002}, 0x40, 0x2, 0x0, 0x5, 0x7, 0x0, 0x6, 0x2}) socketpair(0xa, 0x800, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001280)={r7, &(0x7f0000000240)="775bfef09b7bd2567d5c87c5ebcac6a0d2def7791360564e903297876c2c8a0ea5b835880b47176d1e07b3e5f15129deff7e8cbcae", &(0x7f0000000280)=""/4096}, 0x18) socket$inet(0x2, 0x80003, 0x2) timerfd_gettime(r3, &(0x7f0000000100)) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000001400)=0x1, 0x4) 2018/04/13 23:38:10 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:10 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) io_setup(0x1000, &(0x7f0000000040)) [ 359.093931] FAT-fs (loop0): Directory bread(block 4) failed [ 359.117929] FAT-fs (loop0): Directory bread(block 5) failed [ 359.124010] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 359.163078] FAT-fs (loop0): Directory bread(block 7) failed [ 359.194331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 359.208800] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:10 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xff00000000000000]}}, 0x1c) [ 359.243735] FAT-fs (loop0): Directory bread(block 9) failed [ 359.270376] FAT-fs (loop0): Directory bread(block 10) failed [ 359.281091] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:38:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = memfd_create(&(0x7f0000000000)='rng\x00', 0x3) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0x42383807}, 0x8) [ 359.356778] attempt to access beyond end of device [ 359.361915] loop0: rw=2049, want=246, limit=2 [ 359.406666] attempt to access beyond end of device [ 359.411776] loop0: rw=2049, want=247, limit=2 [ 359.423154] attempt to access beyond end of device [ 359.428264] loop0: rw=2049, want=248, limit=2 [ 359.449237] attempt to access beyond end of device [ 359.454307] loop0: rw=2049, want=249, limit=2 [ 359.460388] attempt to access beyond end of device [ 359.465445] loop0: rw=2049, want=262, limit=2 [ 359.471400] attempt to access beyond end of device [ 359.476457] loop0: rw=2049, want=263, limit=2 [ 359.482412] attempt to access beyond end of device [ 359.487446] loop0: rw=2049, want=264, limit=2 [ 359.492104] attempt to access beyond end of device [ 359.497117] loop0: rw=2049, want=265, limit=2 [ 359.528390] attempt to access beyond end of device [ 359.533421] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:11 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) getcwd(&(0x7f0000000000)=""/68, 0x44) fallocate(r0, 0x0, 0x0, 0x6) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000917ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00002b2ffc)) 2018/04/13 23:38:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x900, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:11 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000006000)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x142, 0x0) pipe2(&(0x7f0000000040), 0x84800) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x17, 0xffffffffffffffff, 0x40}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000005000)=""/20) 2018/04/13 23:38:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:11 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x2f00000000000000]}}, 0x1c) 2018/04/13 23:38:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000100)="4db287ce3f94335be1b25e6869743e3a9310291305dcee6b185a362d7d9849fcdb61b9a68a31f391ed2c55de6cfff2b4045103e2104e4920c9be710c892f92e200afd00005c46494217a63cb08d7aaa940f2081601c28763ae42d712665eb4d04621fd", 0x63) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:11 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)="2e2f636f6e74726f6c2f66696c6531fe", 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 359.944190] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 359.951839] FAT-fs (loop0): Directory bread(block 2) failed [ 359.975916] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:11 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfeffffff00000000]}}, 0x1c) 2018/04/13 23:38:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000240)={0x6, r0, 0x1}) sendto$ax25(r1, &(0x7f0000000280)="d2d4bb6fce1f4cc15d5e0edcee36c8a2827872ba0e232bd64229d0cb0a56f45f0af46189447bacc216ac46bb0dbd5b23fffab5717bdb080d680bd08d11d9b8acf98cf5feb2e6be1a78d07c6a22c2cfe809fb811ea362e9ad92935ea12e3b2126f06791ba569300191d1e7adc5e875d3c1a27137994260f11f65eda8ce7dd3df665a3153d0f58fef9144398ec954138679a22feae55adc199ea52b8e1952e7da9e4303b2db625dc31eb26f83eb65152a85f30cd7b94512c56", 0xb8, 0x40044, &(0x7f0000000340)={0x3, {"24f2cf14a8316f"}, 0xffffffff}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f00009f5000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000008010000000000000000000000000008000100060000001fa05a05a53d3d42cce64715e948da38c8d6a3cdd91551acb4d99a4be55b64b43086"], 0x1c}, 0x1}, 0x0) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x1, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r3, 0x28e}, 0x8) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80001) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000380)=""/175, &(0x7f0000000440)=0xaf) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000005b000000c948d4b99f1b324d08658689db4bb5e5bf6ed61836eab6464eb6edbe4e74bd3244c39abd6d1e5c42be1a41c00d3b72bc9897667f6f49c7f76ff30f1e4ee06ad39d287cc69a9f604c6a34db46d8877aee9f4817100f51ff56bbb155e144487638ce69d24093e9e213c403b04c6b2e85eb6b97a4aa1237661fb46243108bcd260c240e95ea03826703b7a44dfb77e27e728500df8ac5cb0ef89d5f0058af13b806c47f4bcf24"], &(0x7f0000000140)=0x7f) 2018/04/13 23:38:11 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 360.012430] FAT-fs (loop0): Directory bread(block 4) failed [ 360.040176] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) getsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000240)="370f32ba2000b001ee0f01c9baf80c66b810813a8e66efbafc0ced66b8010000000f01c1360f01cf670f200766b9800000c00f326635010000000f30673e662e660cee", 0x43}], 0x1, 0x0, &(0x7f0000000080), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="b832000f00d867f466b8400000000f23d80f21f86635800000a00f23f86467660f3a410e07ba200066b802d3a45a66efd1a65900b84d000f00d0e63d0f01c96766c744240084ad21706766c744240235bc00006766c744240600000000670f011424", 0x62}], 0x1, 0x0, &(0x7f0000000140)=[@cr0={0x0, 0x40000000}], 0x1) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x4, 0x8000) arch_prctl(0x0, &(0x7f0000000100)="6c254dfaef0faa") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000340)="b809008ed0360f017801440f20c0663502000000440f22c0baa000b80000efbaf80c66b8e679618b66efbafc0cecba2000ed332ab8bd000f00d066b95e0a000066b80080000066ba000000000f3065643666dec5"}], 0xf6, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/13 23:38:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 360.061343] FAT-fs (loop0): Directory bread(block 6) failed [ 360.080163] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400000, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @multicast1=0xe0000001}, {0x306, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x4, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 'ip6gretap0\x00'}) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00'}, &(0x7f0000000140)=0x54) [ 360.114495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 360.136264] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:11 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 360.164350] FAT-fs (loop0): Directory bread(block 9) failed [ 360.191266] FAT-fs (loop0): Directory bread(block 10) failed 2018/04/13 23:38:11 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$peek(0x2, r0, &(0x7f0000000080)) bind$alg(0xffffffffffffffff, &(0x7f0000001540)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="0a6b260000e381ebb3b664f8586313db5ec213877b79404000005dc9f51e6a2ea3", 0x21) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9, 0x2000) fcntl$getflags(r1, 0x40b) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0xa002, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 23:38:11 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xff00]}}, 0x1c) [ 360.219324] FAT-fs (loop0): Directory bread(block 11) failed [ 360.250120] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 360.304283] attempt to access beyond end of device [ 360.309363] loop0: rw=2049, want=246, limit=2 [ 360.377332] attempt to access beyond end of device [ 360.382408] loop0: rw=2049, want=247, limit=2 [ 360.394740] attempt to access beyond end of device [ 360.399836] loop0: rw=2049, want=248, limit=2 [ 360.411248] attempt to access beyond end of device [ 360.416512] loop0: rw=2049, want=249, limit=2 [ 360.430302] attempt to access beyond end of device [ 360.435463] loop0: rw=2049, want=262, limit=2 [ 360.446508] attempt to access beyond end of device [ 360.451622] loop0: rw=2049, want=263, limit=2 [ 360.456423] attempt to access beyond end of device [ 360.461493] loop0: rw=2049, want=264, limit=2 [ 360.466141] attempt to access beyond end of device [ 360.471153] loop0: rw=2049, want=265, limit=2 [ 360.509309] attempt to access beyond end of device [ 360.514377] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xc60d, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) 2018/04/13 23:38:12 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:12 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x475ac8148a]}}, 0x1c) 2018/04/13 23:38:12 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fdb000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x8000000006) ioctl$TCSETSW(r2, 0x5402, &(0x7f0000000000)={0x0, 0x9}) r3 = dup2(r2, r1) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000480)="fd94e0d4c6b31d1df0c89f13c76f0d", 0xf}], 0x1) 2018/04/13 23:38:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x28}, 0x1}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r1) getpeername$netlink(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) 2018/04/13 23:38:12 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:12 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/32, 0x20) lseek(r0, 0x1d, 0x1) lremovexattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000001c0)=@random={'btrfs.', 'em0mime_type\x00'}) getdents64(r0, &(0x7f00000000c0)=""/243, 0xf3) [ 360.952825] FAT-fs (loop0): Directory bread(block 2) failed [ 360.983640] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:12 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:12 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x4000000]}}, 0x1c) 2018/04/13 23:38:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x420200, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000007200004000000000000000000000000034336d5e4fd8d502b73d28b9cbee7fb30400000000000073ced25356fc04afd16d4bbdeb7d4f025e022e7aebbda037a289f76d6d5775ad20cc14c580a494e06da9b0abc70dd7"]) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000240)={0x0, 0x100000001, 0xffff}) sync_file_range(r0, 0x0, 0x6, 0x5) [ 361.007252] FAT-fs (loop0): Directory bread(block 4) failed [ 361.021195] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @multicast1, 0x0}, &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', r1}) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="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", 0x1000) [ 361.082154] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:12 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:12 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2000000080002) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000080)={0xd44, 0x7f, 0x80000001, 0x5}) [ 361.151152] FAT-fs (loop0): Directory bread(block 7) failed [ 361.169238] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:12 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xf0]}}, 0x1c) [ 361.192117] FAT-fs (loop0): Directory bread(block 9) failed [ 361.218570] FAT-fs (loop0): Directory bread(block 10) failed [ 361.250214] FAT-fs (loop0): Directory bread(block 11) failed [ 361.340905] attempt to access beyond end of device [ 361.346102] loop0: rw=2049, want=246, limit=2 [ 361.377506] attempt to access beyond end of device [ 361.382578] loop0: rw=2049, want=247, limit=2 [ 361.393685] attempt to access beyond end of device [ 361.398785] loop0: rw=2049, want=248, limit=2 [ 361.404853] attempt to access beyond end of device [ 361.410016] loop0: rw=2049, want=249, limit=2 [ 361.422661] attempt to access beyond end of device [ 361.427751] loop0: rw=2049, want=262, limit=2 [ 361.432382] attempt to access beyond end of device [ 361.437376] loop0: rw=2049, want=263, limit=2 [ 361.442451] attempt to access beyond end of device [ 361.447475] loop0: rw=2049, want=264, limit=2 [ 361.452075] attempt to access beyond end of device [ 361.457063] loop0: rw=2049, want=265, limit=2 [ 361.497396] attempt to access beyond end of device [ 361.502462] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:12 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xdca, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:12 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:12 executing program 5: capset(&(0x7f00005cf000)={0x19980330}, &(0x7f0000f03fe8)) linkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1000) socket$packet(0x11, 0x3, 0x300) 2018/04/13 23:38:12 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x34000]}}, 0x1c) 2018/04/13 23:38:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)=ANY=[]) fstat(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)="2e2f66696c65302fe5696c65302f66696c653000", 0xe000, 0x0, r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe) 2018/04/13 23:38:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0xfffffdb8) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="25b5a4ee8472123a7b4197f814f37b6934df35bb64110a8eb27b78aad6c0b98a889c11f7ccf6151f5ba54407e885404e5e7ab4deb5be38eba7ff9ed2778f05a8d5ea5cbe6a51bdc13e21b92c3cf81ae2bd447a25b183708f11c46bc769016981110b6257b2b919", 0x67, 0xfff}, {&(0x7f0000000240)="fd66cb4eccfea47fbc40627b5e020b16e1d5551c3e954d8f3453d21cccda076e7743c0eaf29d8c5c4214c508441371954076ab27cabda91354570154e39c0c4fe26ce3e29d2a6d91bcabf87f080467a1882030d3dcece1c0dea04a5de357cb3e8badb01ead52e0de384c99f1b3965dd3a8a1c55d054c28d412f102baeb8c6866e0e9be064464f75f972051c06d8fade1d8bf40de", 0x94, 0x800}, {&(0x7f0000000300)="18500587d534eee95bd23faf85b60686ca2791a50f8b75591217e8cf7b0c3ceb676287c94a46b8534e4145ba7acdc4c2d1aed563507f6dde76da7ffa886f996afdbdfca12d9344d6bf29400c6fcec53da6a4d2169f4843325f39f160314a6e7598596678754bbd15f0511a5ddef15e0c1e8b388abee9f84f2d264de27af6f72fcc05dbc7254eba677346a6bba82f5af631b3880b24604868ad6a0fe31ec33ce8d4b5", 0xa2, 0x5}], 0x2008, &(0x7f0000000080)={[{@gid={'gid', 0x3d, [0x79, 0x2d, 0x33]}, 0x2c}, {@check_relaxed='check=relaxed', 0x2c}, {@overriderock='overriderockperm', 0x2c}, {@map_acorn='map=acorn', 0x2c}, {@norock='norock', 0x2c}]}) 2018/04/13 23:38:12 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)="2e2f636f6e74726f6c2f66696c6531ff", 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 361.901413] FAT-fs (loop0): Directory bread(block 2) failed [ 361.907849] FAT-fs (loop0): Directory bread(block 3) failed [ 361.914420] FAT-fs (loop0): Directory bread(block 4) failed [ 361.921355] FAT-fs (loop0): Directory bread(block 5) failed [ 361.927538] FAT-fs (loop0): Directory bread(block 6) failed [ 361.934082] FAT-fs (loop0): Directory bread(block 7) failed [ 361.940370] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:13 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 361.946414] FAT-fs (loop0): Directory bread(block 9) failed [ 361.952548] FAT-fs (loop0): Directory bread(block 10) failed [ 361.958687] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:38:13 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xc0fe]}}, 0x1c) 2018/04/13 23:38:13 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x248800, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000100)={0x0, 0x83ad, 0x4205, &(0x7f0000000080)}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000140)={{0x7f, @broadcast=0xffffffff, 0x4e24, 0x2, 'rr\x00', 0x8, 0x1ff, 0x57}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e20, 0x1, 0xa050, 0x1, 0x7}}, 0x44) ioctl$PPPOEIOCSFWD(r1, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'ip_vti0\x00'}}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="a4c87b93ed414ebc91679bc967d0ad8a", 0x10) 2018/04/13 23:38:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = socket$inet(0x2, 0x2, 0x5) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="6e4d06003f040000dd00040000000900"], &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e23, 0x9, @empty, 0x10001}}}, 0x84) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:13 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000100)) socketpair$inet6(0xa, 0x6, 0xfff, &(0x7f00000000c0)) 2018/04/13 23:38:13 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x34}, 0x1}, 0x0) [ 362.066080] attempt to access beyond end of device [ 362.071150] loop0: rw=2049, want=246, limit=2 [ 362.075721] buffer_io_error: 38 callbacks suppressed [ 362.075731] Buffer I/O error on dev loop0, logical block 245, lost async page write 2018/04/13 23:38:13 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 362.131919] 9pnet_virtio: no channels available for device ./file0/file0 [ 362.210733] attempt to access beyond end of device [ 362.215830] loop0: rw=2049, want=247, limit=2 [ 362.220434] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 362.233765] 9pnet_virtio: no channels available for device ./file0/file0 [ 362.298327] attempt to access beyond end of device [ 362.303418] loop0: rw=2049, want=248, limit=2 [ 362.307987] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 362.318556] attempt to access beyond end of device [ 362.323663] loop0: rw=2049, want=249, limit=2 [ 362.328235] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 362.336119] attempt to access beyond end of device [ 362.341131] loop0: rw=2049, want=262, limit=2 [ 362.345992] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 362.353899] attempt to access beyond end of device [ 362.358898] loop0: rw=2049, want=263, limit=2 [ 362.363488] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 362.371390] attempt to access beyond end of device [ 362.376423] loop0: rw=2049, want=264, limit=2 [ 362.380994] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 362.388898] attempt to access beyond end of device [ 362.393880] loop0: rw=2049, want=265, limit=2 [ 362.398449] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 362.438377] attempt to access beyond end of device [ 362.443417] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:13 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)) 2018/04/13 23:38:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x48, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) socketpair$inet6(0xa, 0x80000, 0x0, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:13 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xffffffff00000000]}}, 0x1c) 2018/04/13 23:38:13 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/04/13 23:38:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000580)={0x1, 0x5, 0x20, 0x8}, 0x10) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={0x0, 0xa86, 0x4}, &(0x7f0000000540)=0x8) r3 = socket$inet(0x2, 0x80a, 0x0) sendto(r3, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000f34000)=@ethernet={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x12) sendmmsg$alg(r2, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="3e59fe04bae75cfd14f526e0acc3c48c", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/88, 0x1e}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000000040)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x15}}, 0x14}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x73, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x584}}, 0x2, 0xff, 0xfffffffffffffffe, 0x8a99, 0xc}, &(0x7f0000000200)=0x98) r5 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x7f, 0x400000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000600)=ANY=[@ANYBLOB="400000ff3f36502859e80004"]) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r4, 0x4, 0x3, 0x36297ac8}, &(0x7f00000002c0)=0x10) getpeername(r0, &(0x7f0000000080)=@pptp={0x0, 0x0, {0x0, @remote}}, &(0x7f0000000100)=0xfffffffffffffdd3) socket$vsock_stream(0x28, 0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x80800) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000004c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="29000000fe0f84d118443ebe67318b98e5c5b22e8368720e54e1f0ec0a09dc5fb4185174105d70327565a76299f8006ae860b3fb6a7b5ffaa79777fd8778a60bcfc7f543104d9a5d5d488523dadfc48aa4257d238d5320438ca3a78270b5e561b0d8434758d2d2b8517ae11c6468d241c0affea0ec0b92455d46d97d8b60a842d2697ecf6e815c290fda965a23bc27dd15d16c87f061baa62c067e29cccb9225507ed851af5796e4343be9212d405e5161dc98951d8d05a7131eff070000000000006d4106810d46a81e0d4bb5bb1496b490f440088909ad636ab3db64b8c195fbdcb1a86844b7e24f2aaefba4500778df7dd82a5c1e"], &(0x7f0000000380)=0x2) vmsplice(r0, &(0x7f0000000d80)=[{&(0x7f0000000700)="96ec05bd701308b1be15f089049bcd14e4d6717d08ce3b0032144ec5fe5acb2e75fb75d22bd4fc68fe5de72963b6b85860b052d048192882e9242f57bbf573aab75b5933f4191e441f0f4a383129f2fd784f030657fb0a23784e8cc0a8e2143aef7f2c38e0802bdda78ddaf3bee9891d53bb74c2954fe37e79d7dbbec2ae4fabf6e82d30f72e5089055625ceff1d514c2a503ea3842e1d3719460875c8ab943ae1b285407026cdeb61f6f464eaf5f9048ab6b3482215b0bf16ef8c9bc1d1dba48ca3fed5c4d8", 0xc6}, {&(0x7f0000000800)="c7f540065f3b1c4d38f56b10c5e916062b6d3c91a7ffaaa1f5013d8804673ec30ce6d7c090e8a655c35cda0f978f6e84398588a6409b6930c7ffaf5bc1e62245d48c643439aa011f7eafb2ae8aef9b84c0fab1242920c1c0b05f1105a7923d50dd82b7967e55dc22df5d1c8423d9a9c09cc8081103714058ee342e767bae199664aeb1995abb877fec8daef8eb188343d7ccb94ef3f1941ae127771acf28b8db42f510591c8964054c61d5e77e1a9c2692c32a9da01ff596c9225fa3d98700752060e0ad09bf01e87c", 0xc9}, {&(0x7f0000000900)="8d6ad2d785ab0509a13e7f3a7865f7f377e239694272971aec314fac0687a22939d9cae4eb09ef3e5825b05fd39a3bfb7a62d0fe376681cf5d3451e8bdb4a3c1c1612416eaa4adee7d571ba461a4272c1f039799a1c246f26ce65fd62e3c33b3062e0a1225a1c7f7e7", 0x69}, {&(0x7f0000000980)="29a9d95fbf1ff64ab4ca1c3c4ca3e470b0be32dd7f9797cc26cc4cd0303e994e6bd2b1bbed4902d206557d1b033edd674e6bfebee63202ad38a2b500aad61ad9e8888b151d64b8530fff739c073e612bca2965ac6e15e4641e136c4abcd323ec821d6bf24a1e0cf4c94259c755beeac10679f052a47fe90b28ebef90ba0eb3e7b7d901c13401bb7a839a837aed8e54587856471cf2a8bc0209e99950b89ca27d6ab944d59a5da68817f794f53d3acb317db2c869fd4b72ec5de291ff58c2cf45899c86b4da0ab904a78c78e3", 0xcc}, {&(0x7f0000000a80)="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", 0xfd}, {&(0x7f0000000b80)="744b334bd6fd5b9b5925562b3a4fa380831c384597d4eeb2d718cabb6fd8efee49520c6c79450e6f3e8bc73759214a6bba6dd521cdc6a65aadeab863414a02b6ed0ac48121590bfb4dee11e7ff635aee51913c7c6bef5c07", 0x58}, {&(0x7f0000000c00)="33de6f4c8a060c5e5d7cc8e123f21468876a3a9cb00a2eaa1d1740caf43dcf4bccba9b79b525930a13b64577204276f5ac65120d80747007e96b070ba4851bfea9f1f485d1a027b78a898e70a8ad9efb21d4f6c3cf0f1844e9f7bcbcba66a3a715fdf6a53f49c9e72d178075be355af84aca1106187d41124d1895ac5482feabe964afbc6bcaed1dcabd1712f98a77d175e805b8551d0dfeda4867499111da7a3f6b25b6190d2ef232d93cb17ec06dd99c16b6", 0xb3}, {&(0x7f0000000cc0)="b00c5b030d4c97315c57d3a8f1aeb43c32d4dc948e8cb3c6976ed921b454bf908b91c6bcc5b14fdf6c15c7a2becc4f5f8437ebea88ea36c4f2cc9a489bf540a3c58533946007d53415b552969d60e24757300060ef0b7becedd14f02aaedb08c1c11915b3c21abb5dce2c617a3aa05189ea5d712ecca2395a48bf01a7fa36635703d0ea4cb9708ec446f72eb2081a7396151", 0x92}], 0x8, 0x9) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10) 2018/04/13 23:38:13 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:13 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:14 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000cbeff8)='.', &(0x7f0000000440)='ramfs\x00', 0x2000, &(0x7f000002f000)) r0 = getuid() r1 = getgid() r2 = dup(0xffffffffffffff9c) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x413, 0x0, 0x5, 0x3, 0x1c, "4205a0ddf34291b5ed8d9e26eaa16768e8ff25db59fbd04daaefd3fe5f6abcf2c79cc239e2dca8c3b043131e3cbc30ca088c1338338ee03b1d91617692539de8", "d88b887ebae706028eebfe54ff6a51a3a1c1a7214d589fc339ec27e6076ef9cdce54aedd298912a24a7e5901dc1a87234885230461b4de9b56c060e29ac7e179", "7a403723637d49660bb21454ab27c3252bb1a04917c4759e0385ba3b5c279a6c", [0x1, 0x7f]}) sendmsg$alg(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="bf7d499d567bf49a75b3a471e47765f4564f01c73deaab7d76b48cadc4c9699fed7fa34045b9ef5c2dd9e97f46f80600b4a106bf7f179489c2a5ac4300f66cfe610b384457546688fd1a632afcd39ff9c8463c9ee22e9e1e986a2e01eec74682906e72302e473c128a574578acabeaa6844b4dd327879158d7e218285242e45dd5caea961aca952fa676c42ab4661d9eaf726ebe2e3ea539588d60e5c819", 0x9e}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000280)="dcc5c4f9dd4d1086e94348b863d8565bd853042c531cf65e5f7a3dfe33ac26442fb8b632ec61f7c7f2800f3bd002e81dd27cb426d3a30c6baedbb2511d3b6b75cf8e1910dc5d6bce94a29a591bfb5c51582c2139f3bf8e12f49c6979ce42a1001fe75872e1b69a89ca31da8c62c49d2e16bd9d65d35bfa013c2ceb965520b65ec2355a29b102c9392a2d299bed1cac4c8ac166b5d2df745b476cd4cf1d549381a7f347a7848039713ed07bef9861890f834573100eae584f3469d41590d98dd3fcdee0309cc1f1dbe4e561bee658a772", 0xd0}, {&(0x7f0000001480)="1e5158d649fd4e45a0723bf13453a2b820e33ae1e920ba1eedaf9d812c591e2297725bab16031a46ae9791f9d0bfd748f3f152974595c939ee0c53268d2c89c1fbb78d8487b0aa1d83f09b9ec84991e0c6aeb6f8cdb2ded953324a3e20f053b4ff12cdb29e49c7c73cbb2d9abc0a9a6e070410596475814fb302b6ea6f413069b661e1169f80716d18b62d7e371eb1ff19ffa7ae743fe0661c232ffd55161e259ff2148c8372ca1401a30dde2eb65f87141e9e884b578d4a5c4968d69609844f3e2d7e21100fd37b033993054c43fde7", 0xd0}, {&(0x7f0000001580)="5738a3085bfd7035922f98e7c73b1c1be050e2043e030113c953dbd67c17a3c91dcf3b814ea18d0b35e89675054b2f9b3a95c586525bdb6a83c91612e6b2c82f6c0add522647634fd315a0fa188b8aba78d4dfa46c4a85a17ac2ff2728deb82ea1255fd1febb3497cac188c338e013253086560a2dabff36663b154fd89ad4211045f7bae5edd3b92fd1e0eda0d3319db0dafd0ae7c52a1b624bf5b2caf0c69403461b77a7a3b147fe4b4d13ee8d94ff14d5aacfb4b54f6d8871bb4c07f56294aff19d88c3b9257c8f83da1071b52c6c1c9d0cd3b91e644fd0554285ced5588c530b5475f2da4fd2a5f5fb003213ade7", 0xf0}, {&(0x7f0000001680)="f4f933409b7984d34b66989d5f1a8ae9f0a5b16dd51e35ef56a46f1f20dfafe54a98a5c4773f773430b7cf20aefed17bd9ad36199064d86781f193197d772418d177ad3a37e32beb4659aa5f74e09d03cfefb37bf6c8873016a0d44c689b0fe16524befa1681a4679747ed5f330e3ab1461d74e8391d0204d2826c9cefc7dcf974933bd3d0c571589485a21811afe621613aef8e69e58e0ead9e1ff7eb2cf7594345ff865f0eaa632482", 0xaa}, {&(0x7f0000001740)="b66c7f99fab828d474c79d8fa514d561622140194936bd563b4241ce0b245be27fe6965a6a7308a2c2a293159e450d02acf01836a147a646aac11a58cd6bf13764e265e950ebad0d51af8ef0469639cee8253ef2551b3d2f957d6c62ff956f3a17be4125207549e7425264f4157ccf4fff413029696112ca24029d6d0d07a4881ec88d23242bfec1e8a73ccc4a4edd6e12c28a55eea3c238bc9d42061de079a7371bff706f5ec20a83a0b9c2f5cba8e88df302ae12a26bb6b589ced3731388c0", 0xc0}, {&(0x7f0000001800)="d3b2e9c0222f30a9b13c4f5f830a7a135e1db6842176fb0370deda4e9a10650d96187ac334c9de05ad07cd99d0d1b34b45aca7b496caf9edafa4209350e8265737d5ab6a8c63d533244b5d3d0e307b2e405e3d6702ae76ef8a9cb7cdf38d9003479feb48f1f2ed0503c99243056f07af6ced64981f07d928dda96576dfe223bc360ff087347900d993fb456d3e23d514bd62f337b0d829b3fb84a31186ff63eb6c5969fcbfee7793c9b975ed23033a2c94ecf4d42b9954cac420411c7132e3", 0xbf}], 0x8, &(0x7f00000018c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x20000000}, 0x20000010) lchown(&(0x7f0000000040)='./file0\x00', r0, r1) mount(&(0x7f0000000140)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f0000000000)='.', 0x0) [ 362.856815] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:14 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x2000]}}, 0x1c) 2018/04/13 23:38:14 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x34}, 0x1}, 0x0) [ 362.906649] FAT-fs (loop0): Directory bread(block 3) failed [ 362.984185] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000580)={0x1, 0x5, 0x20, 0x8}, 0x10) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={0x0, 0xa86, 0x4}, &(0x7f0000000540)=0x8) r3 = socket$inet(0x2, 0x80a, 0x0) sendto(r3, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000f34000)=@ethernet={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x12) sendmmsg$alg(r2, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="3e59fe04bae75cfd14f526e0acc3c48c", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/88, 0x1e}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000000040)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x15}}, 0x14}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x73, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x584}}, 0x2, 0xff, 0xfffffffffffffffe, 0x8a99, 0xc}, &(0x7f0000000200)=0x98) r5 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x7f, 0x400000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000600)=ANY=[@ANYBLOB="400000ff3f36502859e80004"]) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r4, 0x4, 0x3, 0x36297ac8}, &(0x7f00000002c0)=0x10) getpeername(r0, &(0x7f0000000080)=@pptp={0x0, 0x0, {0x0, @remote}}, &(0x7f0000000100)=0xfffffffffffffdd3) socket$vsock_stream(0x28, 0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x80800) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000004c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="29000000fe0f84d118443ebe67318b98e5c5b22e8368720e54e1f0ec0a09dc5fb4185174105d70327565a76299f8006ae860b3fb6a7b5ffaa79777fd8778a60bcfc7f543104d9a5d5d488523dadfc48aa4257d238d5320438ca3a78270b5e561b0d8434758d2d2b8517ae11c6468d241c0affea0ec0b92455d46d97d8b60a842d2697ecf6e815c290fda965a23bc27dd15d16c87f061baa62c067e29cccb9225507ed851af5796e4343be9212d405e5161dc98951d8d05a7131eff070000000000006d4106810d46a81e0d4bb5bb1496b490f440088909ad636ab3db64b8c195fbdcb1a86844b7e24f2aaefba4500778df7dd82a5c1e"], &(0x7f0000000380)=0x2) vmsplice(r0, &(0x7f0000000d80)=[{&(0x7f0000000700)="96ec05bd701308b1be15f089049bcd14e4d6717d08ce3b0032144ec5fe5acb2e75fb75d22bd4fc68fe5de72963b6b85860b052d048192882e9242f57bbf573aab75b5933f4191e441f0f4a383129f2fd784f030657fb0a23784e8cc0a8e2143aef7f2c38e0802bdda78ddaf3bee9891d53bb74c2954fe37e79d7dbbec2ae4fabf6e82d30f72e5089055625ceff1d514c2a503ea3842e1d3719460875c8ab943ae1b285407026cdeb61f6f464eaf5f9048ab6b3482215b0bf16ef8c9bc1d1dba48ca3fed5c4d8", 0xc6}, {&(0x7f0000000800)="c7f540065f3b1c4d38f56b10c5e916062b6d3c91a7ffaaa1f5013d8804673ec30ce6d7c090e8a655c35cda0f978f6e84398588a6409b6930c7ffaf5bc1e62245d48c643439aa011f7eafb2ae8aef9b84c0fab1242920c1c0b05f1105a7923d50dd82b7967e55dc22df5d1c8423d9a9c09cc8081103714058ee342e767bae199664aeb1995abb877fec8daef8eb188343d7ccb94ef3f1941ae127771acf28b8db42f510591c8964054c61d5e77e1a9c2692c32a9da01ff596c9225fa3d98700752060e0ad09bf01e87c", 0xc9}, {&(0x7f0000000900)="8d6ad2d785ab0509a13e7f3a7865f7f377e239694272971aec314fac0687a22939d9cae4eb09ef3e5825b05fd39a3bfb7a62d0fe376681cf5d3451e8bdb4a3c1c1612416eaa4adee7d571ba461a4272c1f039799a1c246f26ce65fd62e3c33b3062e0a1225a1c7f7e7", 0x69}, {&(0x7f0000000980)="29a9d95fbf1ff64ab4ca1c3c4ca3e470b0be32dd7f9797cc26cc4cd0303e994e6bd2b1bbed4902d206557d1b033edd674e6bfebee63202ad38a2b500aad61ad9e8888b151d64b8530fff739c073e612bca2965ac6e15e4641e136c4abcd323ec821d6bf24a1e0cf4c94259c755beeac10679f052a47fe90b28ebef90ba0eb3e7b7d901c13401bb7a839a837aed8e54587856471cf2a8bc0209e99950b89ca27d6ab944d59a5da68817f794f53d3acb317db2c869fd4b72ec5de291ff58c2cf45899c86b4da0ab904a78c78e3", 0xcc}, {&(0x7f0000000a80)="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", 0xfd}, {&(0x7f0000000b80)="744b334bd6fd5b9b5925562b3a4fa380831c384597d4eeb2d718cabb6fd8efee49520c6c79450e6f3e8bc73759214a6bba6dd521cdc6a65aadeab863414a02b6ed0ac48121590bfb4dee11e7ff635aee51913c7c6bef5c07", 0x58}, {&(0x7f0000000c00)="33de6f4c8a060c5e5d7cc8e123f21468876a3a9cb00a2eaa1d1740caf43dcf4bccba9b79b525930a13b64577204276f5ac65120d80747007e96b070ba4851bfea9f1f485d1a027b78a898e70a8ad9efb21d4f6c3cf0f1844e9f7bcbcba66a3a715fdf6a53f49c9e72d178075be355af84aca1106187d41124d1895ac5482feabe964afbc6bcaed1dcabd1712f98a77d175e805b8551d0dfeda4867499111da7a3f6b25b6190d2ef232d93cb17ec06dd99c16b6", 0xb3}, {&(0x7f0000000cc0)="b00c5b030d4c97315c57d3a8f1aeb43c32d4dc948e8cb3c6976ed921b454bf908b91c6bcc5b14fdf6c15c7a2becc4f5f8437ebea88ea36c4f2cc9a489bf540a3c58533946007d53415b552969d60e24757300060ef0b7becedd14f02aaedb08c1c11915b3c21abb5dce2c617a3aa05189ea5d712ecca2395a48bf01a7fa36635703d0ea4cb9708ec446f72eb2081a7396151", 0x92}], 0x8, 0x9) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10) 2018/04/13 23:38:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 363.033395] FAT-fs (loop0): Directory bread(block 5) failed [ 363.057194] FAT-fs (loop0): Directory bread(block 6) failed [ 363.064663] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0xffffffffffffffbf) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x9d, "0fab79d2c50468f9cae987322acd6bc968da6e1931da9ef5e32e0451d61f083bea34edd035db61cbc6154df6c9e62f0807da037384c34133c4766afb19544df9ca26e543d4b99c6e1008ed3040bed2d0edbc0c77a2d310346a5a41026f7cb5a5bb55557939a5602866b30ab7cb21957bc3a28d720ea2fb67007c2c72923e9205935529dec59dd72b5bc64964e3810aa51c0a49056d92202c79d8fdbb95"}, &(0x7f0000000040)=0xa5) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r2, 0x346, 0x10, 0x5}, &(0x7f0000000200)=0x10) 2018/04/13 23:38:14 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xf0ffffffffffff]}}, 0x1c) [ 363.095692] FAT-fs (loop0): Directory bread(block 8) failed [ 363.125589] FAT-fs (loop0): Directory bread(block 9) failed [ 363.158269] FAT-fs (loop0): Directory bread(block 10) failed [ 363.190821] FAT-fs (loop0): Directory bread(block 11) failed [ 363.252401] attempt to access beyond end of device [ 363.257531] loop0: rw=2049, want=246, limit=2 [ 363.262115] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 363.270664] attempt to access beyond end of device [ 363.275845] loop0: rw=2049, want=247, limit=2 [ 363.280422] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 363.291902] attempt to access beyond end of device [ 363.297127] loop0: rw=2049, want=248, limit=2 [ 363.302407] attempt to access beyond end of device [ 363.307472] loop0: rw=2049, want=249, limit=2 [ 363.312867] attempt to access beyond end of device [ 363.317903] loop0: rw=2049, want=262, limit=2 [ 363.322614] attempt to access beyond end of device [ 363.327784] loop0: rw=2049, want=263, limit=2 [ 363.332369] attempt to access beyond end of device [ 363.337363] loop0: rw=2049, want=264, limit=2 [ 363.341933] attempt to access beyond end of device [ 363.346898] loop0: rw=2049, want=265, limit=2 [ 363.390346] attempt to access beyond end of device [ 363.395392] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:14 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/04/13 23:38:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xc90d000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:14 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/103) r1 = socket$alg(0x26, 0x5, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000bbfe8)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0) syz_open_pts(r3, 0x20000) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) r4 = accept$alg(r1, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r5, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f000007d000)="b3", 0x1}]) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) 2018/04/13 23:38:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:14 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f000033e000)="170000001a001bed0000132100f404fffffffffffffff7", 0x17) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000140)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30bf2300051f920f96829a5e89cee08cbfd9886e9abd8047c0b052ea8651f07184bcbca8ce9b6990539dc7533d0340f9fdfbd10877258332e9acffb2a4b8795de62c1928867e7b6887d6374b9b320ada1585e9661f82f3cda830a399ecd974e9b13e09c9d29535a2845d58cb159c6599446ade8936bc0fc8543a402d31698dfa19024634ee4471904d9fa8a3e3bcc3130ba31d65e23f9391821a9390b1973749622aba9266f761e87397991711b97f6a5e62718d3b0b7dd0ec0463ca706846f7c4f90dc3059c0a7182dc9fd66f1efed581301af480a9fe70c5f471d20c7bf9e0b3707d438f44545cc9a51c"], 0xee) recvmmsg(r1, &(0x7f0000f7bfc0)=[{{&(0x7f0000478000)=@hci, 0x5, &(0x7f0000edfff8), 0x1dd, &(0x7f0000579000)=""/221, 0x276}}], 0x4444648, 0x40010000, &(0x7f0000000000)={0x0, r2+10000000}) 2018/04/13 23:38:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0x2a4, 0x80000) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000000c0)={r0, 0x3}) 2018/04/13 23:38:14 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfc000000]}}, 0x1c) 2018/04/13 23:38:14 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xffffffff00000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 363.797053] FAT-fs (loop0): Directory bread(block 2) failed [ 363.821775] FAT-fs (loop0): Directory bread(block 3) failed [ 363.838379] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 363.848574] FAT-fs (loop0): Directory bread(block 5) failed [ 363.859278] FAT-fs (loop0): Directory bread(block 6) failed [ 363.868447] FAT-fs (loop0): Directory bread(block 7) failed [ 363.880782] FAT-fs (loop0): Directory bread(block 8) failed [ 363.891455] FAT-fs (loop0): Directory bread(block 9) failed 2018/04/13 23:38:15 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xf000]}}, 0x1c) 2018/04/13 23:38:15 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)) 2018/04/13 23:38:15 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/04/13 23:38:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000000)={0x1, 0x824, [{0x101, 0x0, 0x7fffffff}]}) [ 363.902468] FAT-fs (loop0): Directory bread(block 10) failed [ 363.930763] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:38:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:15 executing program 4: r0 = socket$inet6(0xa, 0x80000000000007fe, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f00005dafe4)=@in={0x2, 0x4e21}, 0x10, &(0x7f00002c9000)}, 0x8000) close(r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x90002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x7c, 0x67, 0x1000, 0x9, 0x5, 0x8000}) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x954ac89dfe8dff37, 0x0) [ 364.023833] attempt to access beyond end of device [ 364.028924] loop0: rw=2049, want=246, limit=2 2018/04/13 23:38:15 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xb) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@routing, 0x8) connect$inet6(r0, &(0x7f0000032fe4)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) getsockname$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) 2018/04/13 23:38:15 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfe80]}}, 0x1c) [ 364.070148] attempt to access beyond end of device [ 364.075295] loop0: rw=2049, want=247, limit=2 [ 364.105184] attempt to access beyond end of device [ 364.110321] loop0: rw=2049, want=248, limit=2 [ 364.162383] attempt to access beyond end of device [ 364.167483] loop0: rw=2049, want=249, limit=2 [ 364.197918] attempt to access beyond end of device [ 364.203075] loop0: rw=2049, want=262, limit=2 [ 364.231244] attempt to access beyond end of device [ 364.236339] loop0: rw=2049, want=263, limit=2 [ 364.259283] attempt to access beyond end of device [ 364.264373] loop0: rw=2049, want=264, limit=2 [ 364.269057] attempt to access beyond end of device [ 364.274094] loop0: rw=2049, want=265, limit=2 [ 364.306346] attempt to access beyond end of device [ 364.311392] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:15 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/04/13 23:38:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x48b) 2018/04/13 23:38:15 executing program 5: r0 = msgget$private(0x0, 0x1) msgrcv(r0, &(0x7f0000000000)={0x0, ""/54}, 0x3e, 0x2, 0x2000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@int=0x8, 0x4) setitimer(0x1, &(0x7f00000000c0)={{0x0, 0x7530}, {0x0, 0x2710}}, &(0x7f0000000100)) r2 = getpid() r3 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000140)={r1, r1, 0x4}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180)="25a0c643a0997873e821a304", &(0x7f00000001c0)="2753fa30b862d5ded1cfa2ead087ff60fd77ed3ce8e062654f1f1e22fbe5d4155874c5fa610b53e26eb622b35a24b585a4eb9a12a0a943158be80c5b395823fa0810138f76c491d4768a0ce5d11ee669b389e2b0e8fc8981f7dd684933404653668f34437259862d1c6b51712d0fca4949506d41ab742830d18c92f393a27cdb8d255a4e1dda88d349169f3288fb95"}, 0x20) keyctl$join(0x1, &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000300)={0x3, 0x4}) openat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x0) tgkill(r3, r3, 0xe) r5 = request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)='md5sum@.\'\x00', 0xfffffffffffffff8) r6 = add_key(&(0x7f00000005c0)='encrypted\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000640)="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", 0x1000, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000540)='trusted\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x1}, r6) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000001640)=0xffffffffffffffff, 0x4) r7 = semget$private(0x0, 0x2, 0x4) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000001680)=""/5) keyctl$get_persistent(0x16, r4, r5) add_key(&(0x7f00000016c0)='big_key\x00', &(0x7f0000001700)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001740)="8413baaa2d7a94dbbdddbbb6321f622f3edf58f3c924d2fdc8ebef8b4071a27f29b670cbc3eb6e3e67aac3c96bf2c742ef95af7b7621916d974cf69ad076a04a1533421622a9547d702e98bd6e351b8fb1cb61d155634672e40c4d1a032360562da7d7db74b25c951274b1efe99d2fada33b5fbcf9c1d472e06d7a01e2b88ba1556ae9bd32", 0x85, r6) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001900)={@dev, 0x0}, &(0x7f0000001940)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001ac0)={@hci={0x1f, r8, 0x3}, {&(0x7f0000001980)=""/214, 0xd6}, &(0x7f0000001a80), 0x17}, 0xa0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000001b80)={0x13, 0x7, 0xb50, 0x0, 0x6, 0x20, 0x6, 0x7fff, 0x10000000000000, 0x7fff, 0x7f, 0x5, 0x0, 0x9, 0x6, 0x1f, 0xb1, 0xfffffffffffffffb, 0x1}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001bc0)={{0x2, 0x4e21}, {0xb5196f007ce0389a}, 0x12, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 'veth0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001c40)={0x0, 0x1, 0x80000001}, &(0x7f0000001c80)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001cc0)={r9, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x84) 2018/04/13 23:38:15 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xfeffffff00000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:15 executing program 4: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() capget(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x8, 0x40, 0x7, 0x7, 0xf354, 0x2}) r1 = accept$ax25(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0x10) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3, 0x32, r1, 0x1000000020) capget(&(0x7f0000001ff9)={0x20080522}, &(0x7f0000000000)) 2018/04/13 23:38:15 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x31c]}}, 0x1c) 2018/04/13 23:38:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:15 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 364.750541] FAULT_INJECTION: forcing a failure. [ 364.750541] name failslab, interval 1, probability 0, space 0, times 0 [ 364.761877] CPU: 0 PID: 26858 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 364.768734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.778145] Call Trace: [ 364.780763] dump_stack+0x1b9/0x294 [ 364.784411] ? dump_stack_print_info.cold.2+0x52/0x52 [ 364.789635] should_fail.cold.4+0xa/0x1a [ 364.793721] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 364.798822] ? lock_acquire+0x1dc/0x520 [ 364.802788] ? perf_trace_lock+0xd6/0x900 [ 364.806946] ? find_held_lock+0x36/0x1c0 [ 364.811024] ? check_same_owner+0x320/0x320 [ 364.815345] ? rcu_note_context_switch+0x710/0x710 [ 364.820267] ? graph_lock+0x170/0x170 [ 364.824067] __should_failslab+0x124/0x180 [ 364.828297] should_failslab+0x9/0x14 [ 364.832099] __kmalloc_track_caller+0x2c4/0x760 [ 364.836771] ? snd_ctl_ioctl+0x25a/0x10a0 [ 364.840915] memdup_user+0x2c/0xa0 [ 364.844489] snd_ctl_ioctl+0x25a/0x10a0 [ 364.848456] ? snd_ctl_elem_add_user+0x170/0x170 [ 364.853212] ? __fget+0x40c/0x650 [ 364.856659] ? match_held_lock+0x891/0x8b0 [ 364.860897] ? expand_files.part.8+0x9a0/0x9a0 [ 364.865470] ? kasan_check_write+0x14/0x20 [ 364.869702] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 364.874634] ? wait_for_completion+0x870/0x870 [ 364.879224] ? snd_ctl_elem_add_user+0x170/0x170 [ 364.883974] do_vfs_ioctl+0x1cf/0x16a0 [ 364.887858] ? ioctl_preallocate+0x2e0/0x2e0 [ 364.892261] ? fget_raw+0x20/0x20 [ 364.895708] ? __sb_end_write+0xac/0xe0 [ 364.899687] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 364.905213] ? fput+0x130/0x1a0 [ 364.908489] ? ksys_write+0x1a6/0x250 [ 364.912284] ? security_file_ioctl+0x94/0xc0 [ 364.916691] ksys_ioctl+0xa9/0xd0 [ 364.920139] SyS_ioctl+0x24/0x30 [ 364.923497] ? ksys_ioctl+0xd0/0xd0 [ 364.927128] do_syscall_64+0x29e/0x9d0 [ 364.931010] ? vmalloc_sync_all+0x30/0x30 [ 364.935158] ? _raw_spin_unlock_irq+0x27/0x70 [ 364.939649] ? finish_task_switch+0x1ca/0x810 [ 364.944144] ? syscall_return_slowpath+0x5c0/0x5c0 [ 364.949068] ? syscall_return_slowpath+0x30f/0x5c0 [ 364.953993] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 364.959355] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.964200] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 364.969379] RIP: 0033:0x455319 [ 364.972556] RSP: 002b:00007ff3144efc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.980278] RAX: ffffffffffffffda RBX: 00007ff3144f06d4 RCX: 0000000000455319 [ 364.987541] RDX: 00000000200001c0 RSI: 00000000c4c85513 RDI: 0000000000000014 2018/04/13 23:38:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{&(0x7f00000000c0)=@in6={0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/145, 0x91}, {&(0x7f00000002c0)=""/233, 0xe9}], 0x2, &(0x7f00000003c0)=""/199, 0xc7, 0x3e37}, 0xd7ef}, {{&(0x7f00000004c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/87, 0x57}, {&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f00000005c0)=""/103, 0x67}, {&(0x7f0000000640)=""/56, 0x38}, {&(0x7f0000000680)=""/243, 0xf3}, {&(0x7f0000000780)=""/112, 0x70}], 0x6, &(0x7f0000000880)=""/121, 0x79, 0x3}, 0xe433}, {{&(0x7f0000000900)=@rc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000009c0)=""/86, 0x56}], 0x2, 0x0, 0x0, 0xe572}, 0x3b}, {{&(0x7f0000000a80)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b00)=""/230, 0xe6}, {&(0x7f0000000c00)=""/195, 0xc3}, {&(0x7f0000000d00)=""/232, 0xe8}, {&(0x7f0000000e00)=""/93, 0x5d}], 0x4, &(0x7f0000000ec0)=""/55, 0x37, 0x9}, 0x4000}, {{&(0x7f0000000f00)=@can, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/172, 0xac}, {&(0x7f0000001040)=""/219, 0xdb}, {&(0x7f0000001140)=""/69, 0x45}], 0x3, &(0x7f0000001200)=""/195, 0xc3, 0x2}, 0x3f}, {{&(0x7f0000001300)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001380)=""/40, 0x28}, {&(0x7f00000013c0)=""/214, 0xd6}], 0x2, &(0x7f0000001500)=""/195, 0xc3, 0x5}, 0xffff7ffffffffffa}, {{&(0x7f0000001600)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001680)=""/49, 0x31}], 0x1, &(0x7f0000001700)=""/4096, 0x1000, 0xff}, 0x8}], 0x7, 0x10000, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002ac0)='IPVS\x00') r4 = dup2(r0, r0) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000002980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x40, r3, 0x500, 0x70bd2d, 0x25dfdbfb, {0x11}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x811f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x8000) bind$alg(r2, &(0x7f0000002a00)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(pcrypt(gcm(aes)))\x00'}, 0x410) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000028c0)="12a734685947ee7ac2a87bb36f7a8df0c4b64c7bd80d8f75592c893638a30de647", 0x21) 2018/04/13 23:38:16 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x4, 0x4, 0x9, 0x4}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00003f6651)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000a32000)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f000041aff8)={@my=0x0}) [ 364.994801] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 365.002061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 365.009322] R13: 00000000000002b5 R14: 00000000006f7198 R15: 0000000000000000 [ 365.035423] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:16 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfec0000000000000]}}, 0x1c) [ 365.060730] FAT-fs (loop0): Directory bread(block 3) failed [ 365.080999] FAT-fs (loop0): Directory bread(block 4) failed [ 365.097355] FAT-fs (loop0): Directory bread(block 5) failed [ 365.105168] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:16 executing program 7 (fault-call:2 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:16 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x8c, "c91ebbcccb33c68b547da0bf79146d0d3c988e284d53b6fb99b085405fea93ff6c4834d2c4e633a01c94af44ed58a249d3e51b81f6e713f399669f3ed4e86ea5899b8223d635635033c539dcb8293baf1095c4161599620d36f72dc6f17bf7d8b6b7e9f4c6b56f1e7011e99f1f3e86498e7c409ac0d200be708a75b11b1842fe2cacb3e46ff1199e1e5cb3f5"}, &(0x7f0000000140)=0xb0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) [ 365.118351] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) [ 365.162609] FAT-fs (loop0): Directory bread(block 8) failed [ 365.180596] FAT-fs (loop0): Directory bread(block 9) failed [ 365.194300] FAT-fs (loop0): Directory bread(block 10) failed [ 365.200478] FAT-fs (loop0): Directory bread(block 11) failed [ 365.275898] attempt to access beyond end of device [ 365.280998] loop0: rw=2049, want=246, limit=2 [ 365.291256] attempt to access beyond end of device [ 365.296437] loop0: rw=2049, want=247, limit=2 [ 365.301690] attempt to access beyond end of device [ 365.306807] loop0: rw=2049, want=248, limit=2 [ 365.312868] attempt to access beyond end of device [ 365.318088] loop0: rw=2049, want=249, limit=2 [ 365.323571] attempt to access beyond end of device [ 365.325871] FAULT_INJECTION: forcing a failure. [ 365.325871] name failslab, interval 1, probability 0, space 0, times 0 [ 365.328761] loop0: rw=2049, want=262, limit=2 [ 365.340062] CPU: 0 PID: 26891 Comm: syz-executor7 Not tainted 4.16.0+ #1 [ 365.344979] attempt to access beyond end of device [ 365.351241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.351249] Call Trace: [ 365.351277] dump_stack+0x1b9/0x294 [ 365.351304] ? dump_stack_print_info.cold.2+0x52/0x52 [ 365.351323] ? lock_downgrade+0x8e0/0x8e0 [ 365.351364] should_fail.cold.4+0xa/0x1a [ 365.356354] loop0: rw=2049, want=263, limit=2 [ 365.365690] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.365712] ? __local_bh_enable_ip+0x161/0x230 [ 365.365732] ? _raw_spin_unlock_bh+0x30/0x40 [ 365.374969] attempt to access beyond end of device [ 365.377116] ? release_sock+0x1e2/0x2b0 [ 365.377135] ? rcu_is_watching+0x85/0x140 [ 365.377157] ? __release_sock+0x3a0/0x3a0 [ 365.377181] ? find_held_lock+0x36/0x1c0 [ 365.377232] ? check_same_owner+0x320/0x320 [ 365.381377] loop0: rw=2049, want=264, limit=2 [ 365.385398] ? rcu_note_context_switch+0x710/0x710 [ 365.385417] ? __netlink_lookup+0x5cf/0xaa0 [ 365.385444] __should_failslab+0x124/0x180 [ 365.390152] attempt to access beyond end of device [ 365.395020] should_failslab+0x9/0x14 [ 365.395038] kmem_cache_alloc_node+0x272/0x780 [ 365.395060] ? find_held_lock+0x36/0x1c0 [ 365.395092] __alloc_skb+0x111/0x780 [ 365.395116] ? skb_scrub_packet+0x580/0x580 [ 365.399823] loop0: rw=2049, want=265, limit=2 [ 365.404185] ? rcu_is_watching+0x85/0x140 [ 365.404209] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 365.487049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.492598] ? netlink_autobind.isra.34+0x240/0x330 [ 365.497649] netlink_sendmsg+0xb01/0xfa0 [ 365.501739] ? netlink_unicast+0x740/0x740 [ 365.506017] ? security_socket_sendmsg+0x94/0xc0 [ 365.510789] ? netlink_unicast+0x740/0x740 [ 365.515041] sock_sendmsg+0xd5/0x120 [ 365.518769] ___sys_sendmsg+0x805/0x940 [ 365.522767] ? copy_msghdr_from_user+0x560/0x560 [ 365.527545] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 365.533089] ? proc_fail_nth_write+0x96/0x1f0 [ 365.537594] ? __fget_light+0x2ef/0x430 [ 365.541586] ? fget_raw+0x20/0x20 [ 365.545053] ? find_held_lock+0x36/0x1c0 [ 365.549128] ? kasan_check_write+0x14/0x20 [ 365.553389] ? wait_for_completion+0x870/0x870 [ 365.557995] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.563547] ? sockfd_lookup_light+0xc5/0x160 [ 365.566433] QAT: Invalid ioctl [ 365.568055] __sys_sendmsg+0x115/0x270 [ 365.568079] ? SyS_shutdown+0x30/0x30 [ 365.568097] ? __sb_end_write+0xac/0xe0 [ 365.568120] ? fput+0x130/0x1a0 [ 365.568142] ? ksys_write+0x1a6/0x250 [ 365.590073] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 365.590731] encrypted_key: master key parameter '¹ö‡§Y0:÷zÅ9z½»”MÞ­t=¦ó)À|ósoŸÖèÊé×ëí`Œ×Ȩ“¬b&?+ÆAT‡ùÂrm]YŸ/½à[áØÇq¥˜ù{e8f°µˆ€lôt)dž§S&ÈHçÒ‡Ís wU [ 365.590731] v4°â·<*w©›G_cäÕ„©N©/'=нZSž}Ô›¸ZȤ+c¸a°z5Ó³K²¢“cRLÿQñÊZãê,H…:[ciˆå‘ÎZ_V/žoY•û' is invalid [ 365.594941] SyS_sendmsg+0x29/0x30 [ 365.594958] ? __sys_sendmsg+0x270/0x270 [ 365.594978] do_syscall_64+0x29e/0x9d0 [ 365.594994] ? vmalloc_sync_all+0x30/0x30 [ 365.595011] ? _raw_spin_unlock_irq+0x27/0x70 [ 365.595033] ? finish_task_switch+0x1ca/0x810 [ 365.595053] ? syscall_return_slowpath+0x5c0/0x5c0 [ 365.595071] ? syscall_return_slowpath+0x30f/0x5c0 [ 365.595092] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 365.595125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.649215] QAT: Invalid ioctl [ 365.654117] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 365.654135] RIP: 0033:0x455319 [ 365.654144] RSP: 002b:00007fd211432c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.654164] RAX: ffffffffffffffda RBX: 00007fd2114336d4 RCX: 0000000000455319 [ 365.654175] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000013 [ 365.654185] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 365.654194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 365.654205] R13: 00000000000004f1 R14: 00000000006fa738 R15: 0000000000000000 [ 365.720633] QAT: Invalid ioctl [ 365.755425] attempt to access beyond end of device [ 365.760509] loop0: rw=1, want=329, limit=2 [ 365.863884] QAT: Invalid ioctl [ 365.876339] encrypted_key: master key parameter '¹ö‡§Y0:÷zÅ9z½»”MÞ­t=¦ó)À|ósoŸÖèÊé×ëí`Œ×Ȩ“¬b&?+ÆAT‡ùÂrm]YŸ/½à[áØÇq¥˜ù{e8f°µˆ€lôt)dž§S&ÈHçÒ‡Ís wU [ 365.876339] v4°â·<*w©›G_cäÕ„©N©/'=нZSž}Ô›¸ZȤ+c¸a°z5Ó³K²¢“cRLÿQñÊZãê,H…:[ciˆå‘ÎZ_V/žoY•û' is invalid 2018/04/13 23:38:17 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfec00000]}}, 0x1c) 2018/04/13 23:38:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f00000000c0)=""/127, &(0x7f0000000140)=0x7f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x60, &(0x7f0000000180)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @rand_addr=0x81}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @multicast1=0xe0000001}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r2, 0x20}, &(0x7f0000000340)=0x8) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:17 executing program 3 (fault-call:3 fault-nth:1): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:17 executing program 5: r0 = msgget$private(0x0, 0x1) msgrcv(r0, &(0x7f0000000000)={0x0, ""/54}, 0x3e, 0x2, 0x2000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@int=0x8, 0x4) setitimer(0x1, &(0x7f00000000c0)={{0x0, 0x7530}, {0x0, 0x2710}}, &(0x7f0000000100)) r2 = getpid() r3 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000140)={r1, r1, 0x4}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180)="25a0c643a0997873e821a304", &(0x7f00000001c0)="2753fa30b862d5ded1cfa2ead087ff60fd77ed3ce8e062654f1f1e22fbe5d4155874c5fa610b53e26eb622b35a24b585a4eb9a12a0a943158be80c5b395823fa0810138f76c491d4768a0ce5d11ee669b389e2b0e8fc8981f7dd684933404653668f34437259862d1c6b51712d0fca4949506d41ab742830d18c92f393a27cdb8d255a4e1dda88d349169f3288fb95"}, 0x20) keyctl$join(0x1, &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000300)={0x3, 0x4}) openat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x0) tgkill(r3, r3, 0xe) r5 = request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)='md5sum@.\'\x00', 0xfffffffffffffff8) r6 = add_key(&(0x7f00000005c0)='encrypted\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000640)="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", 0x1000, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000540)='trusted\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x1}, r6) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000001640)=0xffffffffffffffff, 0x4) r7 = semget$private(0x0, 0x2, 0x4) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000001680)=""/5) keyctl$get_persistent(0x16, r4, r5) add_key(&(0x7f00000016c0)='big_key\x00', &(0x7f0000001700)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001740)="8413baaa2d7a94dbbdddbbb6321f622f3edf58f3c924d2fdc8ebef8b4071a27f29b670cbc3eb6e3e67aac3c96bf2c742ef95af7b7621916d974cf69ad076a04a1533421622a9547d702e98bd6e351b8fb1cb61d155634672e40c4d1a032360562da7d7db74b25c951274b1efe99d2fada33b5fbcf9c1d472e06d7a01e2b88ba1556ae9bd32", 0x85, r6) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001900)={@dev, 0x0}, &(0x7f0000001940)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001ac0)={@hci={0x1f, r8, 0x3}, {&(0x7f0000001980)=""/214, 0xd6}, &(0x7f0000001a80), 0x17}, 0xa0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000001b80)={0x13, 0x7, 0xb50, 0x0, 0x6, 0x20, 0x6, 0x7fff, 0x10000000000000, 0x7fff, 0x7f, 0x5, 0x0, 0x9, 0x6, 0x1f, 0xb1, 0xfffffffffffffffb, 0x1}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001bc0)={{0x2, 0x4e21}, {0xb5196f007ce0389a}, 0x12, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 'veth0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001c40)={0x0, 0x1, 0x80000001}, &(0x7f0000001c80)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001cc0)={r9, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x84) 2018/04/13 23:38:17 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1278, 0x6f2000, &(0x7f0000000500)) 2018/04/13 23:38:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x60000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:17 executing program 7 (fault-call:2 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:17 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x100000000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 365.916809] QAT: Invalid ioctl [ 365.920141] QAT: Invalid ioctl [ 365.998363] FAULT_INJECTION: forcing a failure. [ 365.998363] name failslab, interval 1, probability 0, space 0, times 0 [ 366.002477] FAT-fs (loop0): Directory bread(block 2) failed [ 366.009755] CPU: 1 PID: 26911 Comm: syz-executor7 Not tainted 4.16.0+ #1 [ 366.015793] FAT-fs (loop0): Directory bread(block 3) failed [ 366.022307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.022314] Call Trace: [ 366.022344] dump_stack+0x1b9/0x294 [ 366.022364] ? dump_stack_print_info.cold.2+0x52/0x52 [ 366.022382] ? is_bpf_text_address+0xd7/0x170 [ 366.022405] should_fail.cold.4+0xa/0x1a [ 366.022421] ? __save_stack_trace+0x7e/0xd0 [ 366.022441] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 366.022463] ? save_stack+0x43/0xd0 [ 366.022480] ? kasan_kmalloc+0xc4/0xe0 [ 366.029326] FAT-fs (loop0): Directory bread(block 4) failed [ 366.037551] ? kasan_slab_alloc+0x12/0x20 [ 366.037571] ? find_held_lock+0x36/0x1c0 [ 366.037609] ? check_same_owner+0x320/0x320 [ 366.037630] ? rcu_note_context_switch+0x710/0x710 [ 366.037648] __should_failslab+0x124/0x180 [ 366.037664] should_failslab+0x9/0x14 [ 366.037679] kmem_cache_alloc_node_trace+0x26f/0x770 [ 366.037701] __kmalloc_node_track_caller+0x33/0x70 [ 366.037721] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 366.040634] FAT-fs (loop0): Directory bread(block 5) failed [ 366.043920] __alloc_skb+0x14d/0x780 [ 366.043939] ? skb_scrub_packet+0x580/0x580 [ 366.043962] ? rcu_is_watching+0x85/0x140 [ 366.043980] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 366.044008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.044027] ? netlink_autobind.isra.34+0x240/0x330 [ 366.044048] netlink_sendmsg+0xb01/0xfa0 [ 366.044073] ? netlink_unicast+0x740/0x740 [ 366.051642] FAT-fs (loop0): Directory bread(block 6) failed [ 366.053734] ? security_socket_sendmsg+0x94/0xc0 [ 366.053752] ? netlink_unicast+0x740/0x740 [ 366.053774] sock_sendmsg+0xd5/0x120 [ 366.053791] ___sys_sendmsg+0x805/0x940 [ 366.053814] ? copy_msghdr_from_user+0x560/0x560 [ 366.053839] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 2018/04/13 23:38:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x8}, &(0x7f0000000140)=0x8) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 366.053858] ? proc_fail_nth_write+0x96/0x1f0 [ 366.058659] FAT-fs (loop0): Directory bread(block 7) failed [ 366.062225] ? __fget_light+0x2ef/0x430 [ 366.062241] ? fget_raw+0x20/0x20 [ 366.062254] ? find_held_lock+0x36/0x1c0 [ 366.062273] ? kasan_check_write+0x14/0x20 [ 366.062297] ? wait_for_completion+0x870/0x870 [ 366.062324] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.062341] ? sockfd_lookup_light+0xc5/0x160 [ 366.062357] __sys_sendmsg+0x115/0x270 [ 366.067867] FAT-fs (loop0): Directory bread(block 8) failed [ 366.071075] ? SyS_shutdown+0x30/0x30 [ 366.071090] ? __sb_end_write+0xac/0xe0 [ 366.071105] ? fput+0x130/0x1a0 [ 366.071124] ? ksys_write+0x1a6/0x250 [ 366.071153] SyS_sendmsg+0x29/0x30 [ 366.071167] ? __sys_sendmsg+0x270/0x270 [ 366.071186] do_syscall_64+0x29e/0x9d0 [ 366.071199] ? vmalloc_sync_all+0x30/0x30 [ 366.071209] ? _raw_spin_unlock_irq+0x27/0x70 [ 366.071225] ? finish_task_switch+0x1ca/0x810 [ 366.071244] ? syscall_return_slowpath+0x5c0/0x5c0 [ 366.096939] FAT-fs (loop0): Directory bread(block 9) failed [ 366.098251] ? syscall_return_slowpath+0x30f/0x5c0 [ 366.098275] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 366.098298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.098321] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 366.098334] RIP: 0033:0x455319 [ 366.098342] RSP: 002b:00007fd211432c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.098358] RAX: ffffffffffffffda RBX: 00007fd2114336d4 RCX: 0000000000455319 [ 366.098371] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000013 2018/04/13 23:38:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x5452, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:17 executing program 7 (fault-call:2 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 366.121924] FAT-fs (loop0): Directory bread(block 10) failed [ 366.126863] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 366.126872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 366.126880] R13: 00000000000004f1 R14: 00000000006fa738 R15: 0000000000000001 2018/04/13 23:38:17 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x1c03]}}, 0x1c) 2018/04/13 23:38:17 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x600000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f00000002c0)=0x8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@local, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000700)=0xe8) accept4$packet(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000e00)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000e40)={'vcan0\x00', r3}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000300)={0x0, 'team_slave_0\x00', 0x3}, 0x18) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0xffffffffffffff2b) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r2, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'system.', '/mime_type]nodev[\x00'}, &(0x7f0000000140)=""/57, 0x39) [ 366.459262] FAULT_INJECTION: forcing a failure. [ 366.459262] name failslab, interval 1, probability 0, space 0, times 0 [ 366.470732] CPU: 1 PID: 26941 Comm: syz-executor7 Not tainted 4.16.0+ #1 [ 366.477596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.481910] FAT-fs (loop0): Directory bread(block 11) failed [ 366.486956] Call Trace: [ 366.486982] dump_stack+0x1b9/0x294 [ 366.487004] ? dump_stack_print_info.cold.2+0x52/0x52 [ 366.487025] ? debug_check_no_locks_freed+0x310/0x310 [ 366.487048] should_fail.cold.4+0xa/0x1a [ 366.487069] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 366.487088] ? __lock_acquire+0x7f5/0x5140 [ 366.522959] ? check_noncircular+0x20/0x20 [ 366.527223] ? graph_lock+0x170/0x170 [ 366.531058] ? __lock_acquire+0x7f5/0x5140 [ 366.535316] ? find_held_lock+0x36/0x1c0 [ 366.539403] ? __lock_is_held+0xb5/0x140 [ 366.543505] ? check_same_owner+0x320/0x320 [ 366.547851] ? print_usage_bug+0xc0/0xc0 [ 366.551937] ? rcu_note_context_switch+0x710/0x710 2018/04/13 23:38:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f00000000c0)=""/127, &(0x7f0000000140)=0x7f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x60, &(0x7f0000000180)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @rand_addr=0x81}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @multicast1=0xe0000001}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r2, 0x20}, &(0x7f0000000340)=0x8) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc0045516, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 366.556904] __should_failslab+0x124/0x180 [ 366.561172] should_failslab+0x9/0x14 [ 366.564997] __kmalloc+0x2c8/0x760 [ 366.568568] ? graph_lock+0x170/0x170 [ 366.572392] ? dev_set_alias+0xca/0x3a0 [ 366.576392] dev_set_alias+0xca/0x3a0 [ 366.580217] ? netdev_get_name+0x2c0/0x2c0 [ 366.584487] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 366.590572] ? graph_lock+0x170/0x170 [ 366.594397] ? check_noncircular+0x20/0x20 [ 366.598665] ? check_noncircular+0x20/0x20 [ 366.601158] attempt to access beyond end of device [ 366.602918] ? print_usage_bug+0xc0/0xc0 [ 366.602941] do_setlink+0x962/0x4310 [ 366.602957] ? print_usage_bug+0xc0/0xc0 [ 366.602975] ? attach_entity_load_avg+0x830/0x830 [ 366.602995] ? rtnl_fill_vf+0x4b0/0x4b0 [ 366.603013] ? debug_check_no_locks_freed+0x310/0x310 [ 366.603032] ? __lock_acquire+0x7f5/0x5140 [ 366.603048] ? __lock_acquire+0x7f5/0x5140 [ 366.608050] loop0: rw=2049, want=246, limit=2 [ 366.612043] ? __lock_acquire+0x7f5/0x5140 [ 366.612059] ? debug_check_no_locks_freed+0x310/0x310 [ 366.612071] ? print_usage_bug+0xc0/0xc0 [ 366.612093] ? debug_check_no_locks_freed+0x310/0x310 [ 366.621844] attempt to access beyond end of device [ 366.624682] ? print_usage_bug+0xc0/0xc0 [ 366.624697] ? find_held_lock+0x36/0x1c0 [ 366.624710] ? print_usage_bug+0xc0/0xc0 [ 366.624725] ? perf_trace_lock+0xd6/0x900 [ 366.624739] ? print_usage_bug+0xc0/0xc0 [ 366.624754] ? zap_class+0x720/0x720 [ 366.624770] ? print_usage_bug+0xc0/0xc0 [ 366.624796] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.624811] ? rtnl_is_locked+0xae/0xe0 [ 366.624826] ? validate_linkmsg+0x26f/0xa20 [ 366.624842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.624862] ? kasan_unpoison_shadow+0x35/0x50 [ 366.628876] loop0: rw=2049, want=247, limit=2 [ 366.634016] rtnl_newlink+0x150e/0x1a50 [ 366.634042] ? memset+0x31/0x40 [ 366.634057] ? rtnl_newlink+0x4e7/0x1a50 [ 366.634084] ? rtnl_link_unregister+0x370/0x370 [ 366.634098] ? rcu_is_watching+0x85/0x140 [ 366.634118] ? perf_trace_lock+0xd6/0x900 [ 366.674628] attempt to access beyond end of device [ 366.674676] ? __lock_acquire+0x7f5/0x5140 [ 366.678864] loop0: rw=2049, want=248, limit=2 [ 366.682776] ? zap_class+0x720/0x720 [ 366.682788] ? graph_lock+0x170/0x170 [ 366.682845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.687906] attempt to access beyond end of device [ 366.691004] ? rtnl_get_link+0x164/0x350 [ 366.691024] ? rtnl_dump_all+0x5e0/0x5e0 [ 366.691041] ? rcu_is_watching+0x85/0x140 [ 366.691059] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 366.691079] ? __netlink_ns_capable+0x100/0x130 [ 366.691098] ? rtnl_link_unregister+0x370/0x370 [ 366.691117] rtnetlink_rcv_msg+0x466/0xc10 [ 366.691136] ? rtnetlink_put_metrics+0x690/0x690 [ 366.691167] netlink_rcv_skb+0x172/0x440 [ 366.694892] loop0: rw=2049, want=249, limit=2 [ 366.698914] ? rtnetlink_put_metrics+0x690/0x690 [ 366.698930] ? netlink_ack+0xbc0/0xbc0 [ 366.698944] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 366.698963] ? netlink_skb_destructor+0x210/0x210 [ 366.705580] attempt to access beyond end of device [ 366.708456] rtnetlink_rcv+0x1c/0x20 [ 366.708477] netlink_unicast+0x58b/0x740 [ 366.708499] ? netlink_attachskb+0x970/0x970 [ 366.708518] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.708534] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 366.708553] ? security_netlink_send+0x88/0xb0 [ 366.708570] netlink_sendmsg+0x9f0/0xfa0 [ 366.708592] ? netlink_unicast+0x740/0x740 [ 366.712940] loop0: rw=2049, want=262, limit=2 [ 366.718438] ? security_socket_sendmsg+0x94/0xc0 [ 366.718451] ? netlink_unicast+0x740/0x740 [ 366.718470] sock_sendmsg+0xd5/0x120 [ 366.718492] ___sys_sendmsg+0x805/0x940 [ 366.724464] attempt to access beyond end of device [ 366.727558] ? copy_msghdr_from_user+0x560/0x560 [ 366.727589] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 366.727608] ? proc_fail_nth_write+0x96/0x1f0 [ 366.727629] ? __fget_light+0x2ef/0x430 [ 366.727645] ? fget_raw+0x20/0x20 [ 366.727657] ? find_held_lock+0x36/0x1c0 [ 366.727677] ? kasan_check_write+0x14/0x20 [ 366.731671] loop0: rw=2049, want=263, limit=2 [ 366.734909] ? wait_for_completion+0x870/0x870 [ 366.734934] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.734955] ? sockfd_lookup_light+0xc5/0x160 [ 366.739816] attempt to access beyond end of device [ 366.743674] __sys_sendmsg+0x115/0x270 [ 366.743690] ? SyS_shutdown+0x30/0x30 [ 366.743705] ? __sb_end_write+0xac/0xe0 [ 366.743722] ? fput+0x130/0x1a0 [ 366.743742] ? ksys_write+0x1a6/0x250 [ 366.743771] SyS_sendmsg+0x29/0x30 [ 366.743783] ? __sys_sendmsg+0x270/0x270 [ 366.743799] do_syscall_64+0x29e/0x9d0 [ 366.743816] ? vmalloc_sync_all+0x30/0x30 [ 366.747981] loop0: rw=2049, want=264, limit=2 [ 366.752078] ? _raw_spin_unlock_irq+0x27/0x70 [ 366.752094] ? finish_task_switch+0x1ca/0x810 [ 366.752111] ? syscall_return_slowpath+0x5c0/0x5c0 [ 366.752125] ? syscall_return_slowpath+0x30f/0x5c0 [ 366.752143] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 366.752160] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.752179] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 366.752193] RIP: 0033:0x455319 [ 366.758584] attempt to access beyond end of device [ 366.761324] RSP: 002b:00007fd211432c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.761340] RAX: ffffffffffffffda RBX: 00007fd2114336d4 RCX: 0000000000455319 [ 366.761348] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000013 [ 366.761357] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 366.761366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 366.761376] R13: 00000000000004f1 R14: 00000000006fa738 R15: 0000000000000002 [ 366.925836] encrypted_key: master key parameter '¹ö‡§Y0:÷zÅ9z½»”MÞ­t=¦ó)À|ósoŸÖèÊé×ëí`Œ×Ȩ“¬b&?+ÆAT‡ùÂrm]YŸ/½à[áØÇq¥˜ù{e8f°µˆ€lôt)dž§S&ÈHçÒ‡Ís wU [ 366.925836] v4°â·<*w©›G_cäÕ„©N©/'=нZSž}Ô›¸ZȤ+c¸a°z5Ó³K²¢“cRLÿQñÊZãê,H…:[ciˆå‘ÎZ_V/žoY•û' is invalid [ 366.930049] loop0: rw=2049, want=265, limit=2 [ 366.984661] QAT: Invalid ioctl [ 367.128226] QAT: Invalid ioctl 2018/04/13 23:38:18 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x2f]}}, 0x1c) 2018/04/13 23:38:18 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x200000000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85512, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fff, 0x220401) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x10) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt(r0, 0x8923, 0x5, &(0x7f0000000100)="119cbd8532b32c6693beb40c1c2ea08597ec0b90e8c98345f3bc11b161333e49cbcb9208a75019a1b979cc28302bd1e80322170a1b998250", 0x38) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:18 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x2, 0x44, 0x0, 0x2, 0x7, 0x5, 0x1, 0x7fffffff, 0x1, 0x0, 0x0, 0x1, 0x1b, 0x7, 0xffff, 0x80000001, 0x1, 0x7d9, 0x3ff, 0xff0, 0x10000, 0xfbb, 0x8, 0x4, 0xd3e3, 0xf17a, 0x8, 0x6, 0x1, 0x3, 0x0, 0x0, 0x100, 0x3, @perf_bp={&(0x7f00000001c0), 0x1}, 0x1200, 0x0, 0x7fffffff, 0x7, 0x0, 0x9e, 0x1}, r0, 0x5, r1, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="c0", 0x1, 0xfffffffffffffffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) fcntl$addseals(r2, 0x409, 0x1) keyctl$invalidate(0xf, r3) 2018/04/13 23:38:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x4c000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:18 executing program 7 (fault-call:2 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:18 executing program 5: r0 = msgget$private(0x0, 0x1) msgrcv(r0, &(0x7f0000000000)={0x0, ""/54}, 0x3e, 0x2, 0x2000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@int=0x8, 0x4) setitimer(0x1, &(0x7f00000000c0)={{0x0, 0x7530}, {0x0, 0x2710}}, &(0x7f0000000100)) r2 = getpid() r3 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000140)={r1, r1, 0x4}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180)="25a0c643a0997873e821a304", &(0x7f00000001c0)="2753fa30b862d5ded1cfa2ead087ff60fd77ed3ce8e062654f1f1e22fbe5d4155874c5fa610b53e26eb622b35a24b585a4eb9a12a0a943158be80c5b395823fa0810138f76c491d4768a0ce5d11ee669b389e2b0e8fc8981f7dd684933404653668f34437259862d1c6b51712d0fca4949506d41ab742830d18c92f393a27cdb8d255a4e1dda88d349169f3288fb95"}, 0x20) keyctl$join(0x1, &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000300)={0x3, 0x4}) openat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x0) tgkill(r3, r3, 0xe) r5 = request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)='md5sum@.\'\x00', 0xfffffffffffffff8) r6 = add_key(&(0x7f00000005c0)='encrypted\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000640)="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", 0x1000, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000540)='trusted\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x1}, r6) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000001640)=0xffffffffffffffff, 0x4) r7 = semget$private(0x0, 0x2, 0x4) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000001680)=""/5) keyctl$get_persistent(0x16, r4, r5) add_key(&(0x7f00000016c0)='big_key\x00', &(0x7f0000001700)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001740)="8413baaa2d7a94dbbdddbbb6321f622f3edf58f3c924d2fdc8ebef8b4071a27f29b670cbc3eb6e3e67aac3c96bf2c742ef95af7b7621916d974cf69ad076a04a1533421622a9547d702e98bd6e351b8fb1cb61d155634672e40c4d1a032360562da7d7db74b25c951274b1efe99d2fada33b5fbcf9c1d472e06d7a01e2b88ba1556ae9bd32", 0x85, r6) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001900)={@dev, 0x0}, &(0x7f0000001940)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001ac0)={@hci={0x1f, r8, 0x3}, {&(0x7f0000001980)=""/214, 0xd6}, &(0x7f0000001a80), 0x17}, 0xa0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000001b80)={0x13, 0x7, 0xb50, 0x0, 0x6, 0x20, 0x6, 0x7fff, 0x10000000000000, 0x7fff, 0x7f, 0x5, 0x0, 0x9, 0x6, 0x1f, 0xb1, 0xfffffffffffffffb, 0x1}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001bc0)={{0x2, 0x4e21}, {0xb5196f007ce0389a}, 0x12, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 'veth0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001c40)={0x0, 0x1, 0x80000001}, &(0x7f0000001c80)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001cc0)={r9, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x84) [ 367.165594] attempt to access beyond end of device [ 367.170660] loop0: rw=1, want=329, limit=2 [ 367.203765] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 367.226153] FAULT_INJECTION: forcing a failure. [ 367.226153] name failslab, interval 1, probability 0, space 0, times 0 [ 367.237652] CPU: 0 PID: 26973 Comm: syz-executor7 Not tainted 4.16.0+ #1 [ 367.244530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.253916] Call Trace: [ 367.256541] dump_stack+0x1b9/0x294 [ 367.260205] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.265433] ? kasan_check_write+0x14/0x20 [ 367.269702] ? finish_task_switch+0x28b/0x810 [ 367.274244] should_fail.cold.4+0xa/0x1a [ 367.278350] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 367.283477] ? __schedule+0x809/0x1e30 [ 367.287378] ? __sched_text_start+0x8/0x8 [ 367.291524] ? find_held_lock+0x36/0x1c0 [ 367.295592] ? __lock_is_held+0xb5/0x140 [ 367.299680] ? check_same_owner+0x320/0x320 [ 367.304032] __should_failslab+0x124/0x180 [ 367.308276] should_failslab+0x9/0x14 [ 367.312075] kmem_cache_alloc_node+0x272/0x780 [ 367.316683] __alloc_skb+0x111/0x780 [ 367.320410] ? skb_scrub_packet+0x580/0x580 [ 367.324739] ? if_nlmsg_size+0x5d1/0xba0 [ 367.328818] ? rtnl_xdp_fill+0x8d0/0x8d0 [ 367.332895] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.338443] ? notifier_call_chain+0x2d2/0x380 [ 367.343059] ? unregister_die_notifier+0x20/0x20 [ 367.347831] ? rcu_read_lock_sched_held+0x108/0x120 [ 367.352882] rtmsg_ifinfo_build_skb+0x73/0x190 [ 367.357484] rtmsg_ifinfo_event.part.30+0x45/0xe0 [ 367.362338] rtmsg_ifinfo+0x8c/0xa0 [ 367.365977] netdev_state_change+0x13a/0x180 [ 367.370391] ? arch_local_irq_restore+0x60/0x60 [ 367.375079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.380618] ? perf_tp_event+0x91f/0xc30 [ 367.384686] do_setlink+0x253b/0x4310 [ 367.388496] ? perf_swevent_event+0x158/0x2e0 [ 367.392997] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.398540] ? perf_tp_event+0x91f/0xc30 [ 367.402612] ? rtnl_fill_vf+0x4b0/0x4b0 [ 367.406598] ? debug_check_no_locks_freed+0x310/0x310 [ 367.411797] ? perf_swevent_event+0x2e0/0x2e0 [ 367.416307] ? perf_swevent_event+0x2e0/0x2e0 [ 367.420825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.426366] ? tracing_generic_entry_update+0x18e/0x200 [ 367.431733] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.437274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.442814] ? tracing_generic_entry_update+0x18e/0x200 [ 367.448178] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.453715] ? perf_swevent_event+0x158/0x2e0 [ 367.458216] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.463757] ? perf_tp_event+0x91f/0xc30 [ 367.467858] ? print_usage_bug+0xc0/0xc0 [ 367.471929] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.477473] ? rtnl_is_locked+0xae/0xe0 [ 367.481455] ? validate_linkmsg+0x26f/0xa20 [ 367.485786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.491330] ? kasan_unpoison_shadow+0x35/0x50 [ 367.495927] rtnl_newlink+0x150e/0x1a50 [ 367.499930] ? memset+0x31/0x40 [ 367.503214] ? rtnl_newlink+0x4e7/0x1a50 [ 367.507302] ? rtnl_link_unregister+0x370/0x370 [ 367.511973] ? memset+0x31/0x40 [ 367.515270] ? perf_trace_lock+0x495/0x900 [ 367.519519] ? zap_class+0x720/0x720 [ 367.523304] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.528842] ? rtnl_get_link+0x164/0x350 [ 367.532905] ? rtnl_dump_all+0x5e0/0x5e0 [ 367.536970] ? rcu_is_watching+0x85/0x140 [ 367.541122] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 367.546318] ? __netlink_ns_capable+0x100/0x130 [ 367.550998] ? rtnl_link_unregister+0x370/0x370 [ 367.555686] rtnetlink_rcv_msg+0x466/0xc10 [ 367.559950] ? rtnetlink_put_metrics+0x690/0x690 [ 367.564744] netlink_rcv_skb+0x172/0x440 [ 367.568820] ? rtnetlink_put_metrics+0x690/0x690 [ 367.573587] ? netlink_ack+0xbc0/0xbc0 [ 367.577484] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 367.582687] ? netlink_skb_destructor+0x210/0x210 [ 367.587551] rtnetlink_rcv+0x1c/0x20 [ 367.591280] netlink_unicast+0x58b/0x740 [ 367.595359] ? netlink_attachskb+0x970/0x970 [ 367.599772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.605313] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 367.610333] ? security_netlink_send+0x88/0xb0 [ 367.614921] netlink_sendmsg+0x9f0/0xfa0 [ 367.618998] ? netlink_unicast+0x740/0x740 [ 367.623243] ? security_socket_sendmsg+0x94/0xc0 [ 367.627997] ? netlink_unicast+0x740/0x740 [ 367.632246] sock_sendmsg+0xd5/0x120 [ 367.635978] ___sys_sendmsg+0x805/0x940 [ 367.639966] ? copy_msghdr_from_user+0x560/0x560 [ 367.644751] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 367.650295] ? proc_fail_nth_write+0x96/0x1f0 [ 367.654804] ? __fget_light+0x2ef/0x430 [ 367.658783] ? fget_raw+0x20/0x20 [ 367.662235] ? find_held_lock+0x36/0x1c0 [ 367.666312] ? kasan_check_write+0x14/0x20 [ 367.670561] ? wait_for_completion+0x870/0x870 [ 367.675162] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.680718] ? sockfd_lookup_light+0xc5/0x160 [ 367.685218] __sys_sendmsg+0x115/0x270 [ 367.689110] ? SyS_shutdown+0x30/0x30 [ 367.692911] ? __sb_end_write+0xac/0xe0 [ 367.696893] ? fput+0x130/0x1a0 [ 367.700176] ? ksys_write+0x1a6/0x250 [ 367.703998] SyS_sendmsg+0x29/0x30 [ 367.707543] ? __sys_sendmsg+0x270/0x270 [ 367.711618] do_syscall_64+0x29e/0x9d0 [ 367.715507] ? vmalloc_sync_all+0x30/0x30 [ 367.719655] ? _raw_spin_unlock_irq+0x27/0x70 [ 367.724166] ? finish_task_switch+0x1ca/0x810 [ 367.728668] ? syscall_return_slowpath+0x5c0/0x5c0 [ 367.733613] ? syscall_return_slowpath+0x30f/0x5c0 [ 367.738554] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 367.743928] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.748790] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 367.753991] RIP: 0033:0x455319 [ 367.757183] RSP: 002b:00007fd211432c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.764898] RAX: ffffffffffffffda RBX: 00007fd2114336d4 RCX: 0000000000455319 2018/04/13 23:38:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc0505510, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:18 executing program 4: r0 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x9, 0x40040) ioctl$KDSETLED(r0, 0x4b32, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x80, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) write$rdma_cm(r1, &(0x7f0000002fc0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002f80)={0xffffffff}, 0x111}}, 0x20) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="fabd583c6258b52f8ded") write$rdma_cm(r1, &(0x7f0000000200)=@set_option={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r3, 0x2, 0x2, 0x4}}, 0x20) [ 367.772168] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000013 [ 367.779441] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 367.786711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 367.793990] R13: 00000000000004f1 R14: 00000000006fa738 R15: 0000000000000003 2018/04/13 23:38:19 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x8a14c85a47000000]}}, 0x1c) [ 367.863447] FAT-fs (loop0): Directory bread(block 2) failed [ 367.899566] FAT-fs (loop0): Directory bread(block 3) failed [ 367.905672] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = fcntl$dupfd(r0, 0x406, r0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, {0x3, 0xfff, 0x9, 0x1, 0x7, 0x5}, 0x7, 0x3}, 0xe) 2018/04/13 23:38:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x80045500, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 367.919654] FAT-fs (loop0): Directory bread(block 5) failed [ 367.932687] FAT-fs (loop0): Directory bread(block 6) failed [ 367.946677] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:19 executing program 7 (fault-call:2 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 367.970398] FAT-fs (loop0): Directory bread(block 8) failed [ 367.984815] FAT-fs (loop0): Directory bread(block 9) failed [ 368.000223] FAT-fs (loop0): Directory bread(block 10) failed [ 368.006813] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:38:19 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x600]}}, 0x1c) [ 368.042674] attempt to access beyond end of device [ 368.047777] loop0: rw=2049, want=246, limit=2 [ 368.052509] buffer_io_error: 30 callbacks suppressed [ 368.052520] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 368.078874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 368.098889] FAULT_INJECTION: forcing a failure. [ 368.098889] name failslab, interval 1, probability 0, space 0, times 0 [ 368.110346] CPU: 1 PID: 27022 Comm: syz-executor7 Not tainted 4.16.0+ #1 [ 368.117199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.126567] Call Trace: [ 368.128640] attempt to access beyond end of device [ 368.129176] dump_stack+0x1b9/0x294 [ 368.129201] ? dump_stack_print_info.cold.2+0x52/0x52 [ 368.134194] loop0: rw=2049, want=247, limit=2 [ 368.137754] ? is_bpf_text_address+0xd7/0x170 [ 368.137779] should_fail.cold.4+0xa/0x1a [ 368.137803] ? __save_stack_trace+0x7e/0xd0 [ 368.143048] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 368.147480] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 368.147503] ? graph_lock+0x170/0x170 [ 368.147519] ? save_stack+0x43/0xd0 [ 368.147538] ? kasan_kmalloc+0xc4/0xe0 [ 368.167149] attempt to access beyond end of device [ 368.168180] ? kasan_slab_alloc+0x12/0x20 [ 368.168201] ? find_held_lock+0x36/0x1c0 [ 368.168222] ? __lock_is_held+0xb5/0x140 [ 368.168247] ? check_same_owner+0x320/0x320 [ 368.173377] loop0: rw=2049, want=248, limit=2 [ 368.177144] ? rcu_note_context_switch+0x710/0x710 [ 368.177167] __should_failslab+0x124/0x180 [ 368.177185] should_failslab+0x9/0x14 [ 368.177202] kmem_cache_alloc_node_trace+0x26f/0x770 [ 368.180847] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 368.184694] __kmalloc_node_track_caller+0x33/0x70 [ 368.184714] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 368.184732] __alloc_skb+0x14d/0x780 [ 368.189943] QAT: Invalid ioctl [ 368.193785] ? skb_scrub_packet+0x580/0x580 [ 368.193803] ? if_nlmsg_size+0x5d1/0xba0 [ 368.193823] ? rtnl_xdp_fill+0x8d0/0x8d0 [ 368.193849] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.223409] encrypted_key: master key parameter '¹ö‡§Y0:÷zÅ9z½»”MÞ­t=¦ó)À|ósoŸÖèÊé×ëí`Œ×Ȩ“¬b&?+ÆAT‡ùÂrm]YŸ/½à[áØÇq¥˜ù{e8f°µˆ€lôt)dž§S&ÈHçÒ‡Ís wU [ 368.223409] v4°â·<*w©›G_cäÕ„©N©/'=нZSž}Ô›¸ZȤ+c¸a°z5Ó³K²¢“cRLÿQñÊZãê,H…:[ciˆå‘ÎZ_V/žoY•û' is invalid [ 368.223717] ? notifier_call_chain+0x2d2/0x380 [ 368.223739] ? unregister_die_notifier+0x20/0x20 [ 368.223757] ? rcu_read_lock_sched_held+0x108/0x120 [ 368.240175] attempt to access beyond end of device [ 368.241573] rtmsg_ifinfo_build_skb+0x73/0x190 [ 368.241597] rtmsg_ifinfo_event.part.30+0x45/0xe0 [ 368.241617] rtmsg_ifinfo+0x8c/0xa0 [ 368.241637] netdev_state_change+0x13a/0x180 [ 368.241651] ? arch_local_irq_restore+0x60/0x60 [ 368.241670] ? print_usage_bug+0xc0/0xc0 [ 368.246444] loop0: rw=2049, want=249, limit=2 [ 368.250116] do_setlink+0x253b/0x4310 [ 368.250131] ? print_usage_bug+0xc0/0xc0 [ 368.250152] ? rtnl_fill_vf+0x4b0/0x4b0 [ 368.250169] ? debug_check_no_locks_freed+0x310/0x310 [ 368.253439] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 368.257641] ? __lock_acquire+0x7f5/0x5140 [ 368.257657] ? kmem_cache_alloc+0x12e/0x760 [ 368.257669] ? __d_alloc+0xc0/0xd30 [ 368.257690] ? __lock_acquire+0x7f5/0x5140 [ 368.282271] attempt to access beyond end of device [ 368.295628] ? debug_check_no_locks_freed+0x310/0x310 [ 368.295643] ? print_usage_bug+0xc0/0xc0 [ 368.295665] ? debug_check_no_locks_freed+0x310/0x310 [ 368.295675] ? print_usage_bug+0xc0/0xc0 [ 368.295690] ? print_usage_bug+0xc0/0xc0 [ 368.295707] ? perf_trace_lock+0xd6/0x900 [ 368.295723] ? print_usage_bug+0xc0/0xc0 [ 368.295738] ? zap_class+0x720/0x720 [ 368.295758] ? print_usage_bug+0xc0/0xc0 [ 368.300370] loop0: rw=2049, want=262, limit=2 [ 368.305084] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.305101] ? rtnl_is_locked+0xae/0xe0 [ 368.305116] ? validate_linkmsg+0x26f/0xa20 [ 368.305134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.310156] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 368.315038] ? kasan_unpoison_shadow+0x35/0x50 [ 368.315059] rtnl_newlink+0x150e/0x1a50 [ 368.315080] ? memset+0x31/0x40 [ 368.320819] attempt to access beyond end of device [ 368.324472] ? rtnl_newlink+0x4e7/0x1a50 [ 368.324505] ? rtnl_link_unregister+0x370/0x370 [ 368.324522] ? rcu_is_watching+0x85/0x140 [ 368.324538] ? perf_trace_lock+0xd6/0x900 [ 368.324553] ? __lock_acquire+0x7f5/0x5140 [ 368.324571] ? zap_class+0x720/0x720 [ 368.324583] ? graph_lock+0x170/0x170 [ 368.324636] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.328254] loop0: rw=2049, want=263, limit=2 [ 368.332617] ? rtnl_get_link+0x164/0x350 [ 368.332631] ? rtnl_dump_all+0x5e0/0x5e0 [ 368.332645] ? rcu_is_watching+0x85/0x140 [ 368.332660] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 368.332679] ? __netlink_ns_capable+0x100/0x130 [ 368.337388] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 368.341373] ? rtnl_link_unregister+0x370/0x370 [ 368.341390] rtnetlink_rcv_msg+0x466/0xc10 [ 368.341411] ? rtnetlink_put_metrics+0x690/0x690 [ 368.348392] attempt to access beyond end of device [ 368.349697] netlink_rcv_skb+0x172/0x440 [ 368.349719] ? rtnetlink_put_metrics+0x690/0x690 [ 368.349738] ? netlink_ack+0xbc0/0xbc0 [ 368.349756] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 368.349773] ? netlink_skb_destructor+0x210/0x210 [ 368.349793] rtnetlink_rcv+0x1c/0x20 [ 368.353869] loop0: rw=2049, want=264, limit=2 [ 368.357806] netlink_unicast+0x58b/0x740 [ 368.357827] ? netlink_attachskb+0x970/0x970 [ 368.357844] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.357862] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 368.363064] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 368.370813] ? security_netlink_send+0x88/0xb0 [ 368.370832] netlink_sendmsg+0x9f0/0xfa0 [ 368.370855] ? netlink_unicast+0x740/0x740 [ 368.375339] QAT: Invalid ioctl [ 368.379399] ? security_socket_sendmsg+0x94/0xc0 [ 368.379417] ? netlink_unicast+0x740/0x740 [ 368.379437] sock_sendmsg+0xd5/0x120 [ 368.379453] ___sys_sendmsg+0x805/0x940 [ 368.379474] ? copy_msghdr_from_user+0x560/0x560 [ 368.379505] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 368.386776] attempt to access beyond end of device [ 368.387354] ? proc_fail_nth_write+0x96/0x1f0 [ 368.387377] ? __fget_light+0x2ef/0x430 [ 368.387392] ? fget_raw+0x20/0x20 [ 368.387409] ? find_held_lock+0x36/0x1c0 [ 368.392429] loop0: rw=2049, want=265, limit=2 [ 368.397518] ? kasan_check_write+0x14/0x20 [ 368.397542] ? wait_for_completion+0x870/0x870 [ 368.397569] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.401628] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 368.406778] ? sockfd_lookup_light+0xc5/0x160 [ 368.406796] __sys_sendmsg+0x115/0x270 [ 368.406811] ? SyS_shutdown+0x30/0x30 [ 368.411182] QAT: Invalid ioctl [ 368.414914] ? __sb_end_write+0xac/0xe0 [ 368.414932] ? fput+0x130/0x1a0 [ 368.414950] ? ksys_write+0x1a6/0x250 [ 368.414982] SyS_sendmsg+0x29/0x30 [ 368.414995] ? __sys_sendmsg+0x270/0x270 [ 368.415018] do_syscall_64+0x29e/0x9d0 [ 368.752377] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 368.757215] ? syscall_return_slowpath+0x5c0/0x5c0 [ 368.762145] ? syscall_return_slowpath+0x30f/0x5c0 [ 368.767077] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 368.772441] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.777295] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 368.782485] RIP: 0033:0x455319 [ 368.785672] RSP: 002b:00007fd211432c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.793371] RAX: ffffffffffffffda RBX: 00007fd2114336d4 RCX: 0000000000455319 2018/04/13 23:38:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105517, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 368.800636] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000013 [ 368.807899] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 368.815157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 368.822421] R13: 00000000000004f1 R14: 00000000006fa738 R15: 0000000000000004 2018/04/13 23:38:19 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x600000000000000]}}, 0x1c) 2018/04/13 23:38:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) 2018/04/13 23:38:19 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xf6ffffff00000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:19 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x3, 0x472b7749, 0x8}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) pread64(r2, &(0x7f0000000140)=""/169, 0xa9, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x802840, &(0x7f0000000100)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r1, r3) 2018/04/13 23:38:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r0, 0xfffffffefffffffd) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100, 0x1) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0xfff, 0x800) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x40080, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x10000, 0x3, r3}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) getgroups(0x5, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) fchown(r0, r4, r5) recvmmsg(r0, &(0x7f0000000040), 0x339, 0x42, 0x0) 2018/04/13 23:38:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x4000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:19 executing program 7 (fault-call:2 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 368.908448] attempt to access beyond end of device [ 368.913520] loop0: rw=1, want=329, limit=2 [ 368.928970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:20 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f000075ef4e)=""/178, 0xb2}], 0x1000000000000363, &(0x7f000088efe0)=[{&(0x7f0000000040)=""/83, 0xfffffe83}], 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100, 0x2) ioctl$KDSKBLED(r1, 0x4b65, 0x6) r2 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1f, 0x400) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000140)=""/134, &(0x7f0000000200)=0x86) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000280)={0x1, 0xfffffffffffffff7, 0x1}) 2018/04/13 23:38:20 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xff000000]}}, 0x1c) 2018/04/13 23:38:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405514, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "2c86d98e8773615c3dab1d76566e411dcfbd6ca01b2f286cc003623c78806a7da2bf548e925f129bcb26220fa89aa828a452dd1ee29843ceef646841a72144360e0a904f17b208ddf7ca3753cb919ea03dea62d98ffc885275d80ad4502cd5e1b4bdfccd9ae516999c0bf2391ff509"}, 0x73) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x2}, &(0x7f0000000180)=0x8) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) [ 368.983631] FAT-fs (loop0): Directory bread(block 2) failed [ 369.023432] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:20 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 369.077994] FAT-fs (loop0): Directory bread(block 4) failed [ 369.108694] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:20 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x2f000000]}}, 0x1c) 2018/04/13 23:38:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xa0000, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000000c0)={0x1, 0x2}) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) recvmsg(r1, &(0x7f0000001800)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/137, 0x89}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/78, 0x4e}, {&(0x7f0000001480)=""/219, 0xdb}, {&(0x7f0000001580)=""/21, 0x15}, {&(0x7f00000015c0)=""/109, 0x6d}, {&(0x7f0000001640)=""/92, 0x5c}], 0x9, &(0x7f0000001780)=""/89, 0x59, 0x3}, 0x40012000) 2018/04/13 23:38:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc0405519, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 369.129485] FAT-fs (loop0): Directory bread(block 6) failed [ 369.153150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 369.156973] FAT-fs (loop0): Directory bread(block 7) failed [ 369.169179] FAT-fs (loop0): Directory bread(block 8) failed [ 369.197553] FAT-fs (loop0): Directory bread(block 9) failed [ 369.232302] FAT-fs (loop0): Directory bread(block 10) failed [ 369.266458] FAT-fs (loop0): Directory bread(block 11) failed [ 369.331978] attempt to access beyond end of device [ 369.337087] loop0: rw=2049, want=246, limit=2 [ 369.341666] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 369.409657] attempt to access beyond end of device [ 369.414773] loop0: rw=2049, want=247, limit=2 [ 369.419449] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 369.427358] attempt to access beyond end of device [ 369.432538] loop0: rw=2049, want=248, limit=2 [ 369.437483] attempt to access beyond end of device [ 369.442604] loop0: rw=2049, want=249, limit=2 [ 369.447214] attempt to access beyond end of device [ 369.452205] loop0: rw=2049, want=262, limit=2 [ 369.456875] attempt to access beyond end of device [ 369.461869] loop0: rw=2049, want=263, limit=2 [ 369.466530] attempt to access beyond end of device [ 369.471527] loop0: rw=2049, want=264, limit=2 [ 369.476146] attempt to access beyond end of device [ 369.481147] loop0: rw=2049, want=265, limit=2 [ 369.520350] attempt to access beyond end of device [ 369.525415] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:20 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x6]}}, 0x1c) 2018/04/13 23:38:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) 2018/04/13 23:38:20 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0xf}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:20 executing program 5: r0 = semget(0x2, 0x4, 0x80) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000100)=""/65) r1 = syz_open_dev$sndctrl(&(0x7f00000011c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000000)=""/241) ioprio_get$uid(0x3, r2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x81785501, &(0x7f0000000180)=""/4096) 2018/04/13 23:38:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x2, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:20 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x1000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x80660300, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:20 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x0) ioctl(r0, 0x2984572e, &(0x7f0000000080)) ioctl$KDDISABIO(r0, 0x4b37) mknod(&(0x7f0000000080)='./file0\x00', 0x48, 0xffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4000014) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000100)=""/158) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) [ 369.844161] FAT-fs (loop0): Directory bread(block 2) failed [ 369.863233] FAT-fs (loop0): Directory bread(block 3) failed [ 369.875558] FAT-fs (loop0): Directory bread(block 4) failed [ 369.881881] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc008551b, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 369.889705] FAT-fs (loop0): Directory bread(block 6) failed [ 369.896676] FAT-fs (loop0): Directory bread(block 7) failed [ 369.923569] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:21 executing program 5: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x3}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000080)=0x3, 0x4) fdatasync(r0) getpeername(r0, &(0x7f0000000140)=@un=@abs, &(0x7f00000001c0)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xe}, 0x2c) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 2018/04/13 23:38:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f0000000140)=0x2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={r1}, 0xe7) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000000)=@routing={0x3f, 0xe, 0x0, 0x1, 0x0, [@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff]}, @empty, @local={0xfe, 0x80, [], 0xaa}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}]}, 0x78) 2018/04/13 23:38:21 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x6000000]}}, 0x1c) 2018/04/13 23:38:21 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x48}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) [ 369.949827] FAT-fs (loop0): Directory bread(block 9) failed [ 369.969272] FAT-fs (loop0): Directory bread(block 10) failed 2018/04/13 23:38:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc0045877, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 370.026677] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:38:21 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfe800000]}}, 0x1c) 2018/04/13 23:38:21 executing program 5: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x100000002}, 0x1c) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) 2018/04/13 23:38:21 executing program 4: syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ac6ae8f9fa77b9e51ce600000000000000000000000000711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x894c, 0xfffffffe, &(0x7f0000000180)) [ 370.114628] attempt to access beyond end of device [ 370.119762] loop0: rw=2049, want=246, limit=2 [ 370.134710] attempt to access beyond end of device [ 370.139925] loop0: rw=2049, want=247, limit=2 2018/04/13 23:38:21 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x2f}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 370.185184] attempt to access beyond end of device [ 370.190326] loop0: rw=2049, want=248, limit=2 [ 370.230688] attempt to access beyond end of device [ 370.235808] loop0: rw=2049, want=249, limit=2 [ 370.252246] attempt to access beyond end of device [ 370.257346] loop0: rw=2049, want=262, limit=2 [ 370.288839] attempt to access beyond end of device [ 370.293915] loop0: rw=2049, want=263, limit=2 [ 370.325285] attempt to access beyond end of device [ 370.330394] loop0: rw=2049, want=264, limit=2 [ 370.340894] attempt to access beyond end of device [ 370.346006] loop0: rw=2049, want=265, limit=2 [ 370.392425] attempt to access beyond end of device [ 370.397482] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1050, 0x1) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405515, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:21 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000080)) ioctl$TCGETA(r0, 0x5405, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0xc0045405, &(0x7f0000000040)) 2018/04/13 23:38:21 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x1800]}}, 0x1c) 2018/04/13 23:38:21 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x38}, 0x1}, 0x0) socketpair(0xb, 0x3, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x10, "1b9063b4adbe3cfb626bdbe5de29401d"}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0xfff}, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000100)) 2018/04/13 23:38:21 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xf0ffff) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:21 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x63}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x74650300, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc008551c, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 370.831259] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x103, 0x4) sendto$inet(r2, &(0x7f0000832fff), 0x0, 0x0, &(0x7f0000eed000)={0x2, 0x4e20}, 0x10) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1, 0x4) recvmsg(r1, &(0x7f00005b7000)={0x0, 0x0, &(0x7f0000c03000), 0x0, &(0x7f0000edffaf)}, 0x2020) 2018/04/13 23:38:22 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfc]}}, 0x1c) 2018/04/13 23:38:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x4678c7277a659184) 2018/04/13 23:38:22 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x20000110}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:22 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@nfc_llcp, &(0x7f0000000080)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, 0x100000000, 0x3, 0x8f66, 0xae, 0x80}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}, 0x2340, 0x8000, 0x5, 0x3, 0x4}, &(0x7f0000000380)=0x98) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={@mcast2={0xff, 0x2, [], 0x1}, 0x4d, r2}) socketpair$inet_icmp(0x13, 0xc0485510, 0x6f2000, &(0x7f00000003c0)) [ 370.896618] FAT-fs (loop0): Directory bread(block 3) failed [ 370.935202] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc008551a, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 370.998016] FAT-fs (loop0): Directory bread(block 5) failed [ 371.031523] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:22 executing program 4: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000240)) r0 = syz_open_dev$sndmidi(&(0x7f0000000280)='/dev/snd/midiC#D#\x00', 0x100000001, 0x101400) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f00000001c0)=0x81, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) flock(r2, 0xa) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000140)={@dev}, &(0x7f0000000180)=0x14) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x5dc9, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}], 0x208090, &(0x7f0000000040)=ANY=[]) open(&(0x7f0000000040)='./file0\x00', 0x3fffa, 0x188) [ 371.063878] FAT-fs (loop0): Directory bread(block 7) failed [ 371.077347] FAT-fs (loop0): Directory bread(block 8) failed [ 371.102563] FAT-fs (loop0): Directory bread(block 9) failed [ 371.130551] FAT-fs (loop0): Directory bread(block 10) failed [ 371.131187] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 371.156758] FAT-fs (loop0): Directory bread(block 11) failed [ 371.232392] attempt to access beyond end of device [ 371.237534] loop0: rw=2049, want=246, limit=2 [ 371.254179] attempt to access beyond end of device [ 371.259279] loop0: rw=2049, want=247, limit=2 [ 371.264234] attempt to access beyond end of device [ 371.269348] loop0: rw=2049, want=248, limit=2 [ 371.273991] attempt to access beyond end of device [ 371.278980] loop0: rw=2049, want=249, limit=2 [ 371.283578] attempt to access beyond end of device [ 371.288565] loop0: rw=2049, want=262, limit=2 [ 371.297129] attempt to access beyond end of device [ 371.302181] loop0: rw=2049, want=263, limit=2 [ 371.308149] attempt to access beyond end of device [ 371.313309] loop0: rw=2049, want=264, limit=2 [ 371.317970] attempt to access beyond end of device [ 371.322950] loop0: rw=2049, want=265, limit=2 [ 371.361344] attempt to access beyond end of device [ 371.366380] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:22 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x4]}}, 0x1c) 2018/04/13 23:38:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x14660300, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:22 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x42100, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x4, [0x3ff, 0x1000, 0x3fd, 0x1000]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x6f, "75fb544c37090eba53fd4d61c8143c1b419502e5d339eeb9dea4dca6b82cb3235ddc2cec5b486f64050e07cfb2e297644e14c319eec14644058ec7d1ca6ee0d0d0bcbc0ae2ec6abdd598da67f72607c4837c82d069454f59957e048483ceed5f7941a61bc8b92908fe6c70e85ecfe6"}, &(0x7f00000001c0)=0x77) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, {0x6, 0x3f, 0x4, 0x32, 0x1, 0x401}}, 0x8) fchdir(r0) fcntl$setpipe(r0, 0x407, 0x400) r2 = open(&(0x7f0000000040)='..', 0x0, 0x0) dup2(r0, r2) 2018/04/13 23:38:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:22 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xfffffffffffff000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:22 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f00000011c0)=@vsock={0x28, 0x0, 0xffffffff, @host=0x2}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000100)="bb70a225f1041daef36370037062bb632d241ea314859ee4f31527751ba47621ec71b7166d2422b0f0fdc21c7f5c63a557ae8c2287eae1ba", 0x38}, {&(0x7f0000002e00)="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", 0x1000}], 0x2, &(0x7f0000001dc0)=[{0x1010, 0x0, 0x8, "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"}], 0x1010, 0x4000000}, 0x2}], 0x0, 0x0) [ 371.801497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 371.808821] FAT-fs (loop0): Directory bread(block 2) failed [ 371.835564] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x5450, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:22 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfffffffffffff000]}}, 0x1c) 2018/04/13 23:38:23 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1) r1 = socket(0x1000100000010, 0x400000000000002, 0x0) write(r1, &(0x7f0000000000)="1f0000001e0007f1ffffffe60802007702000600536b8d3d6c39080001454a", 0x1f) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x8, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)=0x0) r5 = getpid() r6 = getpgrp(0x0) r7 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000c00)=0xe8) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000d40)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd, 0x81000000}, 0xc, &(0x7f0000000ac0)=[{&(0x7f0000000240)={0x49c, 0x16, 0x204, 0x70bd2c, 0x25dfdbfd, "", [@nested={0xc8, 0x3f, [@typed={0x8, 0x1c, @pid=r2}, @generic="0140e94f6f54cb63c7a3db7762c83bd07c0f732ff1e6d9840db42a", @typed={0x8, 0x2c, @uid=r3}, @typed={0x8, 0x2e, @pid=r4}, @typed={0x8, 0x41, @pid=r5}, @generic="119acc34b1cabd9a67c2cf8915d8d0283ebf8787cb8d88853cfe03943d5aa67045a17682234201efcec5c23673a4bec54c80cf461f8b30b27eba9b53492f189975b9e9e874540868f5a0bab84e89c98ffc28027d69469a6e442e6972382efbc123011846fc2f9b346fdadc18e7", @typed={0xc, 0x47, @u64=0xd9a}, @generic="57de5e9b3d416b818b70f883fd97"]}, @generic="a082db8d4024521ddd34b1725ba4e597d05a346b3c8bdbea0342c455c46c3e895746dbd298dbe0828286aaab97e37106eb5fdec7c49f09933fd4a2af0e", @typed={0x8, 0x60, @u32=0x100000000}, @typed={0x8, 0x80, @pid=r6}, @nested={0x174, 0x51, [@generic="fce6b7be37cff457afe0a327513b38c10564672daf5d66ede69cd2132c4e2c2765f2f7f4ec60ed35f91229e4d99f82962ec90a31836d521e163166bb287a872f3b65211980f2327736791e3ab0e8312b9cd45538e04d201776e5daf2a6840dee55ced6a0e0fa87d4063f1b1e85600dcd0876d4cdce097048e8ee47b71d65c5720205cf47054eaf42ef3f3dbb0c737be7e0e07c6d8d210aa34854b243999dbcbe92727541c91d0f43df5d2b5d6450d8681e0a3962fdeb468224cb850fc568b6ce1632df7cc049a9aa9b4697fe03a0f88cbb4d", @generic="01108cab574b8ab63ff471b389bd267d50232fe55b40dac5fa1d992c70a6f8d5975ad1478939eeded9faed0634c919e019a6568dc8a425ea8a84c07e5e414fda380fdea71e346f8b19de1338672ca2fd2c6dd91dd782ab973a025735564aee02ece073f585a1d2", @typed={0x34, 0x4d, @str='{trustedselinuxvboxnet0securityppp1\'selinux$\'{\x00'}]}, @typed={0xc, 0x45, @u64=0x1}, @nested={0x104, 0x68, [@generic="448b938be9de167ddf9c3916c0cb1bc7d594cecd1ff1bb75a8c7c517f979f22676097ff850bda7e353550b485b01726acc9b78897acb708bcec311971acb5d63163142b2bf00f5e9a2809e57d2d4867b0b406efd1ec2ba7b25260a9cbaa7e4567659efeb47948cf538cb656a378654", @generic="c3b1c0e981fe1817fbcddde3029cbb2f2a2b7bf4757abac4fd2fca8a8e861ea3fd9c689a3c01ca0d0746280ad9334b3ffb3d86e6f80e95ac1ee7db173a88151220b8fc8a7d2c85f3de24b1f2366c558d60436eadffbbf18f4dd2b6ba6a6946d239036f07cec0b56c550f3509e05ade32af735a52c42debc39de7c97df1c4389b696eb448ac90e29d7314be1ae274"]}, @generic="658b749ef79f20231433e06a86c263a2c5f1a50790050fd79e37d94c0efa4cca47ec5aa1a4a7d364996d315a40468e8065d343642bf041aad91efce16cf1a0a1b8a49851d0999bcb876be89a66d45e1a31fa771d5baf1482a32619d9d42a4e2fad3ad9cf2df70c06ea18273406611aa1439d8a2e2ab2f65dd7e079", @generic="cb6d21dd1e4ed2d7803605063fe1ede23d53f6b18abadd3088da300f474ad72fc93e4434679eddf957c954772072da44d8eb5288109d37020760a7a501958bab45f87bf9d64f784a1e204ecbaac8cec727d5e97d5d8cd8b5de96829cd09b830f9c6001a894f2594575ebb45184e3196abcd9cea7c9ddde0c"]}, 0x49c}, {&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0xfc}, {&(0x7f0000000800)={0x284, 0x3a, 0x70a, 0x70bd2c, 0x25dfdbfc, "", [@generic="0d3f3dc12c271da158bf005d46800cf967da11fe31cd983da32b8624fc91a5da77ac28c6eab2a7aae76aab8ea51cf456fbe9f8f75bd90b1a42942ddca917a1f90ccf87631cba51dbfb334008a8409af64b59569031be4a95399046e63565705ec3", @typed={0x84, 0x33, @binary="3e1e44b86070833a6cca77563956ea8a14012471e07207c6df6aeda4474b0136d61cdacf0aee0cab3062d703d47761bc153fb9cc604052107f6ce2e8878fd4d7b34cade8c64bf23c12bb28c151e804dc98cf08cf77e31da85701868366526c303ac28f142fa133343004fc0844b8827151d7db7aebd28cd8b1da9fd528cdc38b"}, @generic="83fabf2a2e8565e099329e825e3bdfce27c6adddce6acf397160f2b95f89e790d7f9f38e461041885e328da827245e18f863df256aacebc94f5b6d7784dc7838144a7787730681fc6b7a6bb2ebfdbdd1c543fdd9b7ea06c3279e24ec6655b88a2799f1ce26e0e16069fe28fce6b6e5d721800d326435c60dada9452bfc2e3faa72ccfa66901104ae1abfe027f53619e5287cdbdf08924bbddf403d66fb7e12f80c9c23e149a78ed3e6c095ebf7854e1296f30a5216f9dc72b816c778a62a97bf770b1918a5f39b79d43d6e7c2282cfe19600181d57e00a", @typed={0x4, 0x12}, @generic="6aae192449c2595b13fdc69308b39d90ab19382fcc76a0977727db43ec83018743cef40dcce1313e6182751d6ff8f1f8740862d2ec837c7436817c823527ba072424f747a9298e9ef5464ddd930eb1b8fe3f9aee57924248ff97e943e03bfc745e3c1c1b1a1038e4114153a973cf341d8c78deb1707c19b90547edfc0741cc25e1bf06b53969bc7ab1b7c6c9645b1df64482391f6a5b6f7cf2af4cb1337e3ffffc72693934ce41bda209b7569a93e41837bbec"]}, 0x284}], 0x3, &(0x7f0000000d00)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x20, 0x20048000}, 0x800) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) [ 371.846948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 371.867350] FAT-fs (loop0): Directory bread(block 4) failed [ 371.890342] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:23 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x1, @thr={&(0x7f0000000240), &(0x7f00000002c0)}}, &(0x7f00000003c0)=0x0) timer_gettime(r0, &(0x7f0000000400)) timer_delete(r0) 2018/04/13 23:38:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7, 0x9197, 0x3, 0x2, 0x2, 0x3e, 0xfffffffffffffffe, 0x2f8, 0x38, 0x2f5, 0x40, 0x8a, 0x20, 0x1, 0x2, 0x401, 0x1}, [{0x70000003, 0x2, 0x0, 0x6d, 0x7fff, 0x3f, 0xffffffff, 0x4}, {0x5, 0x8, 0x1, 0x5, 0x401, 0x5, 0x100, 0xf3a}], "c11665992223715f14995e45381263dd4e19fb754d24af8d70d41ed1fbd647146e0a8239bb6e0e010dd643c6694e92d3f1aa6ee705cb0655fef86cf1759e2a18fa684a01a2113d33169bbf445f82b0584dfa301df60f2854e53f6214bf10", [[]]}, 0x1d6) bind$alg(r0, &(0x7f0000001640)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000580)=0x6) pwritev(r0, &(0x7f00000015c0)=[{&(0x7f0000000300)="5652f169b3c55056e5003c1119bbd20150ad53c71d07141fb643a087223694a906b2341819a0e61b84cbbab7a0d0abb98303aefa4bfa2953104b7c5ad1b5bd601dbbd8186939c33aa3d71114202b8935e7f67e48b48466702bb0ae7fafcf6ac43d46b9a2bb60f11cda385d6025c40174ef5e82c84eda213c9a4901da17f93294e5935b972b1e403da17876b882d4cdb063df83a1f457dda737b2f5452bea2b", 0xffffffffffffffdc}, {&(0x7f00000003c0)="707ebef664148608d3418d5f9be65cd34f739b8577a1aef05f67febc1b4d5dc361dd9814c72ec1faa1a2963aee1b600e73f50c9bb938965cbb0639b719da41ad4f906ae208a1f76c8f001b8c9345b8b806b5d177207aec03e69141e1b1c8b15ddcb5184322bdf50fcf44d3e7", 0x6c}, {&(0x7f0000000440)="7ea855be6152129537d94a0b5e020b2a8f7ac1eb9ab616096f8c2d974d1fe818337f02d6d5a2ee3cbabd3ca93f17090e4ad8413016a17138c6b32bba3d6222b13370725f31f363ace71c9e42e3a634d946", 0x51}, {&(0x7f00000004c0)="e4a0c2cd54aab14519e71ee3ce1c89621ea061a59ac87c44e0d71f7a3fadb1166144c8696dcc8cda4955869886a8de0e956f4c506e91e834a98b454e1ee7eafc6a6167aeec9d146c513580730acff09287148874e9ec947944a9eef0421df06731f85c489cf4942817536fe20c5709eae09da4e3ec1b78803bf74391c8058fc70696727d07e653e319c297782f3fdacf7201caf7a1003ca4a164f8dbac402d", 0x9f}, {&(0x7f0000000040)="655ee7f499bfffbdd9551950f800bb781dd7a6d899bf65ad21c5b7500a02284fe83577d1f886e9cfe727d8bbf0981c39876e670274b1d2c53ec90930da7243824b7550be5578de6ac1c03b52ba4abbb644b879ad9b5b299b20442e5ed24109d874cba8f58db5f141eb2a8935dd220c08a8751d175f", 0x1c}, {&(0x7f00000016c0)="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", 0x1000}], 0x6, 0x0) fsetxattr(r1, &(0x7f00000005c0)=@random={'trusted.', '$\x00'}, &(0x7f0000000600)='/dev/vcs\x00', 0x9, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000640)={0xcc8e, 0x8200, 0x80000000, 0x8, 0x0}, &(0x7f0000000680)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000006c0)={r2, 0xf923}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)=0x6, 0x4) [ 371.904869] FAT-fs (loop0): Directory bread(block 6) failed [ 371.946452] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:23 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 371.988252] FAT-fs (loop0): Directory bread(block 8) failed [ 372.032470] FAT-fs (loop0): Directory bread(block 9) failed [ 372.076718] FAT-fs (loop0): Directory bread(block 10) failed [ 372.111829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.125110] FAT-fs (loop0): Directory bread(block 11) failed [ 372.149546] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.176503] attempt to access beyond end of device [ 372.181688] loop0: rw=2049, want=246, limit=2 [ 372.198791] attempt to access beyond end of device [ 372.203954] loop0: rw=2049, want=247, limit=2 [ 372.220994] attempt to access beyond end of device [ 372.226093] loop0: rw=2049, want=248, limit=2 [ 372.247105] attempt to access beyond end of device [ 372.252226] loop0: rw=2049, want=249, limit=2 [ 372.268874] attempt to access beyond end of device [ 372.273961] loop0: rw=2049, want=262, limit=2 [ 372.288804] attempt to access beyond end of device [ 372.293872] loop0: rw=2049, want=263, limit=2 [ 372.308995] attempt to access beyond end of device [ 372.314080] loop0: rw=2049, want=264, limit=2 [ 372.325169] attempt to access beyond end of device [ 372.330229] loop0: rw=2049, want=265, limit=2 [ 372.399446] attempt to access beyond end of device [ 372.404512] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000040)='+nodev\x00', 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xac, r1, 0x212, 0x70bd28, 0x25dfdbff, {0x3}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) 2018/04/13 23:38:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xc40d0000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:23 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc0045878, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:23 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfc00000000000000]}}, 0x1c) 2018/04/13 23:38:23 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="905697a97d4d00bebd4f2f7e6f17e0c954870c7238ff5064af62781a544aca67b0033c8a4078b8edb35f3087b5b98b254bb175bb5c0da8c241c603e52010aab8bff2ac4b52c06502f13e6418ec1beadeb8da40452133cd076f95bbfae69252ede848fde45175f2e538baafcc4a5f1f8ffe86bebd169d8ef17bff4fe203a35fae7ecfb17578337e441c40124c30394b618a7ac42cecd1b765af51b9752d5d136ac2551a6b831c25c5cbdf20521f2a12b25e54", 0xb2) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:23 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x26d4) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0xf) r0 = openat(0xffffffffffffffff, &(0x7f0000001380)='./file0\x00', 0xc8040, 0xc) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001400)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000018c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000019c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001a00)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000001b00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001b80)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000001c80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001cc0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000001dc0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001f00)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000002000)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002340)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002300)={&(0x7f0000002040)={0x2a8, r1, 0x132, 0x70bd2b, 0x25dfdbfc, {0x3}, [{{0x8, 0x1, r2}, {0xb8, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0x2, 0x100000001, 0x8020, 0x6}, {0x5, 0x9, 0xfffffffffffffff9, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfc}}}]}}, {{0x8, 0x1, r4}, {0x1cc, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r6}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x10001}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x34, 0x4, [{0xffff, 0x81, 0x9, 0x1}, {0xf7b, 0x3f, 0xb5, 0x6}, {0x2, 0xffffffffffff79dc, 0x100000000, 0x831}, {0x1000, 0x7fffffff, 0x1, 0xaaca}, {0x2ffd, 0x9, 0x7ff, 0x6}, {0x8000000000, 0x7, 0x5, 0xffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8000}}, {0x8, 0x7}}}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4c045}, 0x4) r7 = accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, @local}, &(0x7f0000000300)=0x10) recvfrom$inet(r7, &(0x7f0000000340)=""/4096, 0x1000, 0x20, &(0x7f0000001340)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r8 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fffffff, 0x2000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xf146, 0x9}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r9, 0x101, 0x1ff}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000000c0)={0x100000001, 0x0, 0x80, 0xe8f, r10}, 0x10) 2018/04/13 23:38:23 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc020660b, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 372.738618] FAT-fs (loop0): Directory bread(block 2) failed [ 372.746555] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.773423] FAT-fs (loop0): Directory bread(block 3) failed [ 372.779522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:23 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x100000000000000]}}, 0x1c) 2018/04/13 23:38:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-twofish-3way)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001940)="6cd93bdf93938aa5573139a9d9921c2f47f247d59454541e066c5c1ad30905296d8c9a023b451fd1ee5edbc80e5f774b82ccc98c459498c7e5bf4e07add3e340fd0de382ad0a23f7e533b6cea89b890aae913c74de5a7da23398be4863fe1fe85bcacb797f1d5557cab6f55f9c120e10aaf574bc4c0d99153ccb7d", 0x7b}], 0x1}, 0x20008080) clock_nanosleep(0x7, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000001c0)) read(r1, &(0x7f0000000280)=""/219, 0x1e) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x1000}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x40, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000600)=0x14) recvmmsg(r0, &(0x7f0000008ec0)=[{{&(0x7f0000000700)=@sco, 0x80, &(0x7f0000000640)=[{&(0x7f0000000840)=""/162, 0xa2}], 0x1, &(0x7f0000000780)=""/27, 0x1b, 0x1ff}, 0x4}, {{&(0x7f00000019c0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/149, 0x95}], 0x2, &(0x7f0000001c00)=""/141, 0x8d, 0x7ff}, 0x4}, {{&(0x7f0000001cc0)=@nl, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/145, 0x91}, {&(0x7f0000002e00)=""/48, 0x30}, {&(0x7f00000047c0)=""/4096, 0x1000}], 0x4, 0x0, 0x0, 0x6}, 0xfd}, {{&(0x7f0000002e80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002f00)=""/135, 0x87}, {&(0x7f0000002fc0)=""/251, 0xfb}, {&(0x7f00000030c0)=""/246, 0xf6}, {&(0x7f00000031c0)=""/69, 0x45}, {&(0x7f0000003240)=""/229, 0xe5}, {&(0x7f0000003340)=""/230, 0xe6}, {&(0x7f0000003440)=""/103, 0x67}, {&(0x7f00000034c0)=""/48, 0x30}, {&(0x7f0000003500)=""/253, 0xfd}], 0x9, &(0x7f00000057c0)=""/4096, 0x1000, 0x7c1c}, 0xfff}, {{0x0, 0x0, &(0x7f0000008b00)=[{&(0x7f00000036c0)=""/171, 0xab}, {&(0x7f00000067c0)=""/166, 0xa6}, {&(0x7f0000006880)=""/219, 0xdb}, {&(0x7f0000006980)=""/110, 0x6e}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000003780)=""/7, 0x7}, {&(0x7f0000007a00)=""/4096, 0x1000}, {&(0x7f0000008a00)=""/112, 0x70}, {&(0x7f0000008a80)=""/95, 0x5f}], 0x9, 0x0, 0x0, 0x4}, 0x3dfaa57d}, {{0x0, 0x0, &(0x7f0000008dc0)=[{&(0x7f0000008bc0)=""/119, 0x77}, {&(0x7f0000008c40)}, {&(0x7f0000008c80)=""/113, 0x71}, {&(0x7f0000008d00)=""/2, 0x2}, {&(0x7f0000008d40)=""/65, 0x41}], 0x5, &(0x7f0000008e40)=""/73, 0x49, 0x7}, 0x1000}], 0x6, 0x10000, &(0x7f0000009040)={0x77359400}) getpeername$packet(0xffffffffffffffff, &(0x7f0000009080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000090c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000009100)={0x0, 0x0, 0x0}, &(0x7f0000009140)=0x14) accept4(r1, &(0x7f0000009200)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000009280)=0x80, 0x800) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f00000092c0)={@local, 0x0}, &(0x7f0000009300)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000009380)={{{@in=@broadcast, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000009480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000094c0)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000095c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009600)={{{@in6=@ipv4={[], [], @multicast2}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000009700)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1d, &(0x7f00000097c0)={@mcast2, 0x0}, &(0x7f0000009800)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000098c0)={0x0, @loopback, @dev}, &(0x7f0000009900)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000009a00)={@multicast1, @empty, 0x0}, &(0x7f0000009a40)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f000000d740)={@loopback, @multicast2, 0x0}, &(0x7f000000d780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000d880)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000d8c0)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f000000d9c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f000000dc40)={@broadcast, @remote, 0x0}, &(0x7f000000dc80)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f000000dd40)={@mcast1, 0x0}, &(0x7f000000dd80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f000000de80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f000000dec0)=0x14) accept$packet(0xffffffffffffffff, &(0x7f000000df00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f000000df40)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000dfc0)={'dummy0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f000000f840)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f000000f940)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f000000f980)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f000000fa80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f000000fac0)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f000000fbc0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000000fc00)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f000000fd00)=0xe8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000011540)={&(0x7f00000113c0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000011480)=[{&(0x7f0000011440)=""/54, 0x36}], 0x1, &(0x7f00000114c0)=""/68, 0x44, 0x1}, 0x2001) accept4$packet(0xffffffffffffff9c, &(0x7f0000011580)={0x0, 0x0, 0x0}, &(0x7f00000115c0)=0x14, 0x80000) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000011600)={0x0, @multicast1, @multicast2}, &(0x7f0000011640)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000011680)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000011780)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000117c0)={'erspan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000012200)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f00000121c0)={&(0x7f0000011800)={0x9a8, r3, 0x400, 0x70bd28, 0x25dfdbfb, {0x3}, [{{0x8, 0x1, r4}, {0x160, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x34, 0x4, [{0x7, 0x9, 0x20b5, 0xffffffff}, {0x1, 0x6fe, 0x2, 0x2}, {0x9, 0xfffffffffffff7ab, 0x7b6, 0x95}, {0x5, 0x7, 0xffffffffffffac66, 0x8001}, {0x9, 0x8, 0x5, 0x7fff}, {0x4434, 0xffffffffffffff81, 0x4e83, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0x7fffffff, 0x10000, 0x401, 0x100000001}, {0x5, 0xffffffff, 0x7, 0x100}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x1d4, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfffffffffffffff8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}, {0x8, 0x7}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x2c, 0x4, [{0x2, 0x1, 0x8, 0x7}, {0x3f, 0x0, 0x10001, 0x2}, {0x5, 0x400, 0x6, 0x2}, {0x5, 0x100000001, 0x800, 0x401}, {0xff, 0x1, 0x8, 0x8000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xc70}}, {0x8, 0x6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x6}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r14}, {0x1e0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xbf8c}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r17}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x184, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r22}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r23}}, {0x8, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r25}}}]}}, {{0x8, 0x1, r26}, {0x134, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r27}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r28}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r29}}, {0x8, 0x7, 0x5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r30}}}]}}, {{0x8, 0x1, r31}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r32}}}]}}]}, 0x9a8}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/106, 0x6a}], 0x174, &(0x7f0000000400)=""/203, 0xcb}, 0x0) 2018/04/13 23:38:23 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x11, &(0x7f0000000040)=[{&(0x7f0000000000), 0xffbf}], 0x1, &(0x7f0000000180)}, 0x0) accept4$inet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80800) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="73941197", 0x4}], 0x1, &(0x7f0000000c80)=ANY=[]}, 0x0) rt_sigaction(0xd, &(0x7f0000000000)={0x3f, {0x2}, 0x8000000, 0xfffffffffffffffc}, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) recvmsg(r0, &(0x7f0000001a40)={&(0x7f0000001640)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x26, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/226, 0xe2}], 0x1}, 0x0) [ 372.824412] FAT-fs (loop0): Directory bread(block 4) failed [ 372.864012] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) timer_create(0x7, &(0x7f00000005c0)={0x0, 0x30, 0x5, @thr={&(0x7f0000000480)="6b4ba35e03bac14fc5d6296a6ab14b633f71756c27c4d1a889297d5661f83127570f80a8e3b247cf5d755734679f999d51ef6fdc397a99bb973cbf125d4003f6f50192d7f2d304eb7d1b68e3a1bfdc2cbe6fe0108695640b99d7ad0e87ef076feebc3af42c36b4f4beca835b079ab39b03e3e798043e663c87d1351afb04ab4ad692bcb67adbe10f1c8d1b", &(0x7f0000000540)="d3dd3cad641d0c0d532d6172b502c28c5138c6994dfe39bd4c89710dd83ae897bee3b52ea997f60ac3ffb2c47e5a5b783e1762c89da30e6890bab60d6d7ce3817d4ca6845d97941e386be939281d93b6f89229f98a278651b2841ffad7be83e53438dcdee9ba3e3b1cb0bfa1fbf3"}}, &(0x7f0000000600)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r3 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0xcf4, 0x80) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r1, r2, r4}, 0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r5, 0x40, 0x20}, 0xc) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0xff71) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:24 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 372.893186] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:24 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xf000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 372.934463] FAT-fs (loop0): Directory bread(block 7) failed [ 372.958492] FAT-fs (loop0): Directory bread(block 8) failed [ 372.972459] FAT-fs (loop0): Directory bread(block 9) failed [ 372.993289] FAT-fs (loop0): Directory bread(block 10) failed [ 373.010595] FAT-fs (loop0): Directory bread(block 11) failed [ 373.040413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 373.071850] attempt to access beyond end of device [ 373.076970] loop0: rw=2049, want=246, limit=2 [ 373.081575] buffer_io_error: 30 callbacks suppressed [ 373.081587] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 373.106184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 373.110042] attempt to access beyond end of device [ 373.117830] loop0: rw=2049, want=247, limit=2 [ 373.122408] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 373.142842] attempt to access beyond end of device [ 373.147922] loop0: rw=2049, want=248, limit=2 [ 373.152495] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 373.161000] attempt to access beyond end of device [ 373.166239] loop0: rw=2049, want=249, limit=2 [ 373.170810] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 373.178844] attempt to access beyond end of device [ 373.183868] loop0: rw=2049, want=262, limit=2 [ 373.188401] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 373.196299] attempt to access beyond end of device [ 373.201311] loop0: rw=2049, want=263, limit=2 [ 373.205867] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 373.213778] attempt to access beyond end of device [ 373.218775] loop0: rw=2049, want=264, limit=2 [ 373.223374] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 373.231302] attempt to access beyond end of device [ 373.236331] loop0: rw=2049, want=265, limit=2 [ 373.240890] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 373.281402] attempt to access beyond end of device [ 373.286480] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) accept4(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f0000000180)=0x80, 0x80800) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0)) 2018/04/13 23:38:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x6000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:24 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x80fe]}}, 0x1c) 2018/04/13 23:38:24 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40049409, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:24 executing program 4: r0 = memfd_create(&(0x7f0000000000)="7d2ebe6d696d655f7479706500", 0x0) write$binfmt_aout(r0, &(0x7f0000000100)={{0x108, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x218}}, 0x20) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/04/13 23:38:24 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x52, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x10000}}, [0xa00, 0x401, 0x101, 0x8, 0x10001, 0x1ff, 0x1, 0x8, 0x2, 0x9, 0x0, 0x4, 0x400, 0xffffffff, 0xbcc]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r2, 0xb6081c6}, &(0x7f0000000140)=0x8) fadvise64(r1, 0x0, 0x9, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r3, r4+30000000}, &(0x7f0000000080)) 2018/04/13 23:38:24 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x500}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:24 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xfffffffe) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 373.692647] FAT-fs (loop0): Directory bread(block 2) failed [ 373.695343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:24 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x2f00]}}, 0x1c) 2018/04/13 23:38:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x80000) 2018/04/13 23:38:24 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x5421, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:24 executing program 5: r0 = gettid() setrlimit(0xb, &(0x7f000003a000)) rt_sigprocmask(0x2, &(0x7f0000037ff8)={0x1f}, 0x0, 0x8) rt_sigqueueinfo(r0, 0x20, &(0x7f0000035000)) [ 373.744158] FAT-fs (loop0): Directory bread(block 3) failed [ 373.768772] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 373.777878] FAT-fs (loop0): Directory bread(block 4) failed [ 373.819519] FAT-fs (loop0): Directory bread(block 5) failed [ 373.843338] FAT-fs (loop0): Directory bread(block 6) failed [ 373.869222] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:25 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0xfec0]}}, 0x1c) 2018/04/13 23:38:25 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x7d6}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x800455d1, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:25 executing program 5: r0 = socket(0x8000000000015, 0x80005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x8000200000000114, 0x8, &(0x7f000047c000), &(0x7f0000000000)) [ 373.893653] FAT-fs (loop0): Directory bread(block 8) failed [ 373.922468] FAT-fs (loop0): Directory bread(block 9) failed 2018/04/13 23:38:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1f8) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f00000002c0)="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", 0x1000) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) [ 373.959006] FAT-fs (loop0): Directory bread(block 10) failed [ 373.979246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 373.981499] FAT-fs (loop0): Directory bread(block 11) failed [ 374.067493] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 374.105991] attempt to access beyond end of device [ 374.111089] loop0: rw=2049, want=246, limit=2 [ 374.115663] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 374.127585] attempt to access beyond end of device [ 374.132673] loop0: rw=2049, want=247, limit=2 [ 374.137265] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 374.158762] attempt to access beyond end of device [ 374.163950] loop0: rw=2049, want=248, limit=2 [ 374.178819] attempt to access beyond end of device [ 374.184048] loop0: rw=2049, want=249, limit=2 [ 374.192815] attempt to access beyond end of device [ 374.197994] loop0: rw=2049, want=262, limit=2 [ 374.203677] attempt to access beyond end of device [ 374.208863] loop0: rw=2049, want=263, limit=2 [ 374.214376] attempt to access beyond end of device [ 374.219397] loop0: rw=2049, want=264, limit=2 [ 374.223994] attempt to access beyond end of device [ 374.228986] loop0: rw=2049, want=265, limit=2 [ 374.267383] attempt to access beyond end of device [ 374.272419] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:25 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:25 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x2) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x36614, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:25 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0xc}, 0x2c) io_setup(0x8, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) io_getevents(r0, 0x40, 0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)={r1, r2+10000000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=0x1000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x97}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r5, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7, 0xfffffffc, 0xcce0ecd, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f0000000380)}, 0xffffffffffffff71) socketpair$inet_icmp(0x23e1000, 0x20000002, 0xfffffffffffff397, &(0x7f0000000000)) 2018/04/13 23:38:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x81785501, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:25 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x4]}}, 0x1c) 2018/04/13 23:38:25 executing program 5: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(r0, 0x8001) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0/file0', [{0x20, '^!{vboxnet0/systemlo'}, {0x20, '&[em1'}, {0x20}, {0x20}, {0x20, 'eth1'}], 0xa, "bb133b82254f8b936c41219427f3be8440ddc7f4d8044bca237c8fca9904e4723146acaab84678225b77cc234fdc91e5200fea03a8ce9f8c496ea2dfc7270b19e17f013862df1daed54af89789b48264e39e"}, 0x85) read(r1, &(0x7f0000003600)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) ftruncate(r0, 0x0) fallocate(r1, 0x3, 0x0, 0xffffffff000) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/04/13 23:38:25 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r0 = memfd_create(&(0x7f0000000000)='rng\x00', 0x2) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) [ 374.625911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 374.646127] FAT-fs (loop0): Directory bread(block 2) failed [ 374.662663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc00455d0, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:25 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xc0fe]}}, 0x1c) 2018/04/13 23:38:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r1 = semget(0x2, 0x6, 0x100) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xa00, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000140)=0x8001, &(0x7f0000000180)=0x4) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/96) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:25 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x8100000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 374.695101] FAT-fs (loop0): Directory bread(block 3) failed [ 374.749112] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc0189436, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 374.796632] FAT-fs (loop0): Directory bread(block 5) failed [ 374.823728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x400000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000000c0)={0xfff, 0x3a, 0x100000000, 0x4b96f5a0, 0x6}) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:26 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x100000000000000]}}, 0x1c) [ 374.846726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 374.857325] FAT-fs (loop0): Directory bread(block 6) failed [ 374.873017] FAT-fs (loop0): Directory bread(block 7) failed [ 374.885115] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:26 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xf000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 374.926322] FAT-fs (loop0): Directory bread(block 9) failed [ 374.949467] FAT-fs (loop0): Directory bread(block 10) failed [ 374.985368] FAT-fs (loop0): Directory bread(block 11) failed [ 375.033661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.081248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.089435] attempt to access beyond end of device [ 375.094620] loop0: rw=2049, want=246, limit=2 [ 375.105428] attempt to access beyond end of device [ 375.110616] loop0: rw=2049, want=247, limit=2 [ 375.141462] attempt to access beyond end of device [ 375.146614] loop0: rw=2049, want=248, limit=2 [ 375.161314] attempt to access beyond end of device [ 375.166417] loop0: rw=2049, want=249, limit=2 [ 375.171148] attempt to access beyond end of device [ 375.176235] loop0: rw=2049, want=262, limit=2 [ 375.181273] attempt to access beyond end of device [ 375.186363] loop0: rw=2049, want=263, limit=2 [ 375.191995] attempt to access beyond end of device [ 375.197115] loop0: rw=2049, want=264, limit=2 [ 375.201865] attempt to access beyond end of device [ 375.206908] loop0: rw=2049, want=265, limit=2 [ 375.423477] attempt to access beyond end of device [ 375.428546] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x4020940d, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:26 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000240)={0x0, 0x9, 0x7, 0x8, &(0x7f0000000040)=""/8, 0x36, &(0x7f0000000080)=""/54, 0xda, &(0x7f00000000c0)=""/218}) recvmsg(r0, &(0x7f0000001ec0)={&(0x7f0000001ac0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b40)=""/70, 0x46}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/138, 0x8a}, {&(0x7f0000001d00)=""/215, 0xd7}], 0x4, &(0x7f0000001e40)=""/108, 0x6c, 0x6}, 0x10000) r2 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001f00)={{{@in6=@loopback={0x0, 0x1}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4e20, 0x1, 0x4e22, 0x0, 0x2, 0x20, 0xa0, 0x5, r1, r2}, {0x7, 0x7fff, 0x7, 0x200, 0x5, 0x0, 0x0, 0x5}, {0x2fb6, 0x1f, 0x100000001, 0x2}, 0x3, 0x6e6bb1, 0x2, 0x1, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x4d4, 0x32}, 0x2, @in6=@loopback={0x0, 0x1}, 0x3506, 0x3, 0x1, 0x4, 0x9, 0xff, 0x7}}, 0xe8) getsockopt$inet_dccp_int(r0, 0x21, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r4, r4) fchown(r3, 0x0, 0x0) 2018/04/13 23:38:26 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x600]}}, 0x1c) 2018/04/13 23:38:26 executing program 5: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(r0, 0x8001) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0/file0', [{0x20, '^!{vboxnet0/systemlo'}, {0x20, '&[em1'}, {0x20}, {0x20}, {0x20, 'eth1'}], 0xa, "bb133b82254f8b936c41219427f3be8440ddc7f4d8044bca237c8fca9904e4723146acaab84678225b77cc234fdc91e5200fea03a8ce9f8c496ea2dfc7270b19e17f013862df1daed54af89789b48264e39e"}, 0x85) read(r1, &(0x7f0000003600)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) ftruncate(r0, 0x0) fallocate(r1, 0x3, 0x0, 0xffffffff000) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/04/13 23:38:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') recvfrom$inet(r1, &(0x7f0000000040)=""/158, 0x9e, 0x40012000, &(0x7f0000000100)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xcc0d0000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:26 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x2000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:26 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x7000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:26 executing program 4: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(r0, 0x8001) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0/file0', [{0x20, '^!{vboxnet0/systemlo'}, {0x20, '&[em1'}, {0x20}, {0x20}, {0x20, 'eth1'}], 0xa, "bb133b82254f8b936c41219427f3be8440ddc7f4d8044bca237c8fca9904e4723146acaab84678225b77cc234fdc91e5200fea03a8ce9f8c496ea2dfc7270b19e17f013862df1daed54af89789b48264e39e"}, 0x85) read(r1, &(0x7f0000003600)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) ftruncate(r0, 0x0) fallocate(r1, 0x3, 0x0, 0xffffffff000) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/04/13 23:38:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x40, 0x80) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000180)) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x3, r0, 0x1}) bind$llc(r2, &(0x7f0000000100)={0x1a, 0x338, 0x8, 0x5, 0x6, 0x5, @random="f66e3f8d54dc"}, 0x10) bind$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x7d387089, 0x1, 0x100, 0x9, 0x9cc, 0x9}, 0x39}, 0xa) [ 375.806110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.806650] FAT-fs (loop0): Directory bread(block 2) failed [ 375.840374] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:26 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x400300]}}, 0x1c) 2018/04/13 23:38:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x5451, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 375.861421] FAT-fs (loop0): Directory bread(block 4) failed [ 375.867568] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.922844] FAT-fs (loop0): Directory bread(block 5) failed [ 375.953706] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000340)=0x80000000, 0x4) recvmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/85, 0x55}], 0x1, &(0x7f00000001c0)=""/119, 0x77, 0xc574}, 0x10040) [ 375.986788] FAT-fs (loop0): Directory bread(block 7) failed [ 376.011059] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:27 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfffffffe]}}, 0x1c) 2018/04/13 23:38:27 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x5460, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 376.038272] FAT-fs (loop0): Directory bread(block 9) failed [ 376.075829] FAT-fs (loop0): Directory bread(block 10) failed [ 376.119188] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.120520] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:38:27 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x600000000000000]}}, 0x1c) 2018/04/13 23:38:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000002, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 376.172925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.226639] attempt to access beyond end of device [ 376.231734] loop0: rw=2049, want=246, limit=2 [ 376.311118] attempt to access beyond end of device [ 376.316254] loop0: rw=2049, want=247, limit=2 [ 376.348362] attempt to access beyond end of device [ 376.353591] loop0: rw=2049, want=248, limit=2 [ 376.366810] attempt to access beyond end of device [ 376.371945] loop0: rw=2049, want=249, limit=2 [ 376.393705] attempt to access beyond end of device [ 376.398849] loop0: rw=2049, want=262, limit=2 [ 376.404235] attempt to access beyond end of device [ 376.409319] loop0: rw=2049, want=263, limit=2 [ 376.424130] attempt to access beyond end of device [ 376.429205] loop0: rw=2049, want=264, limit=2 [ 376.448292] attempt to access beyond end of device [ 376.453366] loop0: rw=2049, want=265, limit=2 [ 376.535510] attempt to access beyond end of device [ 376.540598] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0xfffffd97) 2018/04/13 23:38:28 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x600}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:28 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x2f000000]}}, 0x1c) 2018/04/13 23:38:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100001400, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:28 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xf000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xb8660300, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x574, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xffffffffffffffff}}], 0x0, 0x0, &(0x7f0000000180)}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000640)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000400)=""/166, 0xa6}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/178, 0xb2}, {&(0x7f00000001c0)=""/23, 0x17}], 0x7, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/115, 0x73}], 0x1, 0x0) 2018/04/13 23:38:28 executing program 4: unshare(0x8000400) r0 = mq_open(&(0x7f00000012c0)='/dev/rfkill\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f00000011c0)={0x6, r0, 0x1}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000001200)={'filter\x00', 0x3f, "27154fbcd33d27aaaecd918e15b9ae33d2afadc51ffcb817197e2f4100954c5f1cda3b0f46e78f8912a928a47acc8e02e72df7f3c885c284fdc553e4c510da"}, &(0x7f0000001280)=0x63) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000a0ffff), 0x0, 0x0, &(0x7f000066cff0)={0x77359400}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x1454, 0xe6, 0x9, 0x100, 0x7ff}) mq_timedreceive(r0, &(0x7f00000000c0)=""/4096, 0x199, 0x0, &(0x7f0000f36000)={0x0, 0x989680}) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000010c0)=@ioapic) 2018/04/13 23:38:28 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfec00000]}}, 0x1c) [ 376.947901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.975376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.982891] FAT-fs (loop0): Directory bread(block 2) failed [ 376.991152] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0xfffffdfd, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:28 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x40000) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x15, 0x0, 0x0, 0xfffffffffffffff9}, {0x200000006}]}, 0x10) sendto$unix(r2, &(0x7f000000d000), 0x0, 0x0, &(0x7f000000dff8)=@abs, 0x8) 2018/04/13 23:38:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0xe1c7519, 0x80000000}, 'port0\x00', 0x2, 0x20000, 0x400, 0x7fffffff, 0x3, 0xd6, 0x3257, 0x0, 0x1, 0x9}) r2 = dup3(r0, r0, 0x80000) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:28 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 377.015205] FAT-fs (loop0): Directory bread(block 4) failed [ 377.050198] FAT-fs (loop0): Directory bread(block 5) failed [ 377.093599] FAT-fs (loop0): Directory bread(block 6) failed [ 377.124928] FAT-fs (loop0): Directory bread(block 7) failed [ 377.136587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0xfdfdffff00000000, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:28 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfeffffff]}}, 0x1c) [ 377.150507] FAT-fs (loop0): Directory bread(block 8) failed [ 377.164343] FAT-fs (loop0): Directory bread(block 9) failed [ 377.174175] FAT-fs (loop0): Directory bread(block 10) failed [ 377.192965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.202992] FAT-fs (loop0): Directory bread(block 11) failed [ 377.263949] attempt to access beyond end of device [ 377.269076] loop0: rw=2049, want=246, limit=2 [ 377.278752] attempt to access beyond end of device [ 377.283872] loop0: rw=2049, want=247, limit=2 [ 377.289221] attempt to access beyond end of device [ 377.294315] loop0: rw=2049, want=248, limit=2 [ 377.312590] attempt to access beyond end of device [ 377.317767] loop0: rw=2049, want=249, limit=2 [ 377.328267] attempt to access beyond end of device [ 377.333392] loop0: rw=2049, want=262, limit=2 [ 377.351306] attempt to access beyond end of device [ 377.356495] loop0: rw=2049, want=263, limit=2 [ 377.361233] attempt to access beyond end of device [ 377.366238] loop0: rw=2049, want=264, limit=2 [ 377.370883] attempt to access beyond end of device [ 377.375911] loop0: rw=2049, want=265, limit=2 [ 377.412390] attempt to access beyond end of device [ 377.417455] loop0: rw=1, want=329, limit=2 [ 377.849273] binder: 27659:27662 transaction failed 29201/-22, size 0-0 line 2963 [ 377.856937] binder: send failed reply for transaction 15 to 27659:27703 [ 377.864828] binder: BINDER_SET_CONTEXT_MGR already set [ 377.865338] binder: 27659:27662 ioctl c0306201 20004000 returned -14 [ 377.870196] binder: 27659:27703 ioctl 40046207 0 returned -16 [ 377.883119] binder: 27659:27704 got reply transaction with no transaction stack [ 377.883125] binder_alloc: 27659: binder_alloc_buf, no vma [ 377.883159] binder: 27659:27662 transaction failed 29189/-3, size 0-0 line 2963 [ 377.890702] binder: 27659:27704 transaction failed 29201/-71, size 0-0 line 2763 2018/04/13 23:38:29 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x12) r0 = socket$inet(0xa, 0x3, 0x8000000000000012) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x3a, 0x4e, &(0x7f0000000000)={0x0, 'ip6_vti0\x00'}, 0x18) 2018/04/13 23:38:29 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfffffffffffff000]}}, 0x1c) 2018/04/13 23:38:29 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x100000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x100000000000000, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xffffff7f, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/13 23:38:29 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x52, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xd49, 0x80080) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0x3) 2018/04/13 23:38:29 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xd426) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 378.023306] binder: undelivered TRANSACTION_ERROR: 29189 [ 378.028916] binder: undelivered TRANSACTION_ERROR: 29201 [ 378.062985] FAT-fs (loop0): Directory bread(block 2) failed [ 378.073859] binder: undelivered TRANSACTION_ERROR: 29190 [ 378.079558] binder: undelivered TRANSACTION_COMPLETE [ 378.084766] binder: undelivered TRANSACTION_ERROR: 29201 [ 378.104184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 378.111652] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000000000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "b1abe2da03000000e1000000fc00000000000000dc98784b49e0007e000020db"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000140)=""/250) close(r0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000014000000f4c04e91040000000800000002000000"]) [ 378.120349] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x200000000000000, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:29 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xffffffff00000000]}}, 0x1c) 2018/04/13 23:38:29 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r0, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x4, 0x4) 2018/04/13 23:38:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) accept4$netrom(r2, &(0x7f0000000100)=@full, &(0x7f0000000180)=0x48, 0x800) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @adapter}]}) 2018/04/13 23:38:29 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000a80)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000ac0)=@query={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1}}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0xc) [ 378.154277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 378.161927] FAT-fs (loop0): Directory bread(block 5) failed [ 378.185305] FAT-fs (loop0): Directory bread(block 6) failed [ 378.229338] FAT-fs (loop0): Directory bread(block 7) failed [ 378.257940] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:29 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x2000000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:29 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfffff000]}}, 0x1c) [ 378.301545] FAT-fs (loop0): Directory bread(block 9) failed [ 378.323484] FAT-fs (loop0): Directory bread(block 10) failed [ 378.332815] FAT-fs (loop0): Directory bread(block 11) failed [ 378.379917] attempt to access beyond end of device [ 378.385083] loop0: rw=2049, want=246, limit=2 [ 378.389652] buffer_io_error: 30 callbacks suppressed [ 378.389663] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 378.421123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 378.461632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 378.469368] attempt to access beyond end of device [ 378.474488] loop0: rw=2049, want=247, limit=2 [ 378.479156] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 378.512514] attempt to access beyond end of device [ 378.517792] loop0: rw=2049, want=248, limit=2 [ 378.522359] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 378.532656] attempt to access beyond end of device [ 378.537795] loop0: rw=2049, want=249, limit=2 [ 378.542511] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 378.550606] attempt to access beyond end of device [ 378.555671] loop0: rw=2049, want=262, limit=2 [ 378.560316] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 378.568257] attempt to access beyond end of device [ 378.573269] loop0: rw=2049, want=263, limit=2 [ 378.577850] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 378.585736] attempt to access beyond end of device [ 378.590732] loop0: rw=2049, want=264, limit=2 [ 378.595273] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 378.603187] attempt to access beyond end of device [ 378.608195] loop0: rw=2049, want=265, limit=2 [ 378.612751] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 378.658308] attempt to access beyond end of device [ 378.663358] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:30 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0x8, 0x8}, 0x400) 2018/04/13 23:38:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000040)=""/211) write(r0, &(0x7f0000000000)="2200000021000706e1be0000090007010a00001e0000040000000400050015800041", 0x22) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0xe4ce, 0xaf1a}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r1, 0x4) 2018/04/13 23:38:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x1000000, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:30 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040), 0xa) r0 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x3f, 0x4000) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000140)={0x2, 0x0, [{}, {}]}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x1}, 0x10) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x10000000) fsetxattr(r1, &(0x7f0000341000)=@known='system.posix_acl_access\x00', &(0x7f0000648ff4)="020000002000000090748400", 0xc, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 2018/04/13 23:38:30 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x9effffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:30 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x18000000]}}, 0x1c) 2018/04/13 23:38:30 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xf0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x4700, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) [ 378.965880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 378.982930] FAT-fs (loop0): Directory bread(block 2) failed [ 378.991646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:30 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x400000000000000]}}, 0x1c) 2018/04/13 23:38:30 executing program 5: r0 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r0, 0xa) r1 = gettid() r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000001240)="8907040000", 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x7}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) sched_rr_get_interval(0x0, &(0x7f00004bb4a0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, r3}}, &(0x7f0000000040)) semget$private(0x0, 0x3, 0x0) readv(r2, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) setsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f00000000c0)="b112520841545fc89d44fd49af38dd7b03293dcf774dd821463b04ce017338b196093eb6048ebda6957d250e6e683d18e3ae64c22994314985c42de0cfbfa63392d286f67f25e33ed16eb65d441f7fa4848d2912e7850b416b68f9ea4062ddaba2edf74724c2fbb0ae4cdcff746b05239dc2514609", 0x75) r4 = open(&(0x7f0000000140)='./file0\x00', 0x4280, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000001280)={0x10, 0x800, 0x4, 'queue0\x00', 0x7fff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x15) 2018/04/13 23:38:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x2000000, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x80000010) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x2c, 0x80aff, 0x0, 0x0, {0x1000000000001}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary='\b'}]}]}, 0x20}, 0x1}, 0x0) [ 379.029321] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) mq_timedsend(r1, &(0x7f00000000c0)="bbc3ea5ba982973d952f2e3e3c082d4c7739e3ddf0c92cf58bb970c0be15392287eb", 0x22, 0x8, &(0x7f0000000100)) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0xffffffff, 0x4) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000140), &(0x7f00000001c0)=0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x20020003, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000006b80)=[{{&(0x7f0000002f80)=@vsock={0x28, 0x0, 0x0, @my}, 0x10, &(0x7f0000003180), 0x0, &(0x7f00000031c0)}}, {{&(0x7f0000003480)=@vsock={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10, &(0x7f0000005780), 0x8d, &(0x7f0000000340)=ANY=[@ANYBLOB="10000600000000008d010000000000009dc7be70e24b3c9d262720e37d6bb2d43d270bff51c143b55cf5518a82d96939dbd764764a58c451329b8ed1f9d5a9e361d9d7d950196cfc541dffa9078046e148"], 0x10}}], 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/232, &(0x7f0000000300)=0xe8) 2018/04/13 23:38:30 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xf0}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 379.074587] FAT-fs (loop0): Directory bread(block 4) failed [ 379.114748] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0xfdfdffff, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 379.157615] FAT-fs (loop0): Directory bread(block 6) failed [ 379.174202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 379.182435] FAT-fs (loop0): Directory bread(block 7) failed [ 379.194769] IPVS: length: 232 != 8 [ 379.202305] FAT-fs (loop0): Directory bread(block 8) failed [ 379.213692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 379.224687] FAT-fs (loop0): Directory bread(block 9) failed [ 379.238506] FAT-fs (loop0): Directory bread(block 10) failed [ 379.252940] FAT-fs (loop0): Directory bread(block 11) failed [ 379.298815] attempt to access beyond end of device [ 379.303925] loop0: rw=2049, want=246, limit=2 [ 379.308494] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 379.330834] attempt to access beyond end of device [ 379.336135] loop0: rw=2049, want=247, limit=2 [ 379.340698] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 379.349266] attempt to access beyond end of device [ 379.354349] loop0: rw=2049, want=248, limit=2 [ 379.359727] attempt to access beyond end of device [ 379.364725] loop0: rw=2049, want=249, limit=2 [ 379.369326] attempt to access beyond end of device [ 379.374357] loop0: rw=2049, want=262, limit=2 [ 379.378999] attempt to access beyond end of device [ 379.384048] loop0: rw=2049, want=263, limit=2 [ 379.388665] attempt to access beyond end of device [ 379.393668] loop0: rw=2049, want=264, limit=2 [ 379.398284] attempt to access beyond end of device [ 379.403290] loop0: rw=2049, want=265, limit=2 [ 379.443432] attempt to access beyond end of device [ 379.448458] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:31 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="400000000002000019000000dc0100002c00000001000000000000000000000000040000000000001f000000000000003d5ca35a0000ffff53efaf87e92499469587ddb30e8444da417412a63d265b6c8528326bf9bbd558d4", 0x59, 0x400}], 0x0, &(0x7f0000000080)) 2018/04/13 23:38:31 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfeffffff00000000]}}, 0x1c) 2018/04/13 23:38:31 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xfcffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:31 executing program 1: r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x0, 0x11, r1, 0x0) clone(0x0, &(0x7f0000a36000), &(0x7f0000855000), &(0x7f0000006ffc), &(0x7f0000340000)) preadv(r0, &(0x7f00006a6000)=[{&(0x7f0000005000)=""/2, 0x2}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') sendfile(r2, r2, &(0x7f0000000040)=0x2001, 0x40000fb) getsockname$packet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000017c0)=0x14) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001880)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000001980)={&(0x7f0000001800)={0x1d, r3}, 0x10, &(0x7f0000001940)={&(0x7f0000000080)={0x7, 0x0, 0x5, {r4, r5/1000+30000}, {r6, r7/1000+10000}, {0x4, 0x1ff, 0x11, 0x8}, 0x1, @canfd={{0x4, 0x2, 0x40, 0x8000}, 0x31, 0x0, 0x0, 0x0, "e90ffa91c8137e5f510b8a632b9cf9a7bbf612183fc85277c314215fb4a40eefa9c329b7f21652751d9101fdf86269b518d92cc7351a6f311d8f0e1d866cbfe6"}}, 0x80}, 0x1}, 0x4040001) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000180)={{0x6, 0x0, 0x7, 0x200, "6cf9ccb331112e8db9cb381de9fd1465d647bfb17b01bd5ab968eb9b9dc7d9d0e0cc12065f9e4058ae042cca", 0x3}, 0x7f, [0x2, 0x3, 0x82, 0x2, 0x0, 0x7fff, 0xfffffffffffffffe, 0x81, 0x4, 0x4d0, 0x1, 0x7c4948f3, 0x55c, 0x9, 0x78, 0x6, 0x3, 0x98, 0x200, 0x7, 0x0, 0x400, 0x0, 0x8, 0xac, 0x80000000, 0x2, 0x100, 0x4, 0x1, 0x8, 0xff, 0x2c, 0x2, 0x1, 0x0, 0x1000000000000000, 0x0, 0x1, 0x1f, 0x3, 0xffff, 0x0, 0x2, 0x1, 0x1, 0x80000001, 0x6, 0x1, 0x7, 0x3f, 0x9, 0x9, 0x5, 0xffffffffffffffa2, 0x4, 0xce, 0x8000, 0x6, 0x1000, 0x6, 0xffff, 0x7fffffff, 0xa2, 0x3, 0x1, 0x6, 0x4, 0x1ff, 0x8000, 0x1, 0x7fffffff, 0x4, 0x0, 0x3, 0x40, 0x5d00, 0x7, 0x8, 0xfffffffffffffffb, 0x8df0, 0xd1ba, 0x4, 0xe60, 0x3ff, 0x80000000, 0x5, 0x101, 0x2, 0x1ff, 0x2, 0x6, 0xc88a, 0x2, 0x771a, 0x3, 0xfffffffffffffe01, 0xe9, 0x1ff, 0x0, 0x7f, 0xe6a, 0x4, 0x3, 0x3ff, 0x0, 0x400, 0xffffffff, 0xfffffffffffffffe, 0x2, 0x4, 0x80, 0x0, 0x5d98, 0x641e, 0x10001, 0xfffffffffffffffb, 0x8000, 0x5, 0x9, 0x400, 0x5, 0x4, 0x80000001, 0x7, 0x0, 0x100000001, 0x20], {0x77359400}}) 2018/04/13 23:38:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x2, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:31 executing program 5: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x3, 0x0, [{0x2, 0x1, 0x0, 0x0, 0x4}, {0xd, 0x7f, 0x7, 0x9, 0x10000}, {0x80000008, 0x3f, 0x0, 0x5, 0x7f}]}) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00') mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) dup2(r0, r1) 2018/04/13 23:38:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x7a, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:31 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xfffffff6) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 380.039387] FAT-fs (loop0): Directory bread(block 2) failed [ 380.057474] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 380.065277] FAT-fs (loop0): Directory bread(block 3) failed [ 380.075678] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 380.083713] EXT4-fs (loop4): unsupported inode size: 212 2018/04/13 23:38:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x2000000, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:31 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xf000]}}, 0x1c) [ 380.102654] FAT-fs (loop0): Directory bread(block 4) failed [ 380.106131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 380.122725] FAT-fs (loop0): Directory bread(block 5) failed [ 380.136211] FAT-fs (loop0): Directory bread(block 6) failed [ 380.156055] FAT-fs (loop0): Directory bread(block 7) failed [ 380.167376] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 380.175087] EXT4-fs (loop4): unsupported inode size: 212 [ 380.187923] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0xfdfdffff, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 380.207638] FAT-fs (loop0): Directory bread(block 9) failed [ 380.236876] FAT-fs (loop0): Directory bread(block 10) failed 2018/04/13 23:38:31 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xff00]}}, 0x1c) 2018/04/13 23:38:31 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x60}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) pwritev(r0, &(0x7f0000002640)=[{&(0x7f0000000400)='!', 0x1}], 0x1, 0x0) io_setup(0x8001, &(0x7f00000003c0)=0x0) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x401, 0x200000) ftruncate(r0, 0x3ff) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0x9, 0x4) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) [ 380.265388] FAT-fs (loop0): Directory bread(block 11) failed [ 380.305418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x2, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 380.352071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 380.355463] FAT-fs (loop4): Directory bread(block 2) failed [ 380.376668] attempt to access beyond end of device [ 380.378454] FAT-fs (loop4): Directory bread(block 3) failed [ 380.381804] loop0: rw=2049, want=246, limit=2 2018/04/13 23:38:31 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x34000]}}, 0x1c) [ 380.412450] FAT-fs (loop4): Directory bread(block 4) failed [ 380.415827] attempt to access beyond end of device [ 380.423357] loop0: rw=2049, want=247, limit=2 [ 380.442451] attempt to access beyond end of device [ 380.447665] loop0: rw=2049, want=248, limit=2 [ 380.457391] FAT-fs (loop4): Directory bread(block 5) failed [ 380.463087] attempt to access beyond end of device [ 380.468223] loop0: rw=2049, want=249, limit=2 [ 380.485131] attempt to access beyond end of device [ 380.487006] FAT-fs (loop4): Directory bread(block 6) failed [ 380.490243] loop0: rw=2049, want=262, limit=2 [ 380.496687] FAT-fs (loop4): Directory bread(block 7) failed [ 380.502580] attempt to access beyond end of device [ 380.509496] FAT-fs (loop4): Directory bread(block 8) failed [ 380.511539] loop0: rw=2049, want=263, limit=2 [ 380.513330] attempt to access beyond end of device [ 380.526921] loop0: rw=2049, want=264, limit=2 [ 380.530524] FAT-fs (loop4): Directory bread(block 9) failed [ 380.531765] attempt to access beyond end of device [ 380.540336] FAT-fs (loop4): Directory bread(block 10) failed [ 380.542314] loop0: rw=2049, want=265, limit=2 [ 380.553314] FAT-fs (loop4): Directory bread(block 11) failed [ 380.582183] attempt to access beyond end of device [ 380.587282] loop4: rw=2049, want=246, limit=2 [ 380.620561] attempt to access beyond end of device [ 380.625658] loop0: rw=1, want=329, limit=2 [ 380.635699] attempt to access beyond end of device [ 380.640917] loop4: rw=2049, want=247, limit=2 [ 380.658664] attempt to access beyond end of device [ 380.663788] loop4: rw=0, want=247, limit=2 2018/04/13 23:38:32 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x7}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xdc5, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0xfffffdfd, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:32 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xff000000]}}, 0x1c) 2018/04/13 23:38:32 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffff298}}, 0x2, 0x3, 0x6, 0x0, 0x9}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x5}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0xf7e}, 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x5c}, &(0x7f0000000340)=0x8) 2018/04/13 23:38:32 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x800) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x7, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000740)={{0x0, 0x3, 0x1000, 0x1f, "e51a7b5b0cb9586edd886730ca0c38266ffc3bb9c413c027b990599803e3d8f29a852d93e6d705fe6b7b215c", 0xfd3}, 0x100000000, [0x7, 0x3, 0x7ff, 0x7, 0x7, 0x4, 0x4, 0x7, 0xfffffffffffffff8, 0xfffffffffffffe00, 0x1, 0x20, 0x1, 0x6, 0x80000001, 0x3, 0x0, 0x3, 0x8, 0x5, 0x7, 0x2, 0x6, 0x40, 0x9, 0x0, 0x0, 0x66, 0x2, 0x100000001, 0x0, 0x9, 0x2, 0x100, 0xff80000000000000, 0x1d, 0x101, 0x3ea, 0xffff, 0x100000001, 0x5, 0xfffffffffffff1b9, 0xa, 0x5, 0xfb36, 0xb4e3, 0x8001, 0xffffffffffffff7f, 0x9, 0x0, 0xd9, 0x1, 0x4, 0x53, 0x7, 0x7f, 0x200, 0x0, 0xf459, 0x7f, 0x4, 0xffff, 0x8, 0xb6, 0x7ff, 0x0, 0x3f, 0x1, 0x5, 0x67b, 0x1, 0x2, 0x0, 0x2, 0x8000, 0x1, 0x42a7, 0x0, 0x1, 0x0, 0x7f, 0x2, 0x1, 0x6, 0x3f, 0xe79, 0x7f, 0x5, 0xfffffffffffffeff, 0x2, 0x8444, 0x1, 0x400, 0x4, 0xfffffffffffffff8, 0x3ff, 0x9, 0x7, 0x8000, 0x6, 0xfffffffffffffffb, 0x9, 0x0, 0x3, 0x70, 0x100000000, 0xffffffff, 0x9, 0x672, 0x7, 0x7fff, 0x80, 0x8, 0x784, 0xe91a, 0x1, 0x5, 0x720, 0x2, 0x3, 0x0, 0x8, 0x200, 0x7, 0x7ff, 0x3, 0x10000, 0x8], {r3, r4+10000000}}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/189, 0xbd}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000500)=""/34, 0x22}], 0x1, 0x0) 2018/04/13 23:38:32 executing program 1: io_setup(0x8, &(0x7f0000000340)=0x0) r1 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x9, 0x10000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xfffffffffffff1b7, 0x4000000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x440, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400a167", @ANYRES16=r4, @ANYBLOB="00000000d427a7a47b32ecc3040003e584e6b713c489470dc07a000100001c0800050000000000ff7f032f0000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x5, 0x1, 0x7, "aa27dbffa831cfbb14dd223fd1b689d2b668af5ff28562a8920382bce4a7a825b18026d9533276645267e446156b08c4aced7a3310ffad56caf75348ce49b993a315bc65c0270e31fea90b11f3fc84ce"}, 0xd8) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0xa1, 0x4c0, 0x77, 0x5}, {0xff, 0x9881, 0xd656, 0x9}, {0x3ff, 0x5, 0x1, 0x7}]}, 0x10) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000140)='0', 0x1}]) syz_extract_tcp_res(&(0x7f0000000440), 0x1, 0x642d72f) 2018/04/13 23:38:32 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xd4260000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 381.047975] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.063269] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:32 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) set_mempolicy(0x1, &(0x7f0000000040)=0xfff, 0x81) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x81, 0xfffffffffffffffb, 0x393, 0x2, 0xffffffffffffff00, 0x0, 0xfffffffffffffffb, 0x40, 0x3, 0x0, 0x0, 0x4}, {0x80000001, 0x5, 0x2, 0x0, 0x6, 0x8c, 0x3, 0x0, 0x7fff, 0xffffffffffffff81, 0x435e, 0x80000001, 0x8000}, {0x5, 0x1f, 0x3, 0x5, 0xfffffffffffffffb, 0x80000, 0x20, 0x917, 0x1cfa, 0x2, 0x9, 0x1, 0x5}], 0x40}) 2018/04/13 23:38:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x100000000000000, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xfffffffffffffffa, 0x80000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100)={0x10000}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r3, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r4, &(0x7f0000807fe4)={0xa, 0x4e21, 0x1f}, 0x1c) sendto$inet6(r4, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r4, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r4, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) [ 381.097502] FAT-fs (loop0): Directory bread(block 3) failed [ 381.113081] FAT-fs (loop0): Directory bread(block 4) failed [ 381.119370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.135762] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:32 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x2f00]}}, 0x1c) 2018/04/13 23:38:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000180)={0x4, &(0x7f0000000280)=[{}, {}, {}, {}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="480ffc5520aca53297e2ae"], &(0x7f0000000240)=0x1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x11f001, &(0x7f0000000080), 0x4, r3, 0xa}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x0, 0x8000, &(0x7f00000001c0)=[@efer={0x2, 0x6000}], 0x100000000000002a) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0xd000, 0x3, 0xd11, 0x3, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2018/04/13 23:38:32 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x300000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 381.180160] FAT-fs (loop0): Directory bread(block 6) failed [ 381.221664] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x10000, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x40004e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x1c) r3 = dup3(r1, r0, 0x0) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="93bb9d804123", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 2018/04/13 23:38:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x200000000000000, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 381.273320] FAT-fs (loop0): Directory bread(block 8) failed [ 381.281013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.300218] FAT-fs (loop0): Directory bread(block 9) failed 2018/04/13 23:38:32 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x80fe]}}, 0x1c) [ 381.324401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.337306] FAT-fs (loop0): Directory bread(block 10) failed [ 381.364489] FAT-fs (loop0): Directory bread(block 11) failed [ 381.470526] attempt to access beyond end of device [ 381.475637] loop0: rw=2049, want=226, limit=2 [ 381.485235] attempt to access beyond end of device [ 381.490374] loop0: rw=2049, want=227, limit=2 [ 381.495465] attempt to access beyond end of device [ 381.500758] loop0: rw=2049, want=228, limit=2 [ 381.506246] attempt to access beyond end of device [ 381.511405] loop0: rw=2049, want=229, limit=2 [ 381.516229] attempt to access beyond end of device [ 381.521308] loop0: rw=2049, want=246, limit=2 [ 381.526103] attempt to access beyond end of device [ 381.531185] loop0: rw=2049, want=247, limit=2 [ 381.535854] attempt to access beyond end of device [ 381.540871] loop0: rw=2049, want=248, limit=2 [ 381.545512] attempt to access beyond end of device [ 381.550542] loop0: rw=2049, want=249, limit=2 [ 381.588394] attempt to access beyond end of device [ 381.593473] loop0: rw=1, want=325, limit=2 2018/04/13 23:38:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080)={r2, r3/1000+30000}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000003c0)={'raw\x00'}, &(0x7f0000000200)=0x54) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_NMI(r4, 0xae9a) 2018/04/13 23:38:33 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x475ac8148a]}}, 0x1c) 2018/04/13 23:38:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xdcd, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0xfdfdffff00000000, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:33 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xfeffffff) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:33 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xf0ffffff00000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) bind$rds(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) sendmmsg$alg(r1, &(0x7f0000001240)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d3bd9b0b66cd09479eef323587169e99655b6c10aee61cfb9e5ee01fd2b2e724", 0x20}], 0x1, &(0x7f0000000040)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000002cc0)={&(0x7f0000002980)=@hci, 0x80, &(0x7f0000000580), 0x2, &(0x7f0000002bc0)=""/212, 0xffffffffffffff18}, 0x0) 2018/04/13 23:38:33 executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1040000000000004, 0x400000a9}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000400fbdd07bfa93b7fdf74cd6100000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) [ 382.185423] FAT-fs (loop0): Directory bread(block 2) failed [ 382.212310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.221939] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x1000000, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:33 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x4, 0x45, 0x4, 0x524, 0x2a3}, &(0x7f0000000200)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0xc2c85513, 0x6f2000, &(0x7f00000003c0)) 2018/04/13 23:38:33 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfc00000000000000]}}, 0x1c) [ 382.249423] FAT-fs (loop0): Directory bread(block 4) failed [ 382.260285] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.267759] FAT-fs (loop0): Directory bread(block 5) failed [ 382.282190] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:33 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x101, 0x6d0801) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000100), 0x1000, 0x0, &(0x7f0000000140)="2c7b1882a11d12173f66024028ac01c3df40d372054289c56f8c2b66de440c2788fc7412274afb86c5918f11a1f757fa4fb602aeb04f989d90b5389f835873baeb2f604c8b76366d5d1aacddacb8d70e296fde07ae45d6e6aa7b04802b480100cfa4efb8bdf28c9df663004c94aa7389131a85280f73feeb30ae652c09de6c1c91de4ca6e7a6e6c36fcce147003209f29ced6a4088e56fb1b74f682e6fc197d143aea61192fd74ec73db641413a1171581f47e2ed9e6ff87b0a13c0a16b01f56c2c676cb994988f24dd5afc9565ec9d2ca2d8369f836fd0d6db7026be3dfc211f0b5e42ad8d7f28671e981279d13f2a7e5b82070c9533621fdedac728bd938dbb3024e16c36645f3dcda755df375fd1f8cc6e0eae1ba6d7889cc52bd6500cfe0a18c2a6eea4bad43c6eb563b43572e05d5c9cd4c10b9728ec967efecaf13d18abbc6512734ef019e5af614d05419652015cb834aec7aa43502daae66f107c4812b0c4b1523d064d8c90095ea2a9f7764cb8655ad8f58403d585a7623ae459765f4b55b10a39c1f9cece3f2a65c55cf0327a4ef8896c0f3775220816195a072a83145f7b312da9f21efc72949b131504bc6c983d1389fcb00b58d10afeedbd9356b6d9531f63bfb9aab29eaf5aac1338aa72db4bc2cb7300a0dae2b6544c034c2f4ba8deae70105e818b6cea562e90a8c7d89eb4192e72f15f130c93b195abae504ed819a63208f568d82e7912f1d67d847b738c715bf50a7e7a72d2c6806f7038cebaf9a75cfd1242b05193eae3e4df1cfbacb8cffab95aa82ee3665de2598d7dc897656b630a94c25fb08f4501cd1abc07efbc94d25f352ddfa991735593d919b2d4e2568fe92e39c041ad613f3cba3c2ff7e5157ad96d464f566732f36c7ff613f987df88ade06cee86b171a0640e71bf7630c5f3b3ab052248376ffcf10ba3288f07bffcd2d5191fefd2d196cae9c17104da6f8e9c1499df3475591b23120efb68240c3c53dc264b5d9a4596164ed4ff196a4a4f4262b491055f3d316ddc469f3d49b62127ba0d7eef52b984db2d1af5ffb15cf57b3bd3781e53d66faba4d3b249b7d3f06d4a2f05644dcdd31703bd9831b5b8063a83ff8c98dfe424f742a9ebe82d2119eb19e7c9670848b31d8c1300f54a8d073dc3edc2e70fc1d71503da6b4e4a464f13206930316d378d0cc7d90fcf940aaed51a73ad16d93cd89f885ae0f94be309219cf2c53578c8c3378ca587c172fe0d5771bb0eec280d7e2d36c2fed6d699c05f05cbfbb30aacb5d3b9cc92e8ca8366a19a86dbed51b2bec91fcad6c1f98fb61d995a767f4d78f64f02586b6d3ddf5a3032f2b4065ef35ddeedaa8622571775cc28b4a32de71f40917fda6456311990403951cdad988eaf0c659a3ab013941c491130f3bb7b149a2190569587c6a5b568acdc1584f8bcb0bf6e417a7120ef06f78a28461cb966eb7468116bef6d31c0a068a2f010533b7b766dba96eb511967bfd5368e2bf37bf75d91b57527aae8a41a8bf4da8fcb544bff4cc7cbdfa3ca9d55cf5f5aad3d3e627fecec791f5768c930624375d3f2f2e32b5d16a11965d613943df2922639cb135613f3ce7d7aa7e813a00775980c093843605b508168dfeb1faa220c92c70be24d3a326fb796c1531af734bf6200ecf633417263f8542d9dfb73ea376b32638fd98517aa8366cbeeeb3b78f407e2a30cdf68b52d4db3bdc87879f34461678e20081b0d927b47d1e0d312680b1a60da7bb08783c3ec25b9c780ad17e88f2f38e2ad8e25107b761747b74e43892b2b681595d4c8d5ad37b3788a81cccbe8668f77aa70df4644e0bf8b1b81696cbb65d48a0d8363799ffb99959cc6a3f09a65f951ca5b6cd3f135906bda74764bed5924d9d3a430f2ceeddc105e27fae42d39403f791a42c77d3ca935c929477dae83acda17439f3620f347d6035f77b7c391c609f6e8f55856d17c109783ba9b720a6ec265f00fdbeb9e848301fb697e7dd0bf26b45671409b0e700daf0d6d091c649e20f627a570b9fdd5e4738437761ca98df9ce1c51320802f302b87f210100a80af308246600f6766ffd7bee00be7cd0b5ea9974f086a03bb1153a2378ef6c6ee5ab66db19d469050830f6af0e2b05b716ae358d1a7c9e7f8c6b520789053a31ee01f26854e709fb2c24e101b4b2d69411a727ee4026038c81f3ab8d45c31adbc46e6554f701ad6c567ba3d0248743caa66609d7e7b9bab98be9cefe945189290505b764861ce79541d98d1b7831b701e3566a3a49b8b9649344bd3a3d8fecd9f9ff9dba84c3e86c3390cff16f5427057f113228bf8e9362c3f83ea65f881aff1d4c77a17fd0a970493bf5de11d68eee01cc541b753776c432af0ef6c5e939d22cae638c1250f455abc5dd0e581a364ac71e0de290b4d822b71656c6fa0b690f8cb956e4bd6aa7de168730ab11474adbbb5116fbf2d38b9e6e739d8353a8ba7608f94ae4d571ef7016c0bf5c300bb6785122e5a94ac17b3a5823282b5e703be2ad49ffa7f112c0bc0d87ef4c4ee4379dc1b7871a12e85dd5ea175069f5bc9589a0f11fed1b8de9c1450a6daed1b73aa90bdc7972e772498f5d299e1bdb3ee82e4666fd8dabd3ef74710c86e6d71370c20bb283ec74f192fedcf927c094935d2f27793b331fe6f07ced2dc689f625f66c51a4707d00c9a497e75f22295e1ab9fb9f8ca495924f7a3cf850cee2a6e9fe0440d797d485710649ec23a06c19ff2fb3c7d560950e341542e490c709eaf3228a0195b8b6439f8d9d9b74ff147bf6add324de51ad18c1b82ff8ca75ce7ebdad3f1973924c3d144c13eebe1afb468341a99e215116d7ee720011607f06f1d17969acbd4fcc2570805f8dc5de2c554c6054a9475a8b1a04bf511edba76f916b19c9dc7b6640e9f915b3ceb607004d5f8c4280c9ebfd2b095ecdc365f55118729d5b643a760063bbc99ad67f2dd69e4e16105462b78357407751b043c89c36e0f60edc7bf4180a3a537bdfc3141fec11555ec40e2ad8d38efccf13bdfadc837b376ec64f677b592363827098bb1c4d1101cadab6f9777eae25fb138b3f56a0a1e5606199648c5f4cf90616c75f53343012f30a083c1df16d064823693f189dd101131a321fba4dc798b897a1cb0499c7cd2c899f504d7a3bfbc13e5b666e68a30c1cf466f7012bbc347c183760c55689bcba7b8125122ce694854fd48c3cc1c5614365f23cc64e4ea2a4af206744f03ba3a6180049621d19d62c255ad426469b973762b739fb4fe22776676592a17b0a7aa673335013bb91d73c4aff611847882b47a3a7c5dec0a6a7cd3160e958f9c2f8a644bf2f4b82433be06b95cb5de244c677433a0bf254c27adf74e87f271c62c3a358dc23e53acaf66103cf1f52f423af17165b283db12154e6d67427f09928f4e86fe62c830932e4b88cee478cc387ba0d974429d0e9c82d8324a1970a8598c02bd76f2710603ec16a02adae3666b5021eb58de4b11f845be3414b29d3bbeaf0288c45652f914e4485e66e2bc12a80342ec0fa0c61071ec3d3205074b489229e9ba998fc995095e92cdcd71a17bf448dfd920365aa83232070b8f040a63bf1893928d6874afa53919735763a423812c5a54bd0c68cf1aab76191247f402ce46ecc15b45442bcf8022030dd34116f1849942a057f9d3807a5c5fa65eaa79b9931c968f4be9dbd42a6b92db067eb3a732c9563947b54cc02a2c9a639c220aa52996fce9dc525f7041399ab2c481092363ca01ebf2d1dee508eb5270acf5ca280663fd0f24853471fef284cdbd5306326745912d5e6804ec2ddcb27aac4d5dae9981e704ed781215129edc6fd4dddeb8b97aca7cb87314ac3ba913d26bd9a47cc13c62cd056b8301c537fa14c17bd4ee359c667f3b0ce4304d0c52e917a78e22c4b0ed5ca618b0f3d19e75e5fa715567e8300350e255be6599bffe42c3a5e47c24787f5de215717997b43d9e818de873d04936b3880d512931c2939007ac40a054f4f44ac1e30b8ed6be5bd0782d7e3390163231cc57ffee1642a57a1a28a9b1bd2b5155f179c73cc8cf5aa8692bc7d0cdc97cba5cb0cdc6fe755e994f55826de2944a5acf6887e923ed8247a6008bc419a0c16f88915182e8a8aff4dddc31b1cdcafd37ec2d8afb58cd9b4881316e4ddc819d796d118f9eedd20892634def36bdcb908422178d37aa33950f308a72a9150db488c412c439c309ec646145a30bf2ee078cbb0b20c4124be604c89a1bdf6d32a21551e17e994f329e3c93ca0d633cbb9ac9476ba0137cd5da3662e4df09c39d2530fab4b533cb03e98f56a3cbe269a6a7f6c1e959aa7c3aead9252a11349e0fd15da8f30eb637ccc8f03cbc4b9776590d8c05822235728f28754c1a5443e240039410d255f8cc09c3631bc1bfa81d4bafc2fa62615e81e310171b951df291964c88af9aacfa44d35e5eb2ccebe0635f56e52e0b5607e072ccc13d73d7aec8365156c39f8232603d00c93ca9cfd2b0dafc07b3b460d2a4ebb58336f4cdb54a0f6a5530c0ad0457b873faf3fbea016a7310e96349e5ba0a80ad0f1116f422ff1305d8396ed7b864459731323a309c3f11f791db248306735ebcb1e56a6807d6f3d9f95d99f028b064bb93fa92c322426a42c69a85527c8bd3005b8f9afd74a9cee9f9314b58cdef2f508683bf92788aaaa212a80ccac7d1a872bd6c345b845c34235f69d6959454900d55b2caa6d27101ddd7c92cf5d3ed32e08a6b10ab8133ddd94999eab26f42c479401cda3c19f4d09daaadc0c5269742eebed57128a8d9209b9217b9c7fb1d8026d3bcff12416b10f42e9e211443af8272e0eb9a40bc299a13def37f3587ca7302d36d7e132ba2bc81123acf2e59f1bb0d79f6bbdc5fe8e20bc95fb3a377154965d0abdfa58be19c655ccef8fd76d4b160dd25bbcbb8cae72d6d993010e3306819fd659383d7b6496dd441c058fba5e68d3e32bdfe493c018080222ca66bae2252998d161c36d1d42ac627e79449f54cad3cc468e0a0a3e0e4b0d72a23404f946663a87fd0ba403a520c10bf830201843f8111f668a7863f3366256d468dd1bd0cd30310404e7364c0de6a899ba8df3a95d5f0cea9130413162eb847c544068c6e73557974e83ccea620b539fd2f451cfadb24fbe400b61901975f62f4912a80d14462a053924e80175d7b71644336075a4cfece33b1503c6e9d22add74b0f7872ae9c3732b6153727186015b5a717f3e84fedc2c2f66ca65191e490c7fa62b41e293ab664f9aa98a5062bc011255b25618066c8d237222d2415f77af3414a331013a9119b2f1821cc5c78ef38f056fc2a57703d424c0e079f3074c3f3b839a5b0c9e70190af243809343483fe4b5764a5888d5acc66463c295b86d5ecec016946a138af6a4b13b4ca47fabde52dc0fca478799da2cfce45138c7be877e74799b671bb4192a8b97dd10e8ba974b9eb8d6ef13e6c1717424d5e1e785bb24c0d9bce8f68b3f1ec7e47dab1b30ac4511807e7fe0e53ed1eb626c8d76c0d07ec5e96a37e9bb6746faa592caaa3292ac53a9c3e3d79bd25b0c671e081331105b8d3435d0c17a4a0a5b22e1337c91781c57ef003debf47b86693ee81c0031384f76c903305292adbb6c60951fe52aab65f3d5173f39a625f3d1a462abcc0f3bc2fa582f91e8078093d47165cc2360bbea2c3bc13fbaeeacdc5ca2b00bfdbae77036458d098d58468e5098f1ad9ffa21de474461fa785c4617891300168e7d8fa1495bc35516833e5ae03ab98f853844c"}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x100) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, &(0x7f0000d58ffc), 0x0) 2018/04/13 23:38:33 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x500000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:33 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8983, &(0x7f0000000100)="e4f54e16544b8a13e0bb036ffaecd7fca60f3c6c01fdf0ec045ec3b91f4a9a37053d81343cac4c97e64797d6b56707f7d80c5fa05c0b7ed025dd") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='veth1_to_bridge\x00') ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f0000000080)=0xeb2c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) [ 382.323127] FAT-fs (loop0): Directory bread(block 7) failed [ 382.430873] FAT-fs (loop0): Directory bread(block 8) failed [ 382.451803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.475437] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.488574] FAT-fs (loop0): Directory bread(block 9) failed [ 382.521618] FAT-fs (loop0): Directory bread(block 10) failed [ 382.546447] FAT-fs (loop0): Directory bread(block 11) failed [ 382.576755] attempt to access beyond end of device [ 382.581837] loop0: rw=2049, want=246, limit=2 [ 382.586895] attempt to access beyond end of device [ 382.591928] loop0: rw=2049, want=247, limit=2 [ 382.596566] attempt to access beyond end of device [ 382.601578] loop0: rw=2049, want=248, limit=2 [ 382.606221] attempt to access beyond end of device [ 382.611253] loop0: rw=2049, want=249, limit=2 [ 382.615879] attempt to access beyond end of device [ 382.620874] loop0: rw=2049, want=262, limit=2 [ 382.625491] attempt to access beyond end of device [ 382.630500] loop0: rw=2049, want=263, limit=2 [ 382.635207] attempt to access beyond end of device [ 382.640183] loop0: rw=2049, want=264, limit=2 [ 382.644784] attempt to access beyond end of device [ 382.649796] loop0: rw=2049, want=265, limit=2 [ 382.683320] attempt to access beyond end of device [ 382.688401] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:34 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) semget(0x1, 0x7, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2001}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 2018/04/13 23:38:34 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @rand_addr}, 0x10) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/13 23:38:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x100000000000000, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:34 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x20000000]}}, 0x1c) 2018/04/13 23:38:34 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x9effffff00000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:34 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000873ff4)='./file0/bus\x00', 0x0) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10, 0x80000) mq_getsetattr(r0, &(0x7f0000000080), 0x0) 2018/04/13 23:38:34 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xfffff000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) [ 383.104442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.131861] FAT-fs (loop0): Directory bread(block 2) failed [ 383.146453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.148722] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:34 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x1800]}}, 0x1c) 2018/04/13 23:38:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x200000000000000, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:34 executing program 5: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000040b000/0x3000)=nil, 0x3000, 0x100000000, 0x4403c, r0, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000001ff8), 0x1, 0x2) 2018/04/13 23:38:34 executing program 1: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000001, 0x40010, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000000)=[{r0, 0x10}, {r0, 0x200}, {r0, 0x400}], 0x3, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x1}, 0x8) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200002, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x1f) sendmmsg$alg(r0, &(0x7f0000000fc0)=[{0x0, 0x0, &(0x7f0000000000), 0x264}, {0x0, 0x0, &(0x7f0000000240), 0x3db}], 0x4924924924927c8, 0x0) [ 383.179763] FAT-fs (loop0): Directory bread(block 4) failed [ 383.186436] FAT-fs (loop0): Directory bread(block 5) failed [ 383.204747] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:34 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x60000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 383.248217] FAT-fs (loop0): Directory bread(block 7) failed [ 383.276307] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r4, 0x710, 0x70bd26, 0x25dfdbfe, {0x3}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x4d, &(0x7f0000000000), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 383.303098] FAT-fs (loop0): Directory bread(block 9) failed [ 383.315258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.341803] FAT-fs (loop0): Directory bread(block 10) failed 2018/04/13 23:38:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0xfdfdffff00000000, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:34 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfc00]}}, 0x1c) 2018/04/13 23:38:34 executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x51f6) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) [ 383.360369] FAT-fs (loop0): Directory bread(block 11) failed [ 383.375113] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:34 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb855) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = accept(r0, &(0x7f0000000380)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, &(0x7f00000001c0)=0x80) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x14}, 0x1}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), 0x4) accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x80, 0x0) write(r1, &(0x7f0000f8aff1), 0xff8f) [ 383.468670] attempt to access beyond end of device [ 383.473869] loop0: rw=2049, want=246, limit=2 [ 383.478488] buffer_io_error: 31 callbacks suppressed [ 383.478501] Buffer I/O error on dev loop0, logical block 245, lost async page write 2018/04/13 23:38:34 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfc]}}, 0x1c) [ 383.512924] attempt to access beyond end of device [ 383.518102] loop0: rw=2049, want=247, limit=2 [ 383.522688] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 383.532135] attempt to access beyond end of device [ 383.537359] loop0: rw=2049, want=248, limit=2 [ 383.541943] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 383.550764] attempt to access beyond end of device [ 383.555870] loop0: rw=2049, want=249, limit=2 2018/04/13 23:38:34 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xffffff7f}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x1000000, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 383.560441] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 383.587188] attempt to access beyond end of device [ 383.592289] loop0: rw=2049, want=262, limit=2 [ 383.596852] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 383.622925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.632972] attempt to access beyond end of device [ 383.638160] loop0: rw=2049, want=263, limit=2 [ 383.642810] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 383.655004] attempt to access beyond end of device [ 383.660304] loop0: rw=2049, want=264, limit=2 [ 383.664889] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 383.673584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.680822] attempt to access beyond end of device [ 383.685990] loop0: rw=2049, want=265, limit=2 [ 383.690627] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 383.776482] attempt to access beyond end of device [ 383.781584] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:35 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$ax25(0x3, 0x7, 0xcf, &(0x7f00000000c0)) fremovexattr(r0, &(0x7f00000002c0)=@random={'trusted.', '/dev/rtc\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'bcsf0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) syz_open_dev$urandom(&(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x7ff6c5996b6b2a10) 2018/04/13 23:38:35 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xd607}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:35 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xf0ffffffffffff]}}, 0x1c) 2018/04/13 23:38:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x2000000, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:35 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xf0ffffffffffff) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x1466030000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:35 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) shmctl$SHM_LOCK(r0, 0xb) 2018/04/13 23:38:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x40000, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000140)={0x14, 0x22, 0x105, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) [ 384.533463] device bridge_slave_1 left promiscuous mode [ 384.539152] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.549646] device bridge_slave_0 left promiscuous mode [ 384.555189] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.570085] dccp_close: ABORT with 65423 bytes unread 2018/04/13 23:38:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") write$binfmt_misc(r0, &(0x7f0000000180)={'syz1', "cbe0a7b0633561092cb6aa5a3f1c78ebdf2f23249ff9b96220097c1e46fe0929830095d79008dc0c03141aab4dcccab85781a31759921aff894af10dfad281ebcd0b322786d919dcbc1e583b83f2f73f5ac94d59e8fcc2551d39ac4fa0e77439ba594a99f745cd258102f6cffcdae8a7d690d038881c195f498b046ed0653e8c222f7307ccf51f0c203a15a6ed5db91be3e4faefff303fcbfe44b00fb819db557dab8b07134bd11d05594b93d09d11a9e1144c1f290aba18d2670537c9a604e723ea8f33a6ddd46466825ea0b8d0b18f137a9e9c9fd162a4d5f0b0e23f179b0285df394e34962c3f072655e6"}, 0xf0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x1000000, {0x2, 0x4e22, @rand_addr=0x5}, {0x2, 0x4e21}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc, 0xffff, 0x1, 0x4, 0x1, 0x0, 0x3820, 0x2, 0x4}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x800000000002, 0x20011, r0, 0x0) execveat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), &(0x7f00000003c0), 0x1000) [ 384.633198] FAT-fs (loop0): Directory bread(block 2) failed [ 384.659349] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0xfdfdffff, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:35 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xff00000000000000]}}, 0x1c) [ 384.700717] FAT-fs (loop0): Directory bread(block 4) failed [ 384.728969] team0 (unregistering): Port device team_slave_1 removed [ 384.738951] FAT-fs (loop0): Directory bread(block 5) failed [ 384.762014] FAT-fs (loop0): Directory bread(block 6) failed [ 384.790469] team0 (unregistering): Port device team_slave_0 removed [ 384.812351] FAT-fs (loop0): Directory bread(block 7) failed [ 384.840510] FAT-fs (loop0): Directory bread(block 8) failed [ 384.875942] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 384.888336] FAT-fs (loop0): Directory bread(block 9) failed [ 384.898611] FAT-fs (loop0): Directory bread(block 10) failed [ 384.904825] FAT-fs (loop0): Directory bread(block 11) failed [ 384.931985] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 384.992328] attempt to access beyond end of device [ 384.997570] loop0: rw=2049, want=246, limit=2 [ 385.002493] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 385.012133] attempt to access beyond end of device [ 385.017238] loop0: rw=2049, want=247, limit=2 [ 385.021817] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 385.046432] attempt to access beyond end of device [ 385.049970] bond0 (unregistering): Released all slaves [ 385.051528] loop0: rw=2049, want=248, limit=2 [ 385.063757] attempt to access beyond end of device [ 385.068844] loop0: rw=2049, want=249, limit=2 [ 385.074069] attempt to access beyond end of device [ 385.079177] loop0: rw=2049, want=262, limit=2 [ 385.095535] attempt to access beyond end of device [ 385.100634] loop0: rw=2049, want=263, limit=2 [ 385.106179] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.118633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.126435] attempt to access beyond end of device [ 385.131539] loop0: rw=2049, want=264, limit=2 [ 385.149460] attempt to access beyond end of device [ 385.154629] loop0: rw=2049, want=265, limit=2 [ 385.232006] attempt to access beyond end of device [ 385.237091] loop0: rw=1, want=329, limit=2 [ 386.401200] IPVS: ftp: loaded support on port[0] = 21 [ 386.770760] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.777186] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.784420] device bridge_slave_0 entered promiscuous mode [ 386.810302] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.816724] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.823876] device bridge_slave_1 entered promiscuous mode [ 386.849370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 386.876539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 386.947421] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 386.976417] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 387.087868] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 387.095076] team0: Port device team_slave_0 added [ 387.119506] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 387.126664] team0: Port device team_slave_1 added [ 387.150950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.178580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.206124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.233791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.469869] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.476286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.482944] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.489319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.342940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.428165] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 388.518413] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 388.524680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.532428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.611874] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/13 23:38:40 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0505350, &(0x7f00000003c0)={0x0, @time}) 2018/04/13 23:38:40 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x2f00000000000000]}}, 0x1c) 2018/04/13 23:38:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x2, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:40 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x40, @mcast1={0xff, 0x1, [], 0x1}, 0x7}}, 0x4, 0x8000, 0x6, 0x5d143b55, 0x40}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e22, 0x5, @empty, 0x8}}, 0x8, 0x2, 0x7, 0x101, 0x3}, &(0x7f00000002c0)=0x98) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174) 2018/04/13 23:38:40 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@broadcast, @dev}, &(0x7f0000000180)=0x8) r2 = semget$private(0x0, 0x4, 0x1) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f00000001c0)=""/172) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x100, 0x0, 0x0, 0x0, 0xffffffaa, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) 2018/04/13 23:38:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xc70d000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:40 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:40 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xf6ffffff) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 389.154750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.170250] FAT-fs (loop0): Directory bread(block 2) failed [ 389.182157] FAT-fs (loop0): Directory bread(block 3) failed [ 389.182336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.198302] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:40 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x8400, 0x0) fcntl$setsig(r0, 0xa, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000000)) [ 389.210746] FAT-fs (loop0): Directory bread(block 5) failed [ 389.229884] FAT-fs (loop0): Directory bread(block 6) failed [ 389.239502] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0xfffffdfd, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:40 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfc000000]}}, 0x1c) [ 389.258940] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:40 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x80000100, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000600)={0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]}) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[0x1, 0xfe1, 0x8c4, 0x7fff, 0x3, 0xf3e, 0x5eb6]}) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) pipe(&(0x7f00005dcff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000552ff0)=[{&(0x7f00006c1000)=""/4096, 0x1126}], 0x1) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)) write(r4, &(0x7f0000335000), 0x10001) [ 389.291984] FAT-fs (loop0): Directory bread(block 9) failed 2018/04/13 23:38:40 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x8100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:40 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200030400, 0x0) ioctl$KDGETMODE(r0, 0x4004510d, &(0x7f0000007ff8)) 2018/04/13 23:38:40 executing program 4: mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x22011, 0xffffffffffffffff, 0x0) r1 = eventfd(0x2) signalfd4(r1, &(0x7f0000001080), 0x8, 0x800) r2 = open(&(0x7f00000010c0)='./bus\x00', 0x141042, 0x10) ftruncate(r2, 0x8) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000001180)={@empty, @multicast2=0xe0000002}, 0x8) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000001140)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r3, r2, &(0x7f0000b4bff8), 0x100000002) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000011c0)) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000001240)) preadv(r5, &(0x7f0000780f90)=[{&(0x7f0000a32f72)=""/142, 0x174}, {&(0x7f0000415f0f)=""/241, 0xf1}], 0x2, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000001100)={0x0, 0x5ece, 0x2}) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffff001}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={r6, r7, 0xe8000}) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x802, 0x0) open_by_handle_at(r8, &(0x7f0000000080)={0x42, 0x3f, "ea72ab4553e61bfc117b4401eda160b6e5070f767dd5ebfc7144d98b0b767d1e4c0f93b99ebb1f9eb3d7b733dd0a36940ce59c8c59dc888eed7d"}, 0x880) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)={0x30e}, 0x0) [ 389.332365] FAT-fs (loop0): Directory bread(block 10) failed [ 389.368956] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:38:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867", 0x200000000000000}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:40 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xf0]}}, 0x1c) [ 389.442668] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.483141] attempt to access beyond end of device [ 389.488286] loop0: rw=2049, want=246, limit=2 [ 389.492863] buffer_io_error: 6 callbacks suppressed [ 389.492877] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 389.499204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.601776] attempt to access beyond end of device [ 389.606896] loop0: rw=2049, want=247, limit=2 [ 389.611462] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 389.619575] attempt to access beyond end of device [ 389.624624] loop0: rw=2049, want=248, limit=2 [ 389.629265] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 389.648471] attempt to access beyond end of device [ 389.653560] loop0: rw=2049, want=249, limit=2 [ 389.658182] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 389.666891] attempt to access beyond end of device [ 389.671948] loop0: rw=2049, want=262, limit=2 [ 389.676600] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 389.684771] attempt to access beyond end of device [ 389.689806] loop0: rw=2049, want=263, limit=2 [ 389.694377] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 389.702276] attempt to access beyond end of device [ 389.707288] loop0: rw=2049, want=264, limit=2 [ 389.711828] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 389.719726] attempt to access beyond end of device [ 389.724723] loop0: rw=2049, want=265, limit=2 [ 389.729324] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 389.770374] attempt to access beyond end of device [ 389.775408] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 23:38:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x800000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x88000) recvfrom$unix(r2, &(0x7f00000001c0)=""/226, 0xe2, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)) 2018/04/13 23:38:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867", 0xfdfdffff00000000}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x2000000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:41 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x2000]}}, 0x1c) 2018/04/13 23:38:41 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x400000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:41 executing program 1: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setownex(r0, 0xf, &(0x7f0000000080)) open(&(0x7f00003f5000)='./file0\x00', 0x0, 0x0) fsync(r0) fcntl$getflags(r0, 0x401) 2018/04/13 23:38:41 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0xd426000000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 390.217307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.236312] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:41 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfe80000000000000]}}, 0x1c) 2018/04/13 23:38:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867", 0xfdfdffff}, 0x0, [], {0x0, 0x1c9c380}}) [ 390.274842] FAT-fs (loop0): Directory bread(block 3) failed [ 390.283105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.301977] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:41 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x4000000004005) fallocate(r0, 0x8, 0xfffffffffffffff4, 0x7fffffff) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, [0x8, 0xffffffffffff3ddd, 0x6c78, 0x3, 0x7, 0x140, 0x7, 0x0, 0x5, 0x7, 0x95c, 0x4, 0x71df, 0x101, 0x4]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x8c4, 0x6, 0x8206, 0x3, 0x100000000, 0x8, 0x8, 0x7, r2}, 0x20) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000280)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @local}]}) 2018/04/13 23:38:41 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xfcffffff00000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 390.326509] FAT-fs (loop0): Directory bread(block 5) failed [ 390.351701] FAT-fs (loop0): Directory bread(block 6) failed [ 390.366315] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:41 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c75ff7)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x1) [ 390.386676] FAT-fs (loop0): Directory bread(block 8) failed [ 390.419979] FAT-fs (loop0): Directory bread(block 9) failed 2018/04/13 23:38:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x13) 2018/04/13 23:38:41 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfec0000000000000]}}, 0x1c) [ 390.435279] FAT-fs (loop0): Directory bread(block 10) failed [ 390.442566] FAT-fs (loop0): Directory bread(block 11) failed [ 390.462365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867", 0x1000000}, 0x0, [], {0x0, 0x1c9c380}}) [ 390.509737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.537767] attempt to access beyond end of device [ 390.542984] loop0: rw=2049, want=246, limit=2 [ 390.547608] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 390.618778] attempt to access beyond end of device [ 390.624110] loop0: rw=2049, want=247, limit=2 [ 390.628675] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 390.640692] attempt to access beyond end of device [ 390.645860] loop0: rw=2049, want=248, limit=2 [ 390.663569] attempt to access beyond end of device [ 390.668736] loop0: rw=2049, want=249, limit=2 [ 390.674915] attempt to access beyond end of device [ 390.680061] loop0: rw=2049, want=262, limit=2 [ 390.688845] attempt to access beyond end of device [ 390.694242] loop0: rw=2049, want=263, limit=2 [ 390.700423] attempt to access beyond end of device [ 390.705582] loop0: rw=2049, want=264, limit=2 [ 390.710211] attempt to access beyond end of device [ 390.715228] loop0: rw=2049, want=265, limit=2 [ 390.753408] attempt to access beyond end of device [ 390.758523] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:42 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x801, 0x2) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x1c2) read(r0, &(0x7f0000000c00)=""/194, 0xffffff58) 2018/04/13 23:38:42 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xd607000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:42 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfe800000]}}, 0x1c) 2018/04/13 23:38:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867", 0x2000000}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1, 0xb}, 0x2c) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0xae, 0x3, 0x101, 0x4}) getsockname$packet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xa, &(0x7f0000000200)=@raw=[@exit={0x95}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x2f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0xab, 0xf, 0x6, 0x7, 0x2, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000080)='syzkaller\x00', 0x1ff, 0xfb, &(0x7f0000000280)=""/251, 0x0, 0x0, [], r1}, 0x48) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x3, 0x7, 0x2, 0x9, 0xffffffffffffffe1, 0x800, 0x80000001, 0x0, 0x7, 0x101}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@loopback={0x0, 0x1}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x200, 0x3, 0x4e22, 0x0, 0xa, 0x80, 0xa0, 0x32, r1, r2}, {0x6, 0x5, 0x0, 0x24, 0xa44d, 0x0, 0x0, 0x7ff}, {0x400, 0x1, 0x7fffffff, 0x2}, 0x1, 0x6e6bbb, 0x1, 0x1, 0x3, 0x3}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4d3}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x3, 0x6cda, 0x7ff, 0x5}}, 0xe8) 2018/04/13 23:38:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x500, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:42 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x101001) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2000000000000052, &(0x7f0000000140)=[{}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/13 23:38:42 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = eventfd(0x40) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x4, 0x610080) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x190, 0x0) mq_timedsend(r3, &(0x7f0000000080)="85be5897dd3255d5724d4d55a49a64b402672a06899f8a65ebccee931c738d815df786721de1c8302d4d14f84372bee31243c277697b17f4d974b038ec3257720d574011c7d22fba9699bc08937cda9c5ab9beb19799", 0x56, 0xfffffffeffffffff, &(0x7f00000001c0)) r4 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x400000, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) [ 391.229695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.251383] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:42 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x18]}}, 0x1c) [ 391.278646] FAT-fs (loop0): Directory bread(block 3) failed [ 391.287808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.303738] FAT-fs (loop0): Directory bread(block 4) failed [ 391.323073] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867", 0x2}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:42 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)="1500000000009c9c000000000000000002", 0x11) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0xc6, "1de0ec4e82e3122e89055753a89cb00ab3e429c35e0a1f6090edad35d6a9ab19289f65472aad01d55047e51f94aa91d56d354c3153d9b3532c5168cda79d422637cafc17caee753405506969bbce0d432e6ace10221cc207a1fb0dcffa029c7f27281b6b64bd2335170a4dc243a3c7f87e287c6003963cfcab7b18a845c86fd9e9aa1e5d40ccced3e428e9bd3fedc2da4c3294b18e8affd20da4629289d116121b98090a2671d4fb4fbe29b44b729dc02b2cc37632dcce5b09945d7fb1f8f0c2e26edaa08cc7"}, &(0x7f0000000080)=0xea) 2018/04/13 23:38:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f000068b000)='io\x00') bind$alg(r0, &(0x7f0000d59fa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000140)=0x45, 0x1) [ 391.338962] FAT-fs (loop0): Directory bread(block 6) failed [ 391.369106] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:42 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r0, 0x0) fallocate(r0, 0x0, 0xffff, 0x4) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 391.402511] FAT-fs (loop0): Directory bread(block 8) failed [ 391.440314] FAT-fs (loop0): Directory bread(block 9) failed 2018/04/13 23:38:42 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xf00000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:42 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x1000000]}}, 0x1c) 2018/04/13 23:38:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867", 0xfffffdfd}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x101000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x8}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}], 0x3c) write$rdma_cm(r0, &(0x7f0000001280)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001240)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f00000012c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r2}}, 0xd9) write$rdma_cm(0xffffffffffffffff, &(0x7f00000004c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)}}, 0x20) 2018/04/13 23:38:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x20080, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x40) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x100, 0x0) renameat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000faaffc)=0x100000001) [ 391.463316] FAT-fs (loop0): Directory bread(block 10) failed [ 391.490529] FAT-fs (loop0): Directory bread(block 11) failed [ 391.564506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.605157] attempt to access beyond end of device [ 391.610421] loop0: rw=2049, want=246, limit=2 [ 391.626999] attempt to access beyond end of device [ 391.632342] loop0: rw=2049, want=247, limit=2 [ 391.641753] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867", 0x100000000000000}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd63}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x80003, 0xfffffffffffffffd) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f0000000000)=""/84, 0x54, 0x0, &(0x7f0000000080)={0x77359400}) r3 = gettid() sched_setparam(r3, &(0x7f0000000180)=0x7fff) sendmsg$key(r1, &(0x7f0000fc0fc8)={0x0, 0x0, &(0x7f00002e4000)={&(0x7f00000002c0)=ANY=[]}, 0x1}, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000140)) prctl$setendian(0x14, 0x2) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8, 0x2000000000020a00) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000100)) 2018/04/13 23:38:42 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x1c030000]}}, 0x1c) [ 391.662178] attempt to access beyond end of device [ 391.667352] loop0: rw=2049, want=248, limit=2 [ 391.699768] attempt to access beyond end of device [ 391.704980] loop0: rw=2049, want=249, limit=2 [ 391.725749] attempt to access beyond end of device [ 391.730915] loop0: rw=2049, want=262, limit=2 [ 391.754768] attempt to access beyond end of device [ 391.759923] loop0: rw=2049, want=263, limit=2 [ 391.820269] attempt to access beyond end of device [ 391.825416] loop0: rw=2049, want=264, limit=2 [ 391.842746] attempt to access beyond end of device [ 391.847924] loop0: rw=2049, want=265, limit=2 [ 391.915348] attempt to access beyond end of device [ 391.920421] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000881ffc)=0x3, 0x4) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/04/13 23:38:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x100000000000000, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0xfffffffffffffffe, 0xffffffffffffffff) sendmsg(r0, &(0x7f0000007fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600001000000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xfc1, 0x41) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x17, 0xe0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x82, 0x0) 2018/04/13 23:38:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xc3ffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:43 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0xfff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={r1, 0xc5, "9956c485997c2c9f7378003c1896f34c415ed90327055d4fee0a0419f253a87971df360ff22e7cc449d2bcd905102e1e45034d367196db6ac4ef352eb9d427a82a8e557563135104ceae9b1e3bbdb20f481d6c6b6d78ca25269d9a454e46c46dfa2f6022e2bed79827a4589221d8bfc628f842aebd66d47f79f023977937e5036eef0bcc76748643cb2be829dcc29c1c54daf0d9ae66784e90e6e633a0bf9eb6228251f0c321c4f3d58fb76f220500685d855703ce0add1142a34543aef51d37ac8d8f2a40"}, &(0x7f0000000180)=0xcd) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x3ff, 0x28000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="f1000000", @ANYRES16=r3, @ANYBLOB="000b28bd7000ffdbdf2510000000540001000c000700280000002000000008000b007369700008000500040000000800020006000000080002003b00000014000300fe8000000000000000000000000000bb080005000300000008000100020000000800050009000000080006003b6c0000080006000001000060000100080002003b0000000c000700040000001000000008000500020000000c000700000000002000000008000b00736970000800080005000000080006006f766600080009007e00000014000300fe8000000000000000000000000000bb"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x4010) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0xffffffffffffff57) 2018/04/13 23:38:43 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xf0ffff]}}, 0x1c) 2018/04/13 23:38:43 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./control/file1\x00', 0x400000, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000003c0)={0x7, 0x0, 0x10000, 0x9}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000400)={0x5, r3}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0xfffffffffffff001, 0x2, 0x7, 0x7, 0x7}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000300)={r5, 0x9, 0x2499b247b1fed217, 0x8000, 0x2}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000040)={0x89d, 0xf, 0x8e, 0xc2, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x8}, 0x8) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xc20d, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) [ 392.168917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 392.199293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:43 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfe80]}}, 0x1c) [ 392.217744] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:43 executing program 5: r0 = socket(0x110, 0x0, 0xfffd) write(r0, &(0x7f0000b12000)="1f0000001e00056d00020000000051030700000000000000000c04101d0200", 0x1f) 2018/04/13 23:38:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005c2000)="0a0775b055e383e5b3b60ced5c54dbb729", 0x11) 2018/04/13 23:38:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x200000000000000, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1f, 0x101000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x3, 0x500, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000640], 0x0, &(0x7f0000000080), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x0, 0x0, 'tunl0\x00', 'bridge0\x00', 'syzkaller1\x00', 'bcsh0\x00', @link_local={0x1, 0x80, 0xc2}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xd8, 0x128}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffc}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}, {{{0x3, 0x0, 0x0, 'syzkaller1\x00', 'bpq0\x00', 'bridge0\x00', 'gretap0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @empty, [], 0x198, 0x198, 0x1c8, [@comment={'comment\x00', 0x100}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'ip6gre0\x00', 'vlan0\x00', 'bond0\x00', 'vlan0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xd0, 0x150, 0x180, [@pkttype={'pkttype\x00', 0x8}, @m802_3={'802_3\x00', 0x8}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@log={'log\x00', 0x28, {{0x0, "7d6553e6fa3ddb50bc2fbe68a4045e203568ccb23559892663bd4ed7fa54"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x578) [ 392.247487] FAT-fs (loop0): Directory bread(block 3) failed [ 392.254607] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x3000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 392.322636] FAT-fs (loop0): Directory bread(block 5) failed [ 392.332795] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:43 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x1}, 0x1) 2018/04/13 23:38:43 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x31c]}}, 0x1c) 2018/04/13 23:38:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0xfdfdffff00000000, [], {0x0, 0x1c9c380}}) [ 392.387581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 392.412308] FAT-fs (loop0): Directory bread(block 7) failed [ 392.426827] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:43 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) getgid() openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0xfffffffffffffffe, 0x4) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000080)={0x10001, 0xfff, &(0x7f0000000140)="139f64843c8d245d6207641747134c279851e890744bbe68683cfd297e0a8a5dcfd23287d7ebf8086031253f46ae0c718c4b76c71468d75bfe99049163eb621a9ca4fb1bc6f2e430526732842ea678bde08101222aff53dae57402f5dc3b1d325d2fffb92540372017418993abdc093090f957a996c5e8d274f09fc1c4cbb1f5fbb738bc42b9423a878544ede6", &(0x7f0000000340)="ccb2f6ba03c5286cd60ccf8021117f318a65804e21b47b93726a66c5e3a15beacdfe1ee937fb7ba86378f9c156e5483a580b1322b8ba440bc6a44cc8fdbf58c984984730742402cd6ea4c87ae36073679eb63787ecdb2f012a1a6a745cd46cdae67a4c6d860232a5295dfe926c0406ad2525fe65caf8cd041c62ea47296ff65d92d0c29482bbe91bb488a2e044c33f1092c65f3d4ce8472d2bbf26997d257fd614a6316d49e6bddf85cf6666dc8f18434c72c435d057372c638e9921dd09e2f66caf42dd2bd08d23ee98336f3d7313121457e94c6e5fb1868462c64c422004913073e51f4173906382499d4da01f84d06b8852875b5cc41b", 0x8d, 0xf8}) 2018/04/13 23:38:43 executing program 5: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x80000000004, 0x40000119}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffff11, &(0x7f00001a7f05)=""/251}, 0x18) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x8, 0x2000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x7, 0xca, &(0x7f0000000180)="ac8e7c970e4d46e5a84deb68c810a63cfeea0029ba0af5bd6e81bd7b4baa44482a14619b570fa595ec30b79366249d2667573e317ec2f787c12f077a3c29d132327e63484e2f360cf657c78041256de159809078d44572320940d4f582431c48d17ffc15fe554604e2ff08e48253683e73943e005ac347bf147991cddafaadc040252c7521aece6495c493fee3c61785b275401ba08bbfd8834fad13f4e96719ef38e608f7f53b7ec346af8d6343840009f2d257513cec83f7a16a309a9a97057c6a0f1b5ac103634ab9"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x6f2000, 0x6f2000, 0x1, &(0x7f0000000080)) [ 392.468157] FAT-fs (loop0): Directory bread(block 8) failed [ 392.505876] FAT-fs (loop0): Directory bread(block 9) failed 2018/04/13 23:38:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000300)='ntfs\x00', &(0x7f0000000340)='./file0\x00', 0x2, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="5f9c7ea78c54854d08652850b5af788a8ec0b318164438182c89a5705cf998bf4cdc177727651014b335d02054311f55c6593f15de550f4b43d28a35ef2458e763a2677c", 0x44, 0x31b}, {&(0x7f0000000400)="23785975cd518459572142054b56ab1b832c2615302303ccd0714d316b06e98d55e38feb091b88c73e32fd156c2434585609c10fd1dcf9ee3b6f3f593a75eae383acee22152adae294d8778664d82a97ad1a55496fd9931e7205add2bdeb1b4105edbb535b2080c68e992b006235f7bad52d283ffa13f8af30d941fe4489b395907f8723fef94cd366e4e4", 0x8b, 0x1a66}], 0x9, &(0x7f0000000500)={[{@case_sensitive_no={'case_sensitive=no', 0x3d, [0x37, 0x0, 0x32, 0x3d, 0x36, 0x36, 0x35, 0x3f, 0x31]}, 0x2c}, {@uid={'uid', 0x3d, [0x38, 0x3a, 0x78, 0x34, 0x3f, 0x39, 0x37, 0x38, 0x33]}, 0x2c}]}) lookup_dcookie(0xbde, &(0x7f0000000640)=""/78, 0x4e) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010128bd7000ffdbdf250a0000000800050000000000080005e8000000000800060006000000080004002719000008000500f50f00000800060009000000340003000800030001000000080003000100000008000100000000000800030001000000080007004e2400000800030000000000"], 0x78}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) ioctl$TIOCCONS(r2, 0x541d) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000005c0)={@multicast2, @local, 0x0}, &(0x7f0000000600)=0xc) getsockname(r2, &(0x7f0000000b40)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000bc0)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000d00)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000ec0)={0x0, @multicast1, @dev}, &(0x7f0000000f00)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'veth0_to_team\x00', 0x0}) accept$packet(r2, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001000)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001140)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001240)=0xe8) recvmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000001280)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000002800)=[{&(0x7f0000001300)=""/227, 0xe3}, {&(0x7f0000001400)=""/56, 0x38}, {&(0x7f0000001440)=""/158, 0x9e}, {&(0x7f0000001500)=""/216, 0xd8}, {&(0x7f0000001600)=""/41, 0x29}, {&(0x7f0000001640)=""/78, 0x4e}, {&(0x7f00000016c0)=""/53, 0x35}, {&(0x7f0000001700)=""/166, 0xa6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/7, 0x7}], 0xa, &(0x7f00000028c0)=""/217, 0xd9, 0x7}, 0xfff}, {{&(0x7f00000029c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/171, 0xab}], 0x1, &(0x7f0000002b40)=""/9, 0x9, 0x4}, 0x1ff}, {{&(0x7f0000002b80)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c00)=""/192, 0xc0}], 0x1, &(0x7f0000002d00)=""/104, 0x68, 0x6}, 0x20}, {{&(0x7f0000002d80)=@nl, 0x80, &(0x7f0000005300)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/238, 0xee}, {&(0x7f0000004f00)=""/68, 0x44}, {&(0x7f0000004f80)=""/227, 0xe3}, {&(0x7f0000005080)=""/49, 0x31}, {&(0x7f00000050c0)=""/170, 0xaa}, {&(0x7f0000005180)=""/117, 0x75}, {&(0x7f0000005200)=""/3, 0x3}, {&(0x7f0000005240)=""/138, 0x8a}], 0xa, &(0x7f00000053c0)=""/242, 0xf2, 0x2c36}, 0x14}, {{&(0x7f00000054c0)=@can={0x0, 0x0}, 0x80, &(0x7f0000005800)=[{&(0x7f0000005540)=""/126, 0x7e}, {&(0x7f00000055c0)=""/231, 0xe7}, {&(0x7f00000056c0)=""/25, 0x19}, {&(0x7f0000005700)=""/212, 0xd4}], 0x4, &(0x7f0000005840)=""/72, 0x48, 0x80000001}, 0x1b6}, {{&(0x7f00000058c0)=@nl, 0x80, &(0x7f0000006d40)=[{&(0x7f0000005940)=""/84, 0x54}, {&(0x7f00000059c0)=""/4096, 0x1000}, {&(0x7f00000069c0)=""/36, 0x24}, {&(0x7f0000006a00)=""/78, 0x4e}, {&(0x7f0000006a80)=""/154, 0x9a}, {&(0x7f0000006b40)=""/88, 0x58}, {&(0x7f0000006bc0)=""/31, 0x1f}, {&(0x7f0000006c00)}, {&(0x7f0000006c40)=""/159, 0x9f}, {&(0x7f0000006d00)=""/52, 0x34}], 0xa, &(0x7f0000006e00)=""/3, 0x3, 0x4}, 0x10000}], 0x6, 0x40000121, &(0x7f0000006fc0)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000007340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000007300)={&(0x7f0000007040)={0x284, r4, 0x0, 0x70bd27, 0x25dfdbfe, {0x1}, [{{0x8, 0x1, r5}, {0x268, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x204}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r10}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r11}}, {0x8, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x4008080}, 0x14) [ 392.534137] FAT-fs (loop0): Directory bread(block 10) failed [ 392.567337] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:38:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x2000000, [], {0x0, 0x1c9c380}}) [ 392.639962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 392.678679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 392.680800] attempt to access beyond end of device [ 392.690430] loop0: rw=2049, want=246, limit=2 [ 392.728249] ntfs: (device loop1): parse_options(): The case_sensitive option requires a boolean argument. [ 392.742306] attempt to access beyond end of device [ 392.747444] loop0: rw=2049, want=247, limit=2 [ 392.754752] attempt to access beyond end of device [ 392.760091] loop0: rw=2049, want=248, limit=2 [ 392.779652] attempt to access beyond end of device [ 392.784886] loop0: rw=2049, want=249, limit=2 [ 392.801335] attempt to access beyond end of device [ 392.806549] loop0: rw=2049, want=262, limit=2 [ 392.824541] attempt to access beyond end of device [ 392.829652] loop0: rw=2049, want=263, limit=2 [ 392.856964] attempt to access beyond end of device [ 392.862313] loop0: rw=2049, want=264, limit=2 [ 392.877258] attempt to access beyond end of device [ 392.882396] loop0: rw=2049, want=265, limit=2 [ 392.930421] attempt to access beyond end of device [ 392.935525] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x36574, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:44 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x6]}}, 0x1c) 2018/04/13 23:38:44 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x2000, 0x0) r0 = socket$inet6(0xa, 0x807, 0x0) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000d39000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r1, &(0x7f000070b000)=[{{0x0, 0x0, &(0x7f00007ed000)=[{&(0x7f0000000080)='u', 0x1}], 0x1, &(0x7f0000275000)}}], 0x1, 0x48084) shutdown(r0, 0x200000000000001) 2018/04/13 23:38:44 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 2018/04/13 23:38:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0xfdfdffff, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:44 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x700000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200000000000004) r3 = dup3(r2, r2, 0x80000) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0xa5f, 0x0, 0x4}, {0x8f6, 0x0, 0x3}, {0x581}, {0xbff}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000640)="653aba1f00000066450ff37a00b9900900000f32420f07c744240076000000c7442402180d0000ff1c24b9800000c00f3235008000000f30c4e235ba618266baf80cb8bc6e4283ef66bafc0cb856cbc4fdef0f01d62e42de8a00000000"}], 0xaaaaaaaaaaaaac0, 0x0, &(0x7f0000000600), 0x100000000000024d) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000085040000000000000500000010"]) 2018/04/13 23:38:44 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = gettid() ptrace$setsig(0x4203, r1, 0x8000, &(0x7f0000000000)={0x1f, 0x80, 0x7, 0x7}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000c45ff6)=@file={0x1, './file0\x00'}, 0xa) listen(r2, 0x0) connect(r0, &(0x7f000009f000)=@un=@file={0x1, './file0\x00'}, 0xa) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f000097d000), 0xff) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) [ 393.416235] FAT-fs (loop0): Directory bread(block 2) failed [ 393.426330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 393.438273] FAT-fs (loop0): Directory bread(block 3) failed [ 393.456105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x1000000, [], {0x0, 0x1c9c380}}) [ 393.459473] FAT-fs (loop0): Directory bread(block 4) failed [ 393.474410] FAT-fs (loop0): Directory bread(block 5) failed [ 393.481006] FAT-fs (loop0): Directory bread(block 6) failed [ 393.497476] FAT-fs (loop0): Directory bread(block 7) failed [ 393.542647] FAT-fs (loop0): Directory bread(block 8) failed [ 393.575070] FAT-fs (loop0): Directory bread(block 9) failed [ 393.585759] FAT-fs (loop0): Directory bread(block 10) failed [ 393.591971] FAT-fs (loop0): Directory bread(block 11) failed [ 393.637542] attempt to access beyond end of device [ 393.642634] loop0: rw=2049, want=246, limit=2 [ 393.647336] attempt to access beyond end of device [ 393.652400] loop0: rw=2049, want=247, limit=2 [ 393.657212] attempt to access beyond end of device [ 393.662258] loop0: rw=2049, want=248, limit=2 [ 393.666875] attempt to access beyond end of device [ 393.671864] loop0: rw=2049, want=249, limit=2 [ 393.676490] attempt to access beyond end of device [ 393.681497] loop0: rw=2049, want=262, limit=2 [ 393.686128] attempt to access beyond end of device [ 393.691141] loop0: rw=2049, want=263, limit=2 [ 393.698151] attempt to access beyond end of device [ 393.703300] loop0: rw=2049, want=264, limit=2 [ 393.707920] attempt to access beyond end of device [ 393.712898] loop0: rw=2049, want=265, limit=2 [ 393.749394] attempt to access beyond end of device [ 393.754457] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:45 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x2000000000000000]}}, 0x1c) 2018/04/13 23:38:45 executing program 4: mkdir(&(0x7f00002b2000)='./file0\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000380)={0x0, 0x0, 0x1cb}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000003c0)={0x0, 0x0, 0xfffffffffffffff9}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0xffffffff00000000}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000440)={r1, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getpeername(r6, &(0x7f0000000240)=@pppoe, &(0x7f0000000200)=0x5) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r3, r4, 0x1}) readahead(r5, 0x1, 0x7) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mqueue\x00', 0x0, &(0x7f0000000000)) r7 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000080), 0x2e) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000002c0)=0x1e) getdents64(r7, &(0x7f00000001c0)=""/253, 0xfd) pread64(r7, &(0x7f0000000300)=""/4, 0x4, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0xf}, 0x8, 0x3, 0x3, 0xc, 0x20000, 0x13c2, 0x2}, &(0x7f0000000340)=0x20) 2018/04/13 23:38:45 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x81, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000000c0)=0x3, 0x8) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xc, &(0x7f0000000080)) 2018/04/13 23:38:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x2, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:45 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:45 executing program 1: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x100) sync_file_range(r0, 0x0, 0x9, 0x2) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'syz_tun\x00'}}, 0x1e) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x80000, 0x0) fcntl$getown(r1, 0x9) ioctl$TIOCCONS(r3, 0x541d) syz_emit_ethernet(0x14, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x8864, "42a703000000"}}}, &(0x7f0000000100)) 2018/04/13 23:38:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xc40d000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:45 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r2 = dup2(r1, r1) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000080)=""/165, 0xa5}, &(0x7f00000001c0), 0x4a}, 0x20) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000040)='./control\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 394.334789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 394.359590] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0xfffffdfd, [], {0x0, 0x1c9c380}}) [ 394.381722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 394.384954] FAT-fs (loop0): Directory bread(block 3) failed [ 394.407324] FAT-fs (loop0): Directory bread(block 4) failed [ 394.415264] FAT-fs (loop0): Directory bread(block 5) failed [ 394.421381] FAT-fs (loop0): Directory bread(block 6) failed [ 394.427829] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:45 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x40030000000000]}}, 0x1c) [ 394.445446] FAT-fs (loop0): Directory bread(block 8) failed [ 394.462250] FAT-fs (loop0): Directory bread(block 9) failed [ 394.474306] FAT-fs (loop0): Directory bread(block 10) failed 2018/04/13 23:38:45 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f0000000000)="4cb302047fa06f1ef381dd7cc3947e8c292603d0f72b8c5fe328601ec16dbae5c0887f79cb6a57171e18742288ea39a3ac757025c582c28e7d7e6bbe2a19f5777898fbfdce1fac3c54a44f1c9748a0daf7d6975770090b14c71ab9f4ea85f5fc4bb651bf3aab664079c0ba1d19eec060f0cb4caa626103a56cf62c6c98c3b36fdc934f2cf55db6ff199cc3331f1a8ad07350d800349ed5e3c62de7e8baf114026cd383165f3a4e2298861f53b76ebc60cae882e375fe77f1e47e8f311ca5ef7f346e8febfc62ea28a8d20327695496737ebe0ee61566a3b85479503ae2"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xe, 0x0, 0x6, 0x6, 0x13, r1, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r3, &(0x7f0000fc5000), &(0x7f0000950000)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fccff0)={r3, &(0x7f0000fce000)}, 0xc8) 2018/04/13 23:38:45 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x1000000002) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x200800) bind$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @reserved=0x1}, 0x32) [ 394.490147] FAT-fs (loop0): Directory bread(block 11) failed [ 394.579193] attempt to access beyond end of device [ 394.584380] loop0: rw=2049, want=246, limit=2 [ 394.588943] buffer_io_error: 30 callbacks suppressed [ 394.588954] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 394.669468] attempt to access beyond end of device [ 394.674575] loop0: rw=2049, want=247, limit=2 [ 394.679145] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 394.690580] attempt to access beyond end of device [ 394.695782] loop0: rw=2049, want=248, limit=2 [ 394.700369] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 394.708307] attempt to access beyond end of device [ 394.713357] loop0: rw=2049, want=249, limit=2 [ 394.718060] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 394.726560] attempt to access beyond end of device [ 394.731571] loop0: rw=2049, want=262, limit=2 [ 394.736115] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 394.744120] attempt to access beyond end of device [ 394.749131] loop0: rw=2049, want=263, limit=2 [ 394.753695] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 394.761596] attempt to access beyond end of device [ 394.766607] loop0: rw=2049, want=264, limit=2 [ 394.771191] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 394.779138] attempt to access beyond end of device [ 394.784152] loop0: rw=2049, want=265, limit=2 [ 394.788720] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 394.831360] attempt to access beyond end of device [ 394.836437] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xec66030000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040), 0x0, 0x8) 2018/04/13 23:38:46 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:46 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x4000000]}}, 0x1c) 2018/04/13 23:38:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="0a0775b0d5", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000400)=""/169, 0x3}) r2 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x3, 0x8100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0xa4002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x8, 0x1, 0x1, 0x3}) sendmmsg$alg(r1, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000a40)="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", 0x188}], 0x1, &(0x7f0000001ac0)}], 0x1, 0x0) recvmsg(r1, &(0x7f000022efc8)={&(0x7f0000bb5ff0)=@ethernet={0x0, @random}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000040)=""/121, 0x79}, {&(0x7f0000fb0ff4)=""/12, 0xffffffac}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) socket$netlink(0x10, 0x3, 0xe) 2018/04/13 23:38:46 executing program 1: r0 = socket(0xb, 0x800, 0xffff) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000bc4ff0)=@req={0x3fc, 0x0, 0x3}, 0x7f) sendto$llc(r1, &(0x7f0000000040)="9813365330b1ab3636891ce7e8f5bac43f1b8c744288c00a5a14633369670ae36e19e06c76c832d2c5406f7ac6fe2bfbe11c2325a39df90fdc2a411db9d49bd6009b882374b2d5fe178d14ba8fb1173daf083acad43db13c543617940f87ed2c6425dcdc269c45520a67eddb7b8b974e22795ed395afebc89e4d5f69a798471e4ae15fae", 0x84, 0x90, &(0x7f0000000100)={0x1a, 0x30c, 0x50, 0x6, 0x7, 0xd824, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xb}}, 0x10) socket(0x15, 0x6, 0x1f) r2 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x10002001}) 2018/04/13 23:38:46 executing program 2: r0 = getpgid(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10000, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) [ 395.255208] unregister_netdevice: waiting for lo to become free. Usage count = 3 2018/04/13 23:38:46 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) fcntl$setlease(r0, 0x400, 0x0) pread64(r0, &(0x7f00000005c0)=""/54, 0x36, 0x0) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000340), 0x8) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000300)="030b", 0x2, 0xfffffffffffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getgroups(0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0]) keyctl$chown(0x4, r3, 0x0, 0x0) getuid() setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000400)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) fcntl$getown(r0, 0x9) signalfd(r2, &(0x7f00000002c0)={0x4}, 0x8) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x4, 0x7ff, 0x0, "0be47daea147"}}) sysfs$3(0x3) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000280)={0x1ff, 0x9, 0x400, 0x0, 0x2, 0x100}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) r4 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000080)=[{r4}], 0x1, 0x0) r5 = getpid() fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x0, 0x2, 0x9, 0xffff, r5}) write(r1, &(0x7f0000000200)="0dcf1f2324fa28b0eaf4815548569a0814585413a8aea84be0d34c23848c4b", 0x1f) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r6 = socket$bt_cmtp(0x1f, 0x3, 0x5) connect(r6, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x4, 0x1, 0x2, {0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x81}}}, 0x80) connect(r1, &(0x7f00000004c0)=@in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80) close(0xffffffffffffffff) [ 395.308980] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.323332] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:46 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x6000000]}}, 0x1c) 2018/04/13 23:38:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 395.372330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.389522] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:46 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x5000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 395.417771] FAT-fs (loop0): Directory bread(block 4) failed [ 395.447480] FAT-fs (loop0): Directory bread(block 5) failed [ 395.456215] FAT-fs (loop0): Directory bread(block 6) failed [ 395.462328] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:46 executing program 4: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000380)="1117fc1109ad5804efe6b20549954251facc430459447705e106d97c14a35c294cdfcb4a85cc428cc3a3483a24f0f953d684a62205b1636e4b4f3cbdb03268516629dd24eb28cd545b07b71da998913f5ad3c005d5ec25adc36669db0a602f6fb59346a87d9866da7770c3d73b55a98707f5952daa1f148639ce1465643be6811e4993111293e4c934e8b8865c0e0836c42076a0afc8f7a1c5426458e85ec188c1cba91828bc018391d2827dc1d04e3b10a4819710ef5a11de25e7e0a2b247697bb225a476901f8d6a383789aa8246d4a3d878f9a8cdc8", 0xd7, 0x9}], 0x800080, &(0x7f0000000280)=ANY=[@ANYBLOB="55ee"]) r0 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x102) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x81}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000004c0)={r1, 0xc9b7, 0x20, 0x7, 0xffffffff}, &(0x7f0000000500)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x8000, 0x10000, 0x8, 0x1, 0x80}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e21, 0xef92, @dev={0xfe, 0x80, [], 0x18}, 0x8}}}, &(0x7f0000000140)=0x84) 2018/04/13 23:38:46 executing program 1: open(&(0x7f0000000140)='./file0\x00', 0x23ff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x1800, &(0x7f0000000000)=ANY=[]) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={'veth1\x00', {0x2, 0x0, @loopback=0x7f000001}}) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1000002, 0x0) syz_mount_image$hfs(&(0x7f0000000300)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x100000000000002, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="80"]) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x4, &(0x7f0000001540)=[{&(0x7f0000000280)="a668bf99512289050eedae4eb542fb5c5b4fb2a8d5a4507c25fca74ab70fe72808c22db9dd40ca525ec8b569311917d29e340982a88c3706c183e9c10ed145a040066cd893258b682d786bde88276fbcadc4aae45c142fe1cfb644f866777ec6f6e95cfc98102e1250f8e73b143652333debbb", 0x73, 0x775}, {&(0x7f0000000340)="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", 0x1000, 0x4}, {&(0x7f0000001340)="24867001e74a9c2a1b3b6efccdd37589e45ed11ad8e85e94303b2aa0912792f98f2fdd510a2850edb5f0c2cc3295aa115314c61fe2d3d47994f7c25bef858899bed00a440584d47ae30d08f7bd6d535aa1c9022c54ad30b6bad8771ae611b014ab7e5f7a31249ecf5457dee7140d53a2a5ce5114fb02508c74cd05d87c91d41c4349da4cc76127d1d5e2a1eedf73044097c61e303fe8549ece8323c18970b27d9d44bbcbc733858b4e8c1d68dc20a6f2eb2a41f04f103620729753f85fd09c55907cf2286d49ef7d7041247071ea3344d8e2d00d946f909e55c7e4e6aa9843edffc944ac59ad8463", 0xe8, 0x722d5743}, {&(0x7f0000001440)="6bc755082eac6e30cac03c86eab6afe77ea730b841654756905cea0b526059c46d7d7307fe82168cb5c297213effd87cc24933f249035adf737ee8ca01c12f10dba465b7dc19bfa6925e476b4dfb868c89ac534bb4ee920e829583520fc1132a1fc6b9c4ae5deb39093afd796fdffde5b51c58a283b3e9caa7c50922b908b7aaf7ad97b3f0de1f7befbdeec394444a21e5a289cadee5a234fabd8a718eb7b35c96dcbe8018656eebea244cb30fcfb8f47d0e44e6a3753663d21f8050ac69d4bd4d3fc5d51c16edf10edbc762a741b9fc17fd2faf", 0xd4, 0x5}], 0x2, &(0x7f0000000200)={[{@space_cache_v2='space_cache=v2', 0x2c}]}) fallocate(r0, 0x11, 0x0, 0x100000001) [ 395.477241] FAT-fs (loop0): Directory bread(block 8) failed [ 395.521974] FAT-fs (loop0): Directory bread(block 9) failed [ 395.548287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.563646] FAT-fs (loop0): Directory bread(block 10) failed 2018/04/13 23:38:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:46 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x2f]}}, 0x1c) [ 395.580933] FAT-fs (loop0): Directory bread(block 11) failed [ 395.594452] XFS (loop4): unknown mount option [Uî]. [ 395.604678] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.610661] hfs: unable to parse mount options [ 395.639506] XFS (loop4): unknown mount option [Uî]. 2018/04/13 23:38:46 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x700}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 395.734949] attempt to access beyond end of device [ 395.740083] loop0: rw=2049, want=246, limit=2 [ 395.744734] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 395.778777] attempt to access beyond end of device [ 395.783878] loop0: rw=2049, want=247, limit=2 [ 395.788181] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.788497] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 395.847709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.889230] attempt to access beyond end of device [ 395.894311] loop0: rw=2049, want=248, limit=2 [ 395.899663] attempt to access beyond end of device [ 395.904745] loop0: rw=2049, want=249, limit=2 [ 395.909376] attempt to access beyond end of device [ 395.914392] loop0: rw=2049, want=262, limit=2 [ 395.919066] attempt to access beyond end of device [ 395.924102] loop0: rw=2049, want=263, limit=2 [ 395.928793] attempt to access beyond end of device [ 395.933845] loop0: rw=2049, want=264, limit=2 [ 395.938546] attempt to access beyond end of device [ 395.943555] loop0: rw=2049, want=265, limit=2 [ 395.980396] attempt to access beyond end of device [ 395.985515] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:47 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)="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", 0x2, 0x0) write(r0, &(0x7f0000002280)='-5', 0x2) fgetxattr(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=""/203, 0xcb) r1 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x3, 0x5, 0xffffffffffffffff, 0x101, r1}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) 2018/04/13 23:38:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xc00d0000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:47 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:47 executing program 2: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffff9c}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r0, r1, 0x3, 0x2}, 0x10) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000000)={0x30, 0x1, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r4 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) r5 = syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r5) connect(r0, &(0x7f0000000200)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x80) 2018/04/13 23:38:47 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x1c03000000000000]}}, 0x1c) 2018/04/13 23:38:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0), &(0x7f0000000100)) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000140)={{0x2, 0x4e22, @multicast2=0xe0000002}, {0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 'sit0\x00'}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/13 23:38:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000300)={{0x6, 0x8, 0x0, 0xa, 0x2e5, 0x3}, 0x9, 0x6, 0x4, 0x5, 0x8, "be4846c1b1dcfc630a328bf3f8eb8680532a9bca978d1bb868aae374b1ac1c40d26fa1ad3d4d432348a9e977a51bd3bdfcb17008526c6ea8b5af0af6341998344190e938732a34e51d67e4bbe1e18104982cfbc4ad6353eeacfa2c2fb258ce7cd20fa8518dd1d6a14db6a5aa72917203cc1e9511fde7521ab15752a9811694f4"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000009000), 0x1a7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80, 0xffffffffdfffffff}, "706f7274300000000000000000000000000000000000000000f6ff1500000000000000000012d000000000000000000000000000000200", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000100)={0x9, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e22, @loopback=0x7f000001}, {0x2, 0x4e24, @loopback=0x7f000001}, 0x1, 0xffffffff, 0x52c, 0x1400000000, 0xc3, &(0x7f00000000c0)='syz_tun\x00', 0x1f, 0x2, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000fbf000)={{0x80, 0xff}, 'port0\x00'}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="1961bb0b86c65bca4641e68ddd9a4a41672f2e7d6dc56460ec99109c9956ef3790a4b408ce67bef566c60b1431662594dd298f96491572463c6880a05e408469d647e1c7da5cc3e9d6118313353b74e0118a5a3b85614ea2068e19a7776e107f62c5444f8680d927aea0ef6e78ea32fd51fcfa9b6ba4c538d3045a2307c339df", 0x80}], 0x1, 0x3f) r3 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x101, 0x301000) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) [ 396.306399] FAT-fs (loop0): Directory bread(block 2) failed [ 396.316206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:47 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x2000000003, 0xdd8) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000016000)=@nl=@kern={0x10, 0x4000000}, 0x80, &(0x7f0000014000)=[{&(0x7f0000018000)="5500000018007fb1b72d1cb2a4a280a80a06050000a84321a7052369250009000800001c001400001400a30702000000000000dc1338d544000a9b84226eb75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000040)}, 0x0) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x3, 0x10000, 0xe8ec, 0x3, 0x0, 0x1000, 0x20000, 0x0, 0x0, 0x7fffffff, 0x400, 0x4, 0x3, 0x7, 0x8, 0x4, 0x4, 0x0, 0x1, 0x80000001, 0x3, 0x100000001, 0x1, 0x5, 0x7, 0x26533686, 0x3ff, 0x800, 0x0, 0x200, 0x4, 0xab, 0x4, 0x8, 0x81, 0x8, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x7f}, 0x4d, 0x1, 0x100000001, 0x3, 0x4, 0x9, 0x7}, r2, 0x7, r0, 0x2) getsockopt$inet6_tcp_buf(r1, 0x6, 0x16, &(0x7f0000000100)=""/183, &(0x7f00000001c0)=0xb7) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2001, 0x0) 2018/04/13 23:38:47 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x1800000000000000]}}, 0x1c) [ 396.354287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.357562] FAT-fs (loop0): Directory bread(block 3) failed [ 396.393270] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:47 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x10001, 0x101000) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f00000000c0)=0x8, 0x4) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xeca, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x4) [ 396.399770] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:47 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) flock(r0, 0x1) socketpair(0x2, 0xa, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x800) fcntl$dupfd(r2, 0x406, r1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@broadcast, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) ioctl$KDADDIO(r3, 0x4b34, 0x31ef) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000380)=0x0) sched_getparam(r4, &(0x7f00000003c0)) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000400), 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00') 2018/04/13 23:38:47 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x6}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 396.434976] FAT-fs (loop0): Directory bread(block 6) failed [ 396.468908] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 396.507776] FAT-fs (loop0): Directory bread(block 8) failed [ 396.532400] FAT-fs (loop0): Directory bread(block 9) failed 2018/04/13 23:38:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000e37000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x10000, 0x5, 0x6}, 0xc) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x75) 2018/04/13 23:38:47 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x8a14c85a47000000]}}, 0x1c) [ 396.556311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.563621] FAT-fs (loop0): Directory bread(block 10) failed [ 396.592519] FAT-fs (loop0): Directory bread(block 11) failed [ 396.620084] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.670005] attempt to access beyond end of device [ 396.675137] loop0: rw=2049, want=246, limit=2 [ 396.691805] attempt to access beyond end of device [ 396.696944] loop0: rw=2049, want=247, limit=2 [ 396.702249] attempt to access beyond end of device [ 396.707482] loop0: rw=2049, want=248, limit=2 [ 396.748457] attempt to access beyond end of device [ 396.753651] loop0: rw=2049, want=249, limit=2 [ 396.758740] attempt to access beyond end of device [ 396.763941] loop0: rw=2049, want=262, limit=2 [ 396.770970] attempt to access beyond end of device [ 396.776186] loop0: rw=2049, want=263, limit=2 [ 396.781198] attempt to access beyond end of device [ 396.786253] loop0: rw=2049, want=264, limit=2 [ 396.791155] attempt to access beyond end of device [ 396.796183] loop0: rw=2049, want=265, limit=2 [ 396.828362] attempt to access beyond end of device [ 396.833443] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:48 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x6000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'gretap0\x00', 0x400}) 2018/04/13 23:38:48 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffff) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0xc00, 0x4) 2018/04/13 23:38:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000bc0000010000e1f6faee010000003d00000000209f54"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r0 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x7, 0x100) accept4(0xffffffffffffff9c, &(0x7f0000000400)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000480)=0x80, 0x80800) bind$bt_hci(r0, &(0x7f0000000540)={0x1f, r1, 0x3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) 2018/04/13 23:38:48 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xfec0]}}, 0x1c) 2018/04/13 23:38:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) 2018/04/13 23:38:48 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xfffffffc}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xc60d0000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:48 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f00000001c0)=""/69, 0x45}], 0x2, &(0x7f00000002c0)=""/150, 0x96}, 0x3}], 0x1, 0x40000020, &(0x7f00000003c0)={0x77359400}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/04/13 23:38:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a32000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00002a0e50)=ANY=[@ANYBLOB="1c000000181afdff00000000000000000100000008000100b5000000"], 0x1c}, 0x1}, 0x0) [ 397.462843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 397.480989] FAT-fs (loop0): Directory bread(block 2) failed [ 397.501593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [], {0x0, 0x1c9c380}}) [ 397.507933] FAT-fs (loop0): Directory bread(block 3) failed 2018/04/13 23:38:48 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x210000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x201, 0x100, 0x0, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e24}}, 0x340da91, 0x8, 0x8, 0x3, 0xcb}, 0x98) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000)=0xffffff24, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240), 0x0, 0x4, 0x100, 0x1, 0x5db, 0x7f, {0x4000000000, 0x8, 0x8, 0xffffffffffff4ce5, 0x2, 0x1f, 0xffff, 0x1, 0x3d0a3ce2, 0x1, 0x7, 0x8b, 0x1d, 0x6, "b2163fc02cb9e78fbcd096466585fc7f1993eb334181478d65b02e6bcb810077"}}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) recvfrom$llc(r3, &(0x7f0000000300)=""/110, 0x6e, 0x1, &(0x7f0000000240)={0x1a, 0x306, 0x400, 0xffff, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) recvmmsg(r3, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f0000001780)=""/163, 0xa3}}, {{&(0x7f0000006a80)=@rc, 0x80, &(0x7f0000006b40), 0x0, &(0x7f0000006b80)=""/194, 0xc2}}], 0x2, 0x0, &(0x7f0000006dc0)={0x77359400}) 2018/04/13 23:38:48 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8)={0x6}, 0x8, 0x0) r1 = getpid() r2 = gettid() r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40804, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x14, &(0x7f0000000080)="6fb55e44f493a4e7691f31a6c244159ca45512f13793ee13d8fd0133d733c91f8c8746fdd73a7f83ae3f6e776c7fe73cb2f34f5bf191f480d36d69d6df4b9dbb6a456c4b120b57b7d0cb23c82045dc789369c5a4", 0x54) readv(r0, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r1, r2, 0x3) 2018/04/13 23:38:48 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x1c03]}}, 0x1c) 2018/04/13 23:38:48 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xffffffff00000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 397.539124] FAT-fs (loop0): Directory bread(block 4) failed [ 397.569155] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x40047211, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x880, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0xa44, 0xc}, 0x0, 0x2, 0x3, {0x19c, 0x2}, 0x80000001, 0x9}) 2018/04/13 23:38:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0xfffffdfd], {0x0, 0x1c9c380}}) [ 397.651593] FAT-fs (loop0): Directory bread(block 6) failed [ 397.680352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 397.715792] FAT-fs (loop0): Directory bread(block 7) failed [ 397.730714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 397.772857] FAT-fs (loop0): Directory bread(block 8) failed [ 397.806441] FAT-fs (loop0): Directory bread(block 9) failed [ 397.812678] FAT-fs (loop0): Directory bread(block 10) failed [ 397.818689] FAT-fs (loop0): Directory bread(block 11) failed [ 397.861258] attempt to access beyond end of device [ 397.866362] loop0: rw=2049, want=246, limit=2 [ 397.871907] attempt to access beyond end of device [ 397.877010] loop0: rw=2049, want=247, limit=2 [ 397.882245] attempt to access beyond end of device [ 397.887317] loop0: rw=2049, want=248, limit=2 [ 397.892097] attempt to access beyond end of device [ 397.897125] loop0: rw=2049, want=249, limit=2 [ 397.901739] attempt to access beyond end of device [ 397.906765] loop0: rw=2049, want=262, limit=2 [ 397.911403] attempt to access beyond end of device [ 397.916403] loop0: rw=2049, want=263, limit=2 [ 397.921066] attempt to access beyond end of device [ 397.926096] loop0: rw=2049, want=264, limit=2 [ 397.930711] attempt to access beyond end of device [ 397.935724] loop0: rw=2049, want=265, limit=2 [ 397.975431] attempt to access beyond end of device [ 397.980571] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000d06000)=0x1, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x200) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0xa23, 0x20, 0x3, 0x3c}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="c7000000e67d5f4e6ef5ad9bddde76de530f0dca2c5bd6e89be845913cf7c10534724d8e71c6df385b53adf5a6585171de0877aaeeb533d4ac7960c00347f8fc72df46885a4c820f896aa1bf544b8c2968693a74544e2fc8d3584440dc61243524580878871da2a4ae1ed09a8c154b58cf6e264af933960b48c8659ac424e52e5de8d6e2e549f9e290c5b48cdbbdcbb3042f2229da47cf4bd335f8c0eef13d9b7fbbf1ac19747a2b487e1cacc612b3d2abe5c5479000589175188a65113ad55f1316"], &(0x7f0000000140)=0xcf) r3 = fcntl$dupfd(r0, 0x406, r0) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000040)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfb, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x24}, 0x1}, 0x0) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f00000002c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) 2018/04/13 23:38:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0xfffffdfd], {0x0, 0x1c9c380}}) 2018/04/13 23:38:49 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x18]}}, 0x1c) 2018/04/13 23:38:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x100000000000000], {0x0, 0x1c9c380}}) 2018/04/13 23:38:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x700, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:49 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x6000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:49 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x81) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/206) r1 = add_key$keyring(&(0x7f0000e38ff8)='keyring\x00', &(0x7f0000866000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000243000)='dns_resolver\x00', &(0x7f00006f9000)={0x73, 0x79, 0x7a}, &(0x7f0000c89fb9)="5c4cff01000030b78334881f2b16c5896cf4277336ae090000000000005f2316dcbfd20d84e3de3d0000248bfbd524c61df9c977d1024b9dbaeb02a51dad8098fb5ef4054b6b00", 0x47, r1) 2018/04/13 23:38:49 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xffffffffffffffbc}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) userfaultfd(0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) [ 398.517150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.536562] FAT-fs (loop0): Directory bread(block 2) failed [ 398.556332] Option 'Ü¿Ò „ãÞ' to dns_resolver key: bad/missing value 2018/04/13 23:38:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0xfffffdfd], {0x0, 0x1c9c380}}) 2018/04/13 23:38:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x4) r1 = dup2(r0, r0) write$rdma_cm(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003000)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="f8b1fedfb8b7ffffffffffffff"], 0x20) 2018/04/13 23:38:49 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0xff000000]}}, 0x1c) 2018/04/13 23:38:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x200000000000000], {0x0, 0x1c9c380}}) [ 398.561113] FAT-fs (loop0): Directory bread(block 3) failed [ 398.576305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.603423] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:49 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x401, 0x80) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00', 0x9a, "12e63e8db369d7220396a5da61e490731ca984418b0e5f7a2fbf91399dcd13117973e4c97e51d688dc9cb9dbb35fa1e1e18deac09137dc5dba00a90edd755747d1b55c294be1ea26c3627655e906042c65b49e16ba771227659a067bae5a4fa223fb9956713150d838868d7c18b39aadd158e7834e30a15173eb66437d3bebc8f147df8c8fea4e98fc67f98aef6d655fd80dbbc4abcb56c03b4d"}, &(0x7f0000000080)=0xbe) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 2018/04/13 23:38:49 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x81000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 398.630641] FAT-fs (loop0): Directory bread(block 5) failed [ 398.659512] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:49 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x8001, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000480)=0x5, 0x4) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0xb, 0x0, 0x0, 0x800000000000000, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, r0, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/59, 0x3b}], 0x1, &(0x7f0000000280)=""/164, 0xa4, 0x401}, 0x100) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) connect$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/13 23:38:49 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x5f) clock_gettime(0x7, &(0x7f0000000000)) [ 398.699467] FAT-fs (loop0): Directory bread(block 7) failed [ 398.733967] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:49 executing program 1: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000981ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create(0x948) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000984ff4)) getdents64(r2, &(0x7f0000000080)=""/141, 0x8d) epoll_wait(r4, &(0x7f0000a52ff4)=[{}], 0x1, 0xfffffffffffffffc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x800, 0x4) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000abb000)={0x20000006}) 2018/04/13 23:38:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0xfdfdffff00000000], {0x0, 0x1c9c380}}) [ 398.748597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.772225] FAT-fs (loop0): Directory bread(block 9) failed [ 398.784816] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.788286] FAT-fs (loop0): Directory bread(block 10) failed [ 398.846644] FAT-fs (loop0): Directory bread(block 11) failed [ 398.931261] attempt to access beyond end of device [ 398.936378] loop0: rw=2049, want=246, limit=2 [ 398.949781] attempt to access beyond end of device [ 398.954935] loop0: rw=2049, want=247, limit=2 [ 398.962284] attempt to access beyond end of device [ 398.967439] loop0: rw=2049, want=248, limit=2 [ 398.972292] attempt to access beyond end of device [ 398.977300] loop0: rw=2049, want=249, limit=2 [ 398.981907] attempt to access beyond end of device [ 398.986909] loop0: rw=2049, want=262, limit=2 [ 398.991561] attempt to access beyond end of device [ 398.996573] loop0: rw=2049, want=263, limit=2 [ 399.001898] attempt to access beyond end of device [ 399.006884] loop0: rw=2049, want=264, limit=2 [ 399.011511] attempt to access beyond end of device [ 399.016496] loop0: rw=2049, want=265, limit=2 [ 399.051403] attempt to access beyond end of device [ 399.056432] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:50 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0xfffffffffffff000]}}, 0x1c) 2018/04/13 23:38:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0xfdfdffff], {0x0, 0x1c9c380}}) 2018/04/13 23:38:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff}) close(r0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x8b9c, 0x200040) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x3, r1, 0x1}) close(r1) r3 = socket$inet6_sctp(0xa, 0x200000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961000)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f000095cffe)={r4}, &(0x7f000095c000)=0x8) sendmsg$unix(r1, &(0x7f0000001240)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000001140)="dd", 0x1}], 0x1}, 0x0) 2018/04/13 23:38:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000090020000d0000000ffffffffffffffffd0000000ffffffffc0010000ffffffffffffffffc0010000ffffffff03000000", @ANYPTR=&(0x7f0000024000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000402d00000000000000000000000000000000000000000000000000028005443504d53530000000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6fff00000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000000000000000000000006e657462696f732d6e730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000a702d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x5e) getegid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000480)={0xffffffff, 0x0, 0x9}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000380)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000"], 0x58) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000400)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000440)={r2}) 2018/04/13 23:38:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xdcc, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:50 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xf00}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:50 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000c1f000), 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) get_mempolicy(&(0x7f0000f12000), &(0x7f0000c20000), 0x400, &(0x7f000077a000/0x4000)=nil, 0x3) 2018/04/13 23:38:51 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x80) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 399.918876] FAT-fs (loop0): Directory bread(block 2) failed [ 399.920932] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x1000000], {0x0, 0x1c9c380}}) 2018/04/13 23:38:51 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0xfe80000000000000]}}, 0x1c) [ 399.966573] FAT-fs (loop0): Directory bread(block 3) failed [ 399.991013] FAT-fs (loop0): Directory bread(block 4) failed [ 399.991894] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 400.008667] FAT-fs (loop0): Directory bread(block 5) failed [ 400.014919] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='adfs\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYBLOB="e2410f7fa9b856"], &(0x7f0000000440)=0x1) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = getpgid(0xffffffffffffffff) prctl$setptracer(0x59616d61, r6) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000280), 0x100) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/13 23:38:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000005040)={'erspan0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="4b0000010e3c7c1871b2149b1f21afe5f735e0cd89b5f08b50c3762efc0c766cb838b08c797d981e8c467fb1f878ed429649051d467fe0d05fea8566f8b4ed217f10d158dd425f13a55f0e3dd5907c8846016748668d1949dc00998c0ed77af79af836be0c429b8b34b88efe30f42df55d432cc2cc6a59ac77781e4b991d757ff4f7a98e1e6f57cf0958fdf83cffa6d97af3ef221303d13e65d97c5c3317b0175fbd02312ab86406977055fe8e5c6690eb66ac4d81a117e9a3a6081264a1f62ba1b742840d0fd43243e0d376d96cc67ea1c487049b1db1ff041ed92a"]}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) 2018/04/13 23:38:51 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x18000000]}}, 0x1c) 2018/04/13 23:38:51 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x6000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 400.050197] FAT-fs (loop0): Directory bread(block 7) failed [ 400.078541] FAT-fs (loop0): Directory bread(block 8) failed [ 400.094107] FAT-fs (loop0): Directory bread(block 9) failed [ 400.125232] FAT-fs (loop0): Directory bread(block 10) failed [ 400.149188] FAT-fs (loop0): Directory bread(block 11) failed [ 400.174408] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 400.219279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 400.240741] attempt to access beyond end of device [ 400.245862] loop0: rw=2049, want=246, limit=2 [ 400.250456] buffer_io_error: 30 callbacks suppressed [ 400.250470] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 400.265659] attempt to access beyond end of device [ 400.270787] loop0: rw=2049, want=247, limit=2 [ 400.275392] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 400.300408] attempt to access beyond end of device [ 400.305514] loop0: rw=2049, want=248, limit=2 [ 400.310074] Buffer I/O error on dev loop0, logical block 247, lost async page write [ 400.322556] attempt to access beyond end of device [ 400.327673] loop0: rw=2049, want=249, limit=2 [ 400.332217] Buffer I/O error on dev loop0, logical block 248, lost async page write [ 400.341728] attempt to access beyond end of device [ 400.346955] loop0: rw=2049, want=262, limit=2 [ 400.351546] Buffer I/O error on dev loop0, logical block 261, lost async page write [ 400.360387] attempt to access beyond end of device [ 400.365521] loop0: rw=2049, want=263, limit=2 [ 400.370109] Buffer I/O error on dev loop0, logical block 262, lost async page write [ 400.385175] attempt to access beyond end of device [ 400.390368] loop0: rw=2049, want=264, limit=2 [ 400.394919] Buffer I/O error on dev loop0, logical block 263, lost async page write [ 400.402825] attempt to access beyond end of device [ 400.408044] loop0: rw=2049, want=265, limit=2 [ 400.412630] Buffer I/O error on dev loop0, logical block 264, lost async page write [ 400.451383] attempt to access beyond end of device [ 400.456425] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x2000000], {0x0, 0x1c9c380}}) 2018/04/13 23:38:52 executing program 5: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000240)='./control/file0\x00', 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000000c0)={[{0x6a, 0x10000, 0xe643, 0x0, 0xffff, 0x8000, 0x10001, 0x100000001, 0x100, 0x7ff, 0x2, 0x20, 0x2ca75e08}, {0x3f, 0x1, 0x7ff, 0x8001, 0x26, 0x8c93, 0x5bc, 0x7, 0x2, 0x10000, 0x3, 0x5, 0x4}, {0xf2a, 0x0, 0x8001, 0x2e4, 0x3, 0x2, 0xafa2, 0x1f, 0x21, 0x5, 0xffff, 0x8, 0x3}], 0x202c}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick=0x3, {}, {}, @time=@time={0x77359400}}], 0x30) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0xffff, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x32) unlink(&(0x7f00000001c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') unlink(&(0x7f0000000140)='./control/file0\x00') chroot(&(0x7f0000000080)='./control/file1\x00') close(r1) 2018/04/13 23:38:52 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xfffff000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:52 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x34000]}}, 0x1c) 2018/04/13 23:38:52 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x1bf6, 0x4) r2 = socket(0x10, 0x2, 0x9) write(r2, &(0x7f00000000c0)="1f000000f90000f5000000010000000101308a846a00000000b00a0074dd7e7293e25100000000000000000000000000", 0xffffffffffffff23) 2018/04/13 23:38:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000f33000)='/dev/dsp\x00', 0x22002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) writev(r2, &(0x7f0000000000), 0x0) 2018/04/13 23:38:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xca0d000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:52 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000040)={0x9, 0x5, 0xfffffffffffffff8, 0x4, "9111e6b6f14d36b50a74bb69f0a1c5aa3a236d79b2748eddb0572e81f3e69fce9197166b7337fe7c1ca4da90", 0x7f}) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 400.985482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 401.001158] FAT-fs (loop0): Directory bread(block 2) failed [ 401.014700] FAT-fs (loop0): Directory bread(block 3) failed [ 401.021500] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x2], {0x0, 0x1c9c380}}) [ 401.033403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x79}, 0x0) socket(0x7, 0xf, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001300000000000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000f1caa068c3eb0000"], 0x20}, 0x1}, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) 2018/04/13 23:38:52 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x600000000000000]}}, 0x1c) [ 401.058703] FAT-fs (loop0): Directory bread(block 5) failed [ 401.074471] FAT-fs (loop0): Directory bread(block 6) failed [ 401.083659] FAT-fs (loop0): Directory bread(block 7) failed [ 401.105334] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x0, 0xfdfdffff], {0x0, 0x1c9c380}}) 2018/04/13 23:38:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000001280)="e1c183d975621c09b0d6a3cf0e2eab9ccba7aa3ee3e069de6faaff36331805e8c6d65b42e651760b2fb4937e9dc9535978319420832c31296a901faea1d015cc4614cdf7af138dab67ceb6dcc3056b24355967723b6c1b5298aa9bd2f944222919ce6356af0f747429a9d2aa04af202655a7cc9bec8ff2a256fb1dfacb3b73acbeed01a62bbd8368e7f22db9af84cf6782a61ad7f07d812a01fc62821c3d153ea9975e7432c6023578dfc792310342d44f7ef4af8263c5fa11b3f23f0dbcdff8f2d31f480e0779e331024b226a911249235fba81486417741d8f07f72821e3b1887c3f19a3f601358b0ebd2d4d3bdc9507d7ed9604f0d8b3a889f8c17490f223796c7d821ecd3c29ce3780d3173f7ac17911ee217039d1baefeff2ab7599112d2712109467fc07774e55f108b7812daa1f7db363448bced27b1a237fe8e70001196597402a7270231f7863c59bae586f2f524a40859eeb26ecff6729fa95f77051bba76b760c7d6d24e6d3b1f748b0d4be4b964996cde85489a0fd2d20c210751edc2b632701fc4964b7c36806442668d19806dbb02ae620064159754a40cc7c68b2d9215eb2b52543ddfa6a130d87cd8662852abe413145aa31337f9e4cd005e68ade5c93545fd566d854074db10a50eb83d04db48ded582cf07b0592b2730bf6f7fae7ba8770bd15d04e25d65e91679a8bfd86e712666764d8eb3ec01b11665e378883b8f65139556fa1148886b6beb87454ec50772e3248c9ce015ceabbfbf311775ae1ec049e6a9016754b8abc1e510f033124f07ecd8b76b88f15ac57595e76734962a344e3050e16d2f9df2b5ed767ad3eb65921c0ed67b9dca16afc3a31b32cc0a2a2a89bfd8fce7658a532c217fcfa8a4bdfebec18231d06cafc3077aa198d7c9b0cd918091d1f9bf6731c89a7b2fdaf90582a66da846565381c10637d9e8fb6ef3dd54eeebc1d1d7bb56501d5cf24148e79054ecfdfb0f4af3536a19beab8353a33b65bee7cdc382ebf7325acb226cbeb86f7b6d184d21f43c15dc83ded2afb0a38f6d54a5aaa2b8a6219f5b110ceea643bb171b977536a62ec9c3afef8ff2f4ce948df462c6b1d4202ef61e553e60be77df062ed48aeafd0687ea991d7bc63f4c95a5f3494eb39936f34df5aad93c0bef860212d72883f962f3b459a9028a628252609db48a406cbf2415f304c0d77393b56ed6dfdd08b63eb02a4cb55eacc0cf283f0f76d3ad11b1b2c754c1fd49df9745d978bf03b440f69d359d528916286535739420a2bd487f7a750f55d7dd10769df54332d9d0782f67536ef3ef32821017c4adf3d4a0113908b40b6c8df1554da64c14d56e617b37226b6bd7d3b9b210ce72935a391a83c600af4ec32334f03238740fbeca9fcfb3f359102d7164dcce7cf5c6e94edd964602a2e6144c8db25f158fc16a4cff46b57de81a78a322d9d1a60f54fb4e26677eab9239c8423be717e2ef3117aab09691207d6ebc3af79604653573b414ffc60dbb86a2d612571f0e2228650b0997eeb067a2bd654954d472eb575f27c985e9d2896d6d0981710b98e8d8be1c6876421dc589f97b9d0c56e8b75ac5c0e1259111aaabb181f413a433a25cbb9c66f97bcd7161f87c379b68afe13c728a16586cecb882468d859b5530520e3affb994180df5106c769a7df754c4ce463490096e6ae554d9d9d7ca98143c169b19819eb6c0fcbbcf3e38882b7fc7662511ccc3ebde5353db2b807877b0cf8004d52aa5ba46dd8b40e7aaece5bdc3b915d1a889f7017c8dc44ff86a7a5f74ea9e0d3fa25f675c4a8cdf1fab819fb4047b934c24baad158b451cc9ec1a7a26930d400a9929cae8b550d55ba5ef128d91d6fedb3d9c9dc37b489118e9aff58fd24db0e0afebdbda3f657575d30a9e7b76ce1fadb24e104fc2b3ca53ffa88f8a06fed45e7fb4a396395ced0c863f9026dd4b74ce3ca67113d3df37dc5b7435eed62f40bbee3c290c43b92d58235039d9a5a5fa5000307f0b670cd1a8338af", 0x595, 0x4000080, &(0x7f0000001240)={0x2, 0x0, @loopback=0x7f000001}, 0x10) open_by_handle_at(r0, &(0x7f0000000140)={0x3b, 0x8, "34c3e77125ce24e1266d37c51ad3f7416994470bd496c8b84dc1b677e085fe7c5e022228fde7551ac9fd67da992abe972c3a9b"}, 0x80400) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400003, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80000) sendto$inet(r0, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) [ 401.129512] FAT-fs (loop0): Directory bread(block 9) failed [ 401.140417] FAT-fs (loop0): Directory bread(block 10) failed [ 401.156115] FAT-fs (loop0): Directory bread(block 11) failed 2018/04/13 23:38:52 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 401.180627] kvm [29364]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000004 [ 401.236164] kvm [29364]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000004 [ 401.264777] attempt to access beyond end of device [ 401.269896] loop0: rw=2049, want=246, limit=2 [ 401.271763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 401.274500] Buffer I/O error on dev loop0, logical block 245, lost async page write [ 401.294559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 401.312276] attempt to access beyond end of device [ 401.317511] loop0: rw=2049, want=247, limit=2 [ 401.322110] Buffer I/O error on dev loop0, logical block 246, lost async page write [ 401.333220] attempt to access beyond end of device [ 401.338469] loop0: rw=2049, want=248, limit=2 [ 401.345776] attempt to access beyond end of device [ 401.350850] loop0: rw=2049, want=249, limit=2 [ 401.357266] attempt to access beyond end of device [ 401.362322] loop0: rw=2049, want=262, limit=2 [ 401.367732] attempt to access beyond end of device [ 401.372809] loop0: rw=2049, want=263, limit=2 [ 401.377886] attempt to access beyond end of device [ 401.382952] loop0: rw=2049, want=264, limit=2 [ 401.387634] attempt to access beyond end of device [ 401.392786] loop0: rw=2049, want=265, limit=2 [ 401.440381] attempt to access beyond end of device [ 401.445474] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:53 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x1800000000000000]}}, 0x1c) 2018/04/13 23:38:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x0, 0x2], {0x0, 0x1c9c380}}) 2018/04/13 23:38:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000031000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x8, 0x12}]}, 0x24}, 0x1}, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) 2018/04/13 23:38:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0xd0640300, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:53 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xc1a, 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x5, 0x1, 0x4, 'queue0\x00', 0x3ff}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1c}, 0xd812}, {0xa, 0x4e23, 0x100000000, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffbff}, 0x7, [0xc1b, 0x2ec, 0x858b, 0x44, 0x6, 0x0, 0xfffffffffffffffc, 0xffffffffffffff01]}, 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x6, 0xffff, 0x4, 0x6, 0x3}, 0x14) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) connect$packet(r0, &(0x7f00000002c0)={0x11, 0xff, r2, 0x1, 0x0, 0x6, @random="91b3a4112cdf"}, 0x14) r3 = accept$ax25(r0, &(0x7f0000000300), &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={r1, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, [0x6, 0x8, 0x3, 0x2, 0x6, 0x3, 0x3, 0xffffffffffffffc1, 0x3d, 0x6, 0x80, 0x80, 0x0, 0x10001, 0x4]}, &(0x7f0000000480)=0x100) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000004c0)=""/166) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000580)={r1, 0x1}, 0x8) fadvise64(r3, 0x0, 0x5, 0x0) ioctl$KVM_NMI(r0, 0xae9a) r5 = memfd_create(&(0x7f00000005c0)='queue0\x00', 0x3) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000600)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000640)=@assoc_value={r4, 0x6}, &(0x7f0000000680)=0x8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f00000006c0)={0x1, 0x401, 0x8}) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000700)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000008c0)="175fe7393be1eab9e8ebbcedabbd8d2d", 0x10) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000000900)=0x5) fcntl$setstatus(r5, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000940)={0x7ff, 0x4, 0x80000001, 'queue0\x00', 0x6}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000a00)={0x8001, 0xac35}) r6 = fcntl$getown(r5, 0x9) r7 = syz_open_procfs(r6, &(0x7f0000000a40)='uid_map\x00') syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x200, 0x80000) read(r7, &(0x7f0000000ac0)=""/196, 0xc4) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000bc0)) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000c00)) 2018/04/13 23:38:53 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x5}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:53 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000008, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x4000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000001c0)={0xe2, 0xe5, 0x0, 0x7}, 0x6) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 2018/04/13 23:38:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028013086a0a00ffffffff007917b0"], &(0x7f0000000140)="47504c00bc3047629662c71f3f5f26c0b48bec3e7ba6eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xffffffce, &(0x7f0000000180)=""/206, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x7ffffffe, 0x303, &(0x7f0000000080)=""/187}, 0x48) [ 402.363644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.372074] FAT-fs (loop0): Directory bread(block 2) failed 2018/04/13 23:38:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x0, 0xfffffdfd], {0x0, 0x1c9c380}}) 2018/04/13 23:38:53 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0xfeffffff00000000]}}, 0x1c) 2018/04/13 23:38:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000040cfdc)="2400000058001f0014b2f407000904000200071008000100ffffffff0800030000000000", 0x24) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x67, @loopback=0x7f000001, 0x4e23, 0x0, 'rr\x00', 0x20, 0x80000001, 0x5d}, 0x2c) [ 402.403993] FAT-fs (loop0): Directory bread(block 3) failed [ 402.407373] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.434252] FAT-fs (loop0): Directory bread(block 4) failed 2018/04/13 23:38:53 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = dup(0xffffffffffffff9c) ioctl$KVM_SMI(r1, 0xaeb7) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_int(r2, 0x6, 0x1d, &(0x7f0000000040), 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) 2018/04/13 23:38:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x70edfc9a, {}, 0x0, 0x100000001}, 0xe) r1 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x3) bind$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x0, @my=0x0}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0xca, "81729b789638b33d5c7d09705f4670bc660c6a93facf6e034809901b9ec21fb67d5b3b1888c9188f9061bb2edf73c5c8eb3f96266031e09e3eeadbcbfdfe8770a6a47cca9bcf89dd4b849cc09556d6794dc8dd93b1eb7f9e819a54fd18c2bd5fc4ef330e310d66091b2150891aa07fa28af77769a7b4934438c0bbafff73a4081b7ff63ada6d50375f5ac88c06d4b73834cf8071e96aa97ba47469c3fe51e130f5a62e8ea8652c9232e8a9ef46d1fc4340e6371b98c53121e33297dd2cc499b56ea19726e49fb9bcb78c"}, &(0x7f0000000380)=0xd2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r2, 0x1e3, 0x8000000000000140}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e24, 0xffffffff, @mcast1={0xff, 0x1, [], 0x1}, 0x5e}}, 0x5, 0x81, 0x101, 0x9, 0xc}, 0x98) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000000)={{0x2, 0x0, 0xc000000000000000, 0x3, 0xffffffffffffffff}, 0x9, 0x80}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)) [ 402.461765] FAT-fs (loop0): Directory bread(block 5) failed 2018/04/13 23:38:53 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x3ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x80) 2018/04/13 23:38:53 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x600000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x0, 0x100000000000000], {0x0, 0x1c9c380}}) [ 402.523427] FAT-fs (loop0): Directory bread(block 6) failed [ 402.555663] FAT-fs (loop0): Directory bread(block 7) failed 2018/04/13 23:38:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000000000)="0f212529dd0f09c4e2f2f72cfec4c19d65a9bafa0000c4c37d4c4d03000f20c035020000000f22c00f009004000000e374f0824d0000", 0x36}], 0x1, 0x0, &(0x7f0000753ff0), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/13 23:38:53 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0xffffffff00000000]}}, 0x1c) [ 402.608232] FAT-fs (loop0): Directory bread(block 8) failed [ 402.623627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.643825] FAT-fs (loop4): Directory bread(block 1) failed [ 402.675478] FAT-fs (loop0): Directory bread(block 9) failed [ 402.691205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.706694] FAT-fs (loop4): Directory bread(block 2) failed [ 402.745524] FAT-fs (loop0): Directory bread(block 10) failed [ 402.751122] FAT-fs (loop4): Directory bread(block 3) failed [ 402.765694] FAT-fs (loop4): Directory bread(block 4) failed [ 402.773588] FAT-fs (loop4): Directory bread(block 5) failed [ 402.779745] FAT-fs (loop4): Directory bread(block 6) failed [ 402.786292] FAT-fs (loop4): Directory bread(block 7) failed [ 402.792481] FAT-fs (loop4): Directory bread(block 8) failed [ 402.798946] FAT-fs (loop4): Directory bread(block 9) failed [ 402.802844] FAT-fs (loop0): Directory bread(block 11) failed [ 402.807756] FAT-fs (loop4): Directory bread(block 10) failed [ 402.844394] FAT-fs (loop4): FAT read failed (blocknr 1) [ 402.857164] attempt to access beyond end of device [ 402.862290] loop0: rw=2049, want=246, limit=2 [ 402.892518] attempt to access beyond end of device [ 402.897695] loop0: rw=2049, want=247, limit=2 [ 402.903960] attempt to access beyond end of device [ 402.909169] loop0: rw=2049, want=248, limit=2 [ 402.914542] attempt to access beyond end of device [ 402.919746] loop0: rw=2049, want=249, limit=2 [ 402.924929] attempt to access beyond end of device [ 402.929943] loop0: rw=2049, want=262, limit=2 [ 402.934527] attempt to access beyond end of device [ 402.939498] loop0: rw=2049, want=263, limit=2 [ 402.944095] attempt to access beyond end of device [ 402.949089] loop0: rw=2049, want=264, limit=2 [ 402.953657] attempt to access beyond end of device [ 402.958634] loop0: rw=2049, want=265, limit=2 [ 403.004355] attempt to access beyond end of device [ 403.009386] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:54 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000346fc8)={&(0x7f0000baefec)=@ll, 0x14, &(0x7f0000ca3000)=[{&(0x7f00000b4000)=""/15, 0xf}, {&(0x7f0000f6afa9)=""/87, 0x57}, {&(0x7f00008e3f35)=""/203, 0xcb}, {&(0x7f0000cd5ffe)=""/2, 0x2}], 0x4, &(0x7f0000a01f13)=""/237, 0xed}, 0x0) socketpair$inet6(0xa, 0xe, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0xf14}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x0, 0x6, 0x1, 0x0, 0x14}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x200003ff, 0x4b8, &(0x7f00005d4000)=""/251}, 0x48) 2018/04/13 23:38:54 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x6000000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x0, 0x200000000000000], {0x0, 0x1c9c380}}) 2018/04/13 23:38:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x20000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) 2018/04/13 23:38:54 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0xfffffffe]}}, 0x1c) 2018/04/13 23:38:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000080)={0x8, 0x2, 0x8}) connect$netrom(r1, &(0x7f00000000c0)=@ax25={0x3, {"3fc34a3a607b5b"}, 0x40}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000001) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x11e}]}) 2018/04/13 23:38:54 executing program 1: accept(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x80) signalfd4(0xffffffffffffffff, &(0x7f0000000780), 0x8, 0x0) getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001c00)={{{@in6=@dev}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000001d00)=0xe8) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/ppp\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000001ec0)='cgroup.subtree_control\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000002100)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) socket$inet6_dccp(0xa, 0x6, 0x0) gettid() getuid() bpf$OBJ_GET_PROG(0x7, &(0x7f0000003e80)={&(0x7f0000003e40)='./file0\x00'}, 0x10) accept(0xffffffffffffff9c, &(0x7f0000003f00)=@pppoe={0x0, 0x0, {0x0, @local}}, &(0x7f0000003f80)=0x80) socket$inet_smc(0x2b, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004540)=[{&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000003c0), 0x0, &(0x7f00000007c0)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18, 0x8084}], 0x1, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6, @in6=@dev}}, {{@in=@dev}}}, &(0x7f0000000080)=0xe8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='setgroups\x00') ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) sendfile(r3, r3, &(0x7f00006c7000), 0x2a) 2018/04/13 23:38:54 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x4, 0x7fff, 0x41df, 0x100000000}, 0x6) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 403.504790] FAT-fs (loop0): Directory bread(block 2) failed [ 403.514681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.530659] FAT-fs (loop0): Directory bread(block 3) failed [ 403.547649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x0, 0xfdfdffff00000000], {0x0, 0x1c9c380}}) 2018/04/13 23:38:54 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x31c]}}, 0x1c) 2018/04/13 23:38:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = dup2(r0, r1) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000040)=0x1f, 0x4) 2018/04/13 23:38:54 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0xc3ffffff00000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) [ 403.559620] FAT-fs (loop0): Directory bread(block 4) failed [ 403.576256] FAT-fs (loop0): Directory bread(block 5) failed [ 403.592792] FAT-fs (loop0): Directory bread(block 6) failed 2018/04/13 23:38:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x85, 0xffffffffffffffff}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000009500000004000000c9002b4d7a08c7dbf23dc352"], &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x50, &(0x7f0000000040)}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)={0x2, 0x0, [0x0, 0x0]}) [ 403.649384] FAT-fs (loop0): Directory bread(block 7) failed [ 403.682965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.684921] FAT-fs (loop0): Directory bread(block 8) failed 2018/04/13 23:38:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000e971000040"]) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x1, 0x1, 0x6, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 2018/04/13 23:38:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x0, 0x1000000], {0x0, 0x1c9c380}}) 2018/04/13 23:38:54 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x4]}}, 0x1c) [ 403.727251] FAT-fs (loop0): Directory bread(block 9) failed [ 403.742898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.745450] FAT-fs (loop0): Directory bread(block 10) failed [ 403.820687] FAT-fs (loop0): Directory bread(block 11) failed [ 403.947012] attempt to access beyond end of device [ 403.952124] loop0: rw=2049, want=246, limit=2 [ 403.966166] attempt to access beyond end of device [ 403.971265] loop0: rw=2049, want=247, limit=2 [ 403.976132] attempt to access beyond end of device [ 403.981116] loop0: rw=2049, want=248, limit=2 [ 403.985681] attempt to access beyond end of device [ 403.991167] loop0: rw=2049, want=249, limit=2 [ 403.995730] attempt to access beyond end of device [ 404.000695] loop0: rw=2049, want=262, limit=2 [ 404.005286] attempt to access beyond end of device [ 404.010276] loop0: rw=2049, want=263, limit=2 [ 404.014852] attempt to access beyond end of device [ 404.019834] loop0: rw=2049, want=264, limit=2 [ 404.024415] attempt to access beyond end of device [ 404.029389] loop0: rw=2049, want=265, limit=2 [ 404.069363] attempt to access beyond end of device [ 404.074424] loop0: rw=1, want=329, limit=2 2018/04/13 23:38:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x400040, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2e0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303}, @increfs={0x40046304}], 0x1, 0x0, &(0x7f00000000c0)="c1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/13 23:38:55 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000280)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') umount2(&(0x7f0000000100)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x6, 0x64) close(r1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast=0xffffffff}, 0x3, 0x3, 0x0, 0x4}}, 0x26) 2018/04/13 23:38:55 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x20000000]}}, 0x1c) 2018/04/13 23:38:55 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x200000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x48}, 0x1}, 0x0) 2018/04/13 23:38:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1000, 0x40000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x800c, 0x3e3d, 0x7ff, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0x4}, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) gettid() ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000340)={0x8, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e23}, {0x2, 0x4e22, @multicast2=0xe0000002}, 0x10, 0xffffffffffffffff, 0xffff, 0xfffffffffffffffa, 0xfffffffffffffffc, &(0x7f0000000300)='vlan0\x00', 0x8, 0x1, 0x100000001}) getsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0), &(0x7f0000000400)=0x4) gettid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)) gettid() fcntl$getown(r2, 0x9) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=0x0) r6 = getpgrp(r5) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x80000001) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x40000, 0x0) pause() syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b9810500000f3241cfc421addc54c1adc4a3394c7a00602e8d5f380f21cd0f01c2c744240000800000c7442402a1f504f3c7442406000000000f011c240fc71fc422a997a778000000", 0x49}], 0x1, 0x2, &(0x7f0000000480), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$rds(r2, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr}, 0x10) 2018/04/13 23:38:55 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x87, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)=""/250) 2018/04/13 23:38:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x0, 0x2000000], {0x0, 0x1c9c380}}) 2018/04/13 23:38:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) ftruncate(r0, 0x9000) io_submit(r1, 0x1, &(0x7f0000002040)=[&(0x7f0000000100)={0x6464030000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)='a', 0x1}]) [ 404.424851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 404.436857] FAT-fs (loop0): Directory bread(block 2) failed [ 404.440295] binder: 29570:29575 BC_FREE_BUFFER u0000000000000000 no match [ 404.443984] FAT-fs (loop0): Directory bread(block 3) failed [ 404.464488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/13 23:38:55 executing program 1: r0 = perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000500)=""/191, 0x110, 0x0, &(0x7f0000000480)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) accept4$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80000) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0}, &(0x7f0000000140)=0x10) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000380)=""/28) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x6, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) r5 = getgid() setgid(r5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x55, 0x0, 0x5, 0x4, 0x0, 0x8f8f, 0x0, 0x2, 0x0, 0x5, 0x6, 0x2, 0x711, 0x7, 0x7fff, 0xfff, 0x0, 0x70, 0x1, 0x8, 0x1, 0x8, 0x80, 0x0, 0x4, 0x7fff, 0xffffffffffffffff, 0x3, 0x100000000, 0x6, 0x5, 0xffffffff, 0x4, 0xffff, 0x2, 0xfffffffffffffff9, 0x0, 0x6, 0x4, @perf_config_ext={0x388, 0x4}, 0x1b, 0x9, 0x200, 0x6, 0x9, 0x5}, r6, 0x3, r0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000240)={0x4, 0xe69b}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xb) sendfile(r2, r2, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) sync() dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) prctl$intptr(0x2b, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) 2018/04/13 23:38:55 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0xfc00000000000000]}}, 0x1c) 2018/04/13 23:38:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000001c0)={{0x100000001, 0x0, 0x0, 0x0, "4eaddbff8cac46d5ebcaefa762b6f6d1906b3a9ed3a96bb2c9f4d2ca76a73df7ca25c2a65f9e8871fa63d867"}, 0x0, [0x0, 0x0, 0xfdfdffff00000000], {0x0, 0x1c9c380}}) [ 404.493953] FAT-fs (loop0): Directory bread(block 4) failed [ 404.524483] FAT-fs (loo